Privacy policy
Last updated: November 2, 2026
Spinely Pty Ltd (ABN 76 694 729 925) (“Spinely”, “we”, “us” or “our”) operates this store and website, including all related information, content, features, tools, products and services, to provide customers with a curated shopping experience (the “Services”).
Spinely is an Australian-owned and operated business serving customers in Australia, New Zealand, the United Kingdom, Singapore and Canada.
Our Services are powered by Shopify, which enables us to operate our online stores and process customer transactions.
This Privacy Policy explains how we collect, use, store, process and disclose your personal information when you visit our websites, use our Services, make a purchase or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy concerning the processing of personal information, this Privacy Policy will apply to the extent permitted by law.
Please read this Privacy Policy carefully to understand how we handle your personal information and the choices available to you.
Personal Information We Collect or Process
Personal information refers to information that identifies, relates to or can reasonably be associated with an identifiable individual.
Depending on your interactions with our Services and applicable laws, we may collect and process the following categories of personal information:
- Contact Information: Name, email address, telephone number, billing address and shipping address.
- Payment Information: Payment method, transaction details, payment confirmations and billing information. Full payment card details are securely processed by authorised payment providers and are not directly stored by Spinely.
- Account Information: Account identifiers, preferences, settings and authentication-related information managed through our e-commerce platform.
- Order and Transaction Information: Products viewed, added to cart, purchased, returned, exchanged or cancelled, including order history and delivery information.
- Customer Communications: Emails, enquiries, support requests, feedback and other communications with our customer service team.
- Device and Technical Information: IP address, browser type, device characteristics, operating system, approximate location derived from IP address and network information.
- Website Usage Information: Pages visited, browsing activity, interactions with products, referral sources and engagement with our Services.
- Marketing Preferences: Email subscription status, advertising preferences and consent choices where applicable.
We collect personal information reasonably necessary for the purposes described in this Privacy Policy.
Sources of Personal Information
We may collect personal information from the following sources:
- Directly from you: When you make a purchase, create an account, subscribe to marketing communications, contact customer support or otherwise interact with our Services.
- Automatically: Through cookies, pixels, analytics tools and similar technologies when you browse or interact with our websites.
- Service Providers: Including Shopify, payment processors, shipping providers, customer support platforms and other companies supporting our operations.
- Advertising and Analytics Partners: Such as Meta and Google, where permitted by applicable law and your privacy preferences.
- Other Third Parties: Where permitted by law, including fraud prevention services and technology providers.
How We Use Your Personal Information
We may process your personal information for the following purposes:
Providing and Improving Our Services
To process payments, fulfil orders, arrange deliveries, manage customer accounts, facilitate returns and refunds, provide product reviews and improve our shopping experience.
Marketing and Advertising
To communicate promotional offers, product updates and relevant advertising, subject to applicable marketing laws and consent requirements.
We may use advertising platforms, including Meta and Google, to measure advertising performance, understand customer interactions and deliver relevant advertisements.
Where required by law, we obtain consent before using personal information or tracking technologies for non-essential advertising purposes.
Customer Support and Communication
To respond to enquiries, provide order updates, resolve complaints and assist customers with purchases, deliveries, returns and product-related questions.
Security and Fraud Prevention
To protect customer accounts, authenticate transactions, identify potential fraud, prevent unauthorised activity and maintain the security of our Services.
Analytics and Business Improvement
To understand how customers interact with our websites, evaluate website performance, improve products and optimise our Services.
Legal and Regulatory Compliance
To comply with applicable laws, maintain required business records, respond to lawful requests, resolve disputes and protect our legal rights.
Legal Bases for Processing Personal Information
Where required by applicable law, including the UK General Data Protection Regulation (UK GDPR), we process personal information based on one or more of the following legal grounds:
- Contractual Necessity: To process purchases, fulfil orders, arrange deliveries and provide requested Services.
- Legitimate Interests: To operate and improve our business, prevent fraud, provide customer support and maintain website security, where those interests are not overridden by your rights and freedoms.
- Consent: For certain marketing communications, non-essential cookies, personalised advertising and other activities requiring your permission.
- Legal Obligations: To comply with tax, accounting, consumer protection and other applicable legal requirements.
Where processing relies on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing conducted before withdrawal.
Cookies, Tracking Technologies and Advertising
Our websites use cookies, pixels and similar technologies to support website functionality, understand visitor behaviour, improve the shopping experience and measure advertising performance.
