Privacy Policy

Last updated: 04/08/2026

Pawfect Pookies ABN 22 964 939 192 ("we", "us", "our") operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Through the Services we create personalised watercolour-style pet portraits from photographs you upload. Pawfect Pookies is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose and protect your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. It is designed to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and, where they apply, the GDPR and UK GDPR.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

 

---

 

1. Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or that has been de-identified so it cannot identify or be reasonably linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information, including inferences drawn from it:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.

• Photographs you upload ("Uploaded Content"), together with any metadata embedded in those files (such as the date, camera or device, and in some cases GPS location) — see Section 3.

• Portraits we create for you from your Uploaded Content.

• Financial information including payment card details, financial account information, transaction details, form of payment, payment confirmation and other payment details. Payment card numbers are collected and processed directly by our payment providers; we do not store full card numbers.

• Account information including your username, password, preferences and settings.

• Transaction information including the items you view, add to your cart, purchase, return, exchange or cancel, and your past transactions.

• Communications with us including the content of customer support enquiries, revision requests, and reviews you submit.

• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.

• Usage information including how and when you interact with or navigate the Services.

We do not knowingly collect sensitive information (as defined in the Privacy Act), and we ask that you do not upload photographs containing identifiable people. We do not use facial recognition or biometric analysis on any image you upload.

 

---

 

2. How We Collect Personal Information

We collect personal information:

• Directly from you — when you upload a photograph, create an account, place an order, contact us, subscribe to our mailing list, or otherwise provide information to us;

• Automatically through the Services — from your device when you use the Services, including through cookies and similar technologies;

• From our service providers — including Shopify, our payment providers, our AI image-generation provider, and our print and fulfilment partners, when they collect or process personal information on our behalf;

• From our partners or other third parties.

Where it is reasonable and practicable, we collect personal information directly from you. If we receive personal information about you that we did not solicit and could not lawfully have collected, we will destroy or de-identify it as required by APP 4.

 

---

 

3. Your Photographs

Because uploading a photograph is central to our Services, we treat Uploaded Content with particular care.

What we do with it. We use your Uploaded Content solely to generate your portrait preview, produce your finished portrait, fulfil and ship your order, action any revision or reprint request, and respond to related customer support enquiries.

How it is processed. Your portrait is created using artificial intelligence image-generation technology. This means your photograph is transmitted to and processed by our AI provider, Google (Gemini API), whose servers may be located outside Australia.

We do not train AI models on your photographs. We do not use your Uploaded Content to train, fine-tune or improve any AI model.

We do not use your photographs or portraits in marketing — not on our website, our social media, or in advertising — unless you have given us separate, express consent. You can withdraw that consent at any time by emailing us.

We do not sell your Uploaded Content or your portrait to any third party.

Metadata. Photographs often carry embedded metadata, which can include the location where the photo was taken. We do not use this metadata, and we strip it from files where technically able to do so. If you would prefer, you can remove metadata from your photograph before uploading it.

Retention. We retain Uploaded Content and finished portraits for 12 Months after your order is completed, so we can honour reprints, revisions and support requests. After that period we delete them. You may request earlier deletion at any time by emailing info@pawfectpookies.com, though this may mean we can no longer reproduce or reprint your portrait.

 

---

 

4. How We Use Your Personal Information

• Provide, tailor and improve the Services. To perform our contract with you: generating previews, creating and delivering portraits, processing payments, fulfilling and shipping orders, managing returns, exchanges and revisions, maintaining your account, remembering your preferences, enabling you to post reviews, and improving the Services.

• Marketing and advertising. To send you marketing and promotional communications by email, SMS or post, and to show you online advertising, including based on items you have viewed or added to your cart. We send commercial electronic messages in accordance with the Spam Act 2003 (Cth) — every marketing email includes an unsubscribe link, and we action unsubscribe requests promptly.

• Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, and detect, investigate or act on possible fraudulent, unlawful or malicious activity.

• Communicating with you. To provide customer support and maintain our business relationship with you.

• Legal reasons. To comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to participate in legal proceedings, and to enforce or investigate potential breaches of our terms or policies.

We will not use your personal information for a purpose unrelated to those set out above without your consent, unless permitted or required by law.

