Privacy policy

Privacy Policy

Last updated: October 2026 · NIRÓU Pty Ltd

NIRÓU Pty Ltd · Registered in Victoria, Australia · Contact: support@nirou.com.au

Section 1 — About This Policy

NIRÓU Pty Ltd ("NIRÓU", "we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs") contained in Schedule 1 of that Act.

If you are located in the European Union or European Economic Area, we also acknowledge your rights under the General Data Protection Regulation (EU) 2016/679 ("GDPR"). Where GDPR applies, we act as a data controller in respect of your personal information.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and how you can access, correct, or seek deletion of your information.

By using our website, placing an order with us, or communicating with us, you consent to the collection and use of your information as described in this Policy.

Section 2 — What Personal Information We Collect

Contact and account information. Full name, email address, and phone number (if provided).

Order and delivery information. Delivery address, order history, and transaction records.

Technical and usage information. IP address, device identifiers, browser type, pages visited, and time spent on pages — collected via cookies and analytics tools.

Payment information. We do not directly collect or store payment card details. Payment processing is handled by Shopify checkout and our enabled payment providers, who are independently subject to PCI-DSS. We receive only a transaction confirmation.

Section 3 — How We Collect Personal Information

Directly from you — when you place an order, subscribe to our newsletter, contact us, or otherwise communicate with us.
Automatically — through cookies, pixel tags, and similar technologies when you visit our website.
From third-party platforms — our website operates on Shopify; these platforms may collect information on our behalf.

Section 4 — Why We Collect and Use Your Information

To fulfil your orders. Processing, packaging, and delivering your purchases; communicating about order status and any issues.

To communicate with you. Responding to enquiries, providing customer support, and sending transactional emails.

To send marketing communications. If you have opted in, we may send newsletters and promotional offers. You may unsubscribe at any time.

To improve our website. Analysing how visitors use our website to improve content and user experience.

To comply with legal obligations. Retaining records as required by Australian taxation and consumer protection law; responding to lawful requests from regulators.

GDPR Lawful Bases (EU/EEA visitors):

Contractual necessity (Art. 6(1)(b)) for order fulfilment
Legitimate interests (Art. 6(1)(f)) for analytics and fraud prevention
Consent (Art. 6(1)(a)) for marketing emails and non-essential cookies
Legal obligation (Art. 6(1)(c)) for record-keeping

Section 5 — Disclosure of Personal Information

We do not sell, rent, or trade your personal information. We share it only with the service providers below, solely for the purposes listed, so that we can run our business and fulfil your orders:

RecipientPurposeLocationShopify Inc.Website hosting, order management, checkout and payment servicesCanada / USAGoogle AnalyticsWebsite analytics (IP anonymised)Ireland / USAEmail service providerTransactional & marketing emailVariesShipping carriersDelivery of your orderAustralia / varies

We may also disclose information where required by law or court order, or in the event of a business sale or restructure.

Section 6 — Cross-Border Data Transfers

Some service providers are located outside Australia, including in the United States and Canada. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles. For EU/EEA data, we rely on Standard Contractual Clauses or equivalent adequacy mechanisms.

Section 7 — How We Protect Your Information

We take reasonable technical and organisational measures to protect your personal information, including SSL/TLS encryption in transit, access controls, and the use of security-certified third-party platforms. No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Section 8 — Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies for the following purposes:

TypePurposeExamplesEssential / FunctionalRequired for the website to workSession, cart cookiesAnalyticsUnderstanding visitor behaviourGoogle AnalyticsMarketing / RetargetingServing relevant adsMeta Pixel, Google Ads

You may control or disable cookies through your browser settings. Where required by law, we obtain your consent before setting non-essential cookies.

Section 9 — Retention of Information

Order and transaction records — 7 years (taxation law)
Customer account data — duration of account plus 2 years
Email marketing preferences — until unsubscribed or deletion requested
Analytics data — per platform policy (typically 26 months)

Section 10 — Your Rights and Choices

Under Australian law. You have the right to access personal information we hold about you, to request correction of inaccurate information, and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

Under GDPR (EU/EEA residents). In addition to the above: the right to erasure ("right to be forgotten"), restriction of processing, data portability, the right to object (including to direct marketing), and the right to withdraw consent at any time. To exercise any of these rights, contact us at support@nirou.com.au. We will respond within 30 days.