Privacy policy

This site is operated by INKUTTU Pty Ltd (ABN 53 655 857 042), an Australian-incorporated company headquartered in Sydney, NSW.

For the purposes of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), INKUTTU Pty Ltd