 

---

 

5. How We Disclose Personal Information

We may disclose your personal information to:

• Shopify, which hosts the Services (see Section 6);

• Our AI image-generation provider which processes your uploaded photograph to produce your portrait;

• Our print and fulfilment partners, which receive your name, shipping address and portrait file in order to produce and ship canvas and framed prints;

• Payment providers, which process your payment;

• Other service providers performing functions on our behalf, such as IT support, email delivery, data analytics, customer support and cloud storage;

• Business and marketing partners, to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. These partners use your information in accordance with their own privacy notices. Depending on where you live, you may have a right to direct us not to share information about you for targeted advertising;

• Third parties you direct us to, or where you otherwise consent;

• Our affiliates or others within our corporate group;

• Others in connection with a business transaction such as a merger or insolvency, to comply with legal obligations (including subpoenas, search warrants and similar requests), to enforce our terms, and to protect or defend the Services, our rights, and the rights of our users or others.

 

---

 

6. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside.

In addition, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these features, Shopify may make use of personal information collected about your interactions with our store, other merchants, and Shopify. In these circumstances Shopify is responsible for the processing of your personal information, including for responding to requests to exercise your rights over that use. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

 

---

 

7. Overseas Disclosure

We may transfer, store and process your personal information — including your Uploaded Content — outside Australia.

Before disclosing personal information overseas, we take steps reasonable in the circumstances to ensure the overseas recipient does not breach the Australian Privacy Principles, as required by APP 8. By providing your personal information to us, you acknowledge that overseas recipients may be subject to different privacy laws to those in Australia, and that we may not be able to take steps to protect information in the same way.

If we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or the equivalent issued by the relevant UK authority, unless the transfer is to a country determined to provide an adequate level of protection.

 

---

 

8. Cookies and Similar Technologies

We and our service providers use cookies, pixels and similar technologies to operate the store, remember your cart and preferences, measure how the Services are used, and deliver and measure advertising. You can control cookies through your browser settings, and through any cookie preference tool displayed on our site. Blocking some cookies may affect how the store functions. 

 

---

 

9. Third Party Websites and Links

The Services may link to websites or platforms operated by third parties. If you follow links to sites we do not control, you should review their privacy and security policies and terms. We do not guarantee and are not responsible for the privacy or security of those sites. Information you provide on public or semi-public venues, including third-party social networking platforms, may be viewable by others without limitation as to its use. Our inclusion of a link does not imply endorsement.

 

---

 

10. Children's Data

The Services are not intended for use by children. We do not knowingly collect personal information from anyone under 18. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below and we will delete it.

We do not sell or share the personal information of individuals under 16 years of age.

 

---

 

11. Security of Your Information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, including access controls and use of reputable hosting providers.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Information you send to us may not be secure while in transit. We recommend you do not use unsecured channels to send us sensitive or confidential information.

If we become aware of a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

 

---

 

12. Retention

How long we retain personal information depends on why we hold it:

We destroy or de-identify personal information when we no longer need it for any purpose for which it may lawfully be used or disclosed, unless we are required by law to retain it.

 

---

 

13. Your Rights and Choices

You may have some or all of the following rights in relation to your personal information, depending on where you live. These rights are not absolute and in some cases we may decline a request as permitted by law, in which case we will tell you why.

• Access. Request access to the personal information we hold about you.

• Correction. Request that we correct inaccurate, out-of-date, incomplete or misleading personal information.

• Deletion. Request that we delete personal information we hold about you, including your uploaded photographs.

• Portability. Request a copy of your personal information, or that we transfer it to a third party, in certain circumstances.

• Object or restrict. Object to, or ask us to restrict, certain processing.

• Marketing preferences. Opt out of marketing at any time using the unsubscribe link in our emails or by contacting us. If you opt out, we may still send non-promotional messages about your account or orders.

• Withdraw consent. Withdraw any consent you have given us, including consent to feature your pet's portrait in our marketing.

To exercise any of these rights, contact us using the details in Section 15. We will respond within 30 days as required by the Australian Privacy Principles. We may need to verify your identity first. You may appoint an authorised agent to make a request on your behalf; we will require proof of that authorisation.

We will not discriminate against you for exercising any of these rights.

To learn more about how Shopify uses your personal information and any rights you may have in relation to data processed by Shopify, visit https://privacy.shopify.com/en.

 

---

 

14. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details in Section 15. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

 

---

 

15. Contact

If you have questions about our privacy practices or this Privacy Policy, or wish to exercise any of your rights, contact us at:

Pawfect Pookies info@pawfectpookies.com

 

---

 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this page, update the "Last updated" date, and provide notice as required by applicable law.