Essential Cookies
Necessary for the operation of our websites, including shopping cart functionality, checkout processes, security, authentication and fraud prevention.
Analytics Cookies
Used to understand website traffic, visitor interactions, product engagement and overall website performance.
Advertising and Marketing Cookies
Used to measure advertising effectiveness, understand customer interactions with advertisements and, where permitted, deliver more relevant promotional content across advertising platforms.
These may include technologies provided by Meta, Google and other advertising partners.
Preference Cookies
Used to remember certain customer preferences and settings where supported.
Managing Your Cookie Preferences
Depending on your location, you may be presented with a cookie consent banner or privacy preference controls.
Where required by applicable law, non-essential cookies and tracking technologies will only be activated after the necessary consent has been obtained.
You may manage your preferences through any privacy controls available on our website or through your browser settings.
Disabling certain cookies may affect website functionality or personalised features.
Different consent requirements may apply depending on your country or region, including the United Kingdom and the Canadian province of Quebec.
We respect applicable consent requirements and aim to provide customers with appropriate privacy choices.
Email Marketing and Promotional Communications
If you subscribe to our marketing communications, we may send emails containing promotional offers, product announcements, special discounts and other information about Spinely.
Marketing communications are sent in accordance with applicable laws, including Australia's Spam Act 2003, New Zealand's Unsolicited Electronic Messages Act 2007, the United Kingdom's electronic marketing rules, Singapore's applicable PDPA requirements and Canada's Anti-Spam Legislation (CASL).
Where consent is required, we will obtain it before sending marketing communications.
You may unsubscribe at any time by using the unsubscribe link included in our promotional emails or by contacting us.
Unsubscribing from promotional communications will not prevent us from sending essential transactional messages relating to your orders, deliveries, returns or customer support requests.
How We Disclose Personal Information
We may disclose personal information to trusted third parties when reasonably necessary to operate our Services.
- Shopify: Our e-commerce platform and associated services.
- Payment Providers: To securely process transactions and manage payments.
- Shipping and Logistics Providers: To fulfil purchases, arrange deliveries and manage returns.
- Customer Support Providers: To assist with enquiries and customer service operations.
- Advertising and Analytics Providers: Including Meta and Google, subject to applicable privacy requirements.
- Technology and IT Providers: To maintain website performance, security and business operations.
- Professional Advisers and Authorities: Where necessary for legal, accounting, regulatory or compliance purposes.
- Business Transaction Parties: Where reasonably necessary in connection with a merger, acquisition, restructuring or transfer of business assets, subject to applicable law.
Where appropriate, we require service providers acting on our behalf to handle personal information securely and in accordance with applicable privacy obligations.
We do not sell customer personal information for monetary payment.
However, certain disclosures to advertising or analytics partners may be classified as sharing, targeted advertising or similar regulated activities under applicable privacy laws. Where required, we provide relevant notices and consent or opt-out options.
Relationship with Shopify
Our online stores are hosted by Shopify, which provides the technology necessary to operate our Services.
Shopify may collect and process personal information in connection with website functionality, account services, checkout, payments, analytics and other platform features.
Depending on the service involved, Shopify may process certain information on our behalf or for its own purposes.
Information submitted through our Services may be processed by Shopify or its authorised service providers in countries outside your country of residence.
For further information about Shopify's privacy practices and available privacy rights, visit:
International Transfers of Personal Information
Spinely Pty Ltd is based in Australia and serves customers internationally.
To operate our Services, personal information may be transferred to, stored or processed in countries outside your country of residence, including Australia and countries where Shopify, payment providers, advertising platforms, logistics companies or other service providers operate.
These countries may have privacy laws different from those in your country.
Where required by applicable law, we take appropriate steps to protect personal information transferred internationally.
Such measures may include contractual safeguards, recognised international data transfer mechanisms, service provider agreements and other legally appropriate protections.
For transfers subject to UK data protection law, we use applicable safeguards where required, such as recognised adequacy arrangements or appropriate contractual transfer mechanisms.
For customers in other jurisdictions, we apply the relevant requirements concerning overseas disclosure and cross-border processing.
Third-Party Websites and Services
Our websites may contain links to third-party websites, applications or services that are not operated or controlled by Spinely.
We are not responsible for the privacy practices, content or security of these third-party services.
We encourage customers to review the privacy policies of third-party websites before submitting personal information.
Children's Privacy
Our Services are intended for adult customers and are not directed towards children.
We do not knowingly collect personal information from children in circumstances prohibited by applicable law.
If we become aware that personal information has been collected from a child without the required authorisation, we will take appropriate steps to delete or otherwise handle that information in accordance with applicable law.
Security of Personal Information
We take reasonable technical, administrative and organisational measures to protect personal information against unauthorised access, disclosure, alteration, misuse and loss.
These measures may include secure payment processing, access controls, reputable technology providers and security practices appropriate to our operations.
Although we make reasonable efforts to protect personal information, no method of electronic storage or internet transmission is entirely secure.
Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.
Retention periods may vary depending on:
- The nature of the information collected.
- The purposes for which the information is used.
- Applicable tax, accounting and consumer protection requirements.
- The need to resolve disputes, process refunds or maintain transaction records.
- Applicable legal, regulatory or contractual obligations.
When personal information is no longer reasonably required, we take appropriate steps to delete, anonymise or securely dispose of it, subject to applicable legal requirements.
Your Privacy Rights and Choices
Depending on your country or region, you may have certain rights concerning your personal information.
These may include the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information, where applicable.
- Withdraw consent where processing is based on consent.
- Object to certain types of processing, including direct marketing.
- Request restriction of processing in circumstances provided by law.
- Request data portability, where applicable.
- Manage cookie and advertising preferences.
- Opt out of promotional communications.
- Lodge a complaint with an applicable privacy regulator.
These rights may be subject to legal limitations and exceptions.
To exercise your rights, please contact us at [email protected].
We may request reasonable information to verify your identity before processing certain privacy requests.
We will respond within the timeframes required by applicable law.
Privacy Rights by Country or Region
Australia
For customers in Australia, we handle personal information in accordance with applicable Australian privacy legislation, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where applicable.
Australian customers may request access to and correction of their personal information.
Privacy complaints may be directed to Spinely using the contact information below.
Where applicable, customers may also contact the Office of the Australian Information Commissioner (OAIC).
New Zealand
For customers in New Zealand, applicable privacy rights are governed by the Privacy Act 2020.
Customers may request access to and correction of their personal information and may raise concerns about the handling or international disclosure of their information.
Privacy complaints may be referred to the Office of the Privacy Commissioner where applicable.
United Kingdom
For customers in the United Kingdom, we comply with applicable UK data protection requirements, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), to the extent they apply to our activities.
Eligible individuals may have rights including access, rectification, erasure, restriction of processing, data portability and objection to certain processing activities.
Where we rely on consent, customers may withdraw that consent.
Customers may also raise concerns with the Information Commissioner's Office (ICO).
Singapore
For customers in Singapore, we handle personal information in accordance with applicable requirements of the Personal Data Protection Act 2012 (PDPA).
Subject to applicable conditions and exceptions, customers may request access to and correction of their personal data and withdraw consent for certain processing activities.
Questions relating to personal data protection may be directed to our designated privacy contact at [email protected].
Where applicable, complaints may be directed to the Personal Data Protection Commission (PDPC).
Canada
For customers in Canada, we handle personal information in accordance with applicable federal and provincial privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial privacy laws, to the extent applicable.
Depending on the province and circumstances, customers may have rights to access, correct or request the deletion of their personal information, withdraw consent and obtain information about how their data is processed.
Quebec Residents
For customers in Quebec, additional requirements may apply under Quebec's private-sector privacy legislation, as amended by Law 25.
These may include additional rights relating to access, correction, withdrawal of consent, de-indexation and data portability, where applicable.
Where required, consent will be obtained before activating non-essential technologies that identify, locate or profile individuals.
Customers may direct privacy enquiries to Spinely using the contact information below.
Where applicable, privacy concerns may be referred to the Office of the Privacy Commissioner of Canada (OPC) or the relevant provincial privacy regulator.
Privacy Complaints
If you believe your personal information has been handled inappropriately, please contact us at [email protected].
We will review your enquiry, investigate the circumstances where appropriate and respond in accordance with applicable privacy laws.
If you are dissatisfied with our response, you may have the right to contact the relevant privacy authority in your country or region.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business operations, technology, legal obligations or privacy practices.
Any updates will be published on this page with a revised "Last updated" date.
Where required by applicable law, we will provide additional notice or obtain consent for material changes affecting the processing of personal information.
Contact Information
If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal information, please contact:
Spinely Pty Ltd
ABN: 76 694 729 925
Country: Australia
Email: [email protected]
Privacy Enquiries: [email protected]
We aim to respond to privacy-related enquiries promptly and in accordance with applicable legal requirements.