Privacy Policy

1. Introduction

Story Bear (ABN 42 674 626 307) operates the website storybear.com.au (“the Site”). We are committed to protecting the privacy of our customers and visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our Site or placing an order with us, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the Site.

2. Information We Collect

2.1 Information you provide to us

When you place an order, create an account, subscribe to our newsletter, or contact us, we may collect:

• Full name
• Email address
• Shipping address (street address, city, state/territory, postcode)
• Phone number (if provided)
• Account login credentials (email and password)
• Payment information (processed securely by Stripe — we do not store your full card details)
• Any other information you voluntarily provide when contacting us via WhatsApp or other channels

2.2 Information collected automatically

When you visit the Site, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on those pages
• Referring website or link
• Device type and screen resolution

3. How We Use Your Information

We collect and use your personal information for the following purposes:

• Fulfilling orders — to process, ship, and deliver your book purchases
• Account management — to create and manage your Story Bear account
• Customer support — to respond to your enquiries and resolve any issues
• Newsletter and marketing — to send you new arrivals, promotions, and reading recommendations (only with your consent, and you can unsubscribe at any time)
• Improving our service — to understand how visitors use our Site so we can improve the shopping experience
• Legal compliance — to comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with the following service providers who assist us in operating our business:

• Stripe — our payment processor, which handles credit and debit card transactions securely. Stripe’s use of your data is governed by their own Privacy Policy.
• Supabase — our database and authentication provider, used to securely store account and order information.
• Web3Forms — used to process newsletter sign-up submissions.
• Shipping and courier services — your name and delivery address are shared with our delivery partners to fulfil your orders.

We may also disclose your information where required by law, in response to a valid legal request, or to protect the rights, safety, or property of Story Bear, our customers, or the public.

5. Cookies and Tracking

The Site uses cookies and similar technologies to enhance your browsing experience. These may include:

• Essential cookies — required for the Site to function, such as maintaining your shopping cart and login session
• Functional cookies — used to remember your preferences and settings
• Analytics cookies — help us understand how visitors use the Site so we can improve it

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site, such as the ability to add items to your cart or complete a purchase.

6. Data Storage and Security

Your personal information is stored securely using Supabase, which provides industry-standard encryption and security measures. Payment information is processed by Stripe and is never stored on our servers.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your data may be stored or processed on servers located outside of Australia by our service providers (such as Stripe and Supabase). Where this occurs, we take reasonable steps to ensure that your information receives a level of protection consistent with the Australian Privacy Principles.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access your personal information that we hold about you
• Request correction of any inaccurate or out-of-date information
• Request deletion of your personal information (subject to any legal obligations we may have to retain it)
• Opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly
• Complain about how we handle your personal information

To exercise any of these rights, please contact us using the details in Section 11 below. We will respond to your request within a reasonable timeframe.

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC).

8. Third-Party Links

Our Site may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.

9. Children’s Privacy

Story Bear sells children’s books, but our Site is intended for use by parents, guardians, and adult gift-givers. We do not knowingly collect personal information directly from children under 16 years of age. If you believe a child has provided us with personal information without parental consent, please contact us and we will take steps to remove that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or would like to make a complaint about how we handle your personal information, please contact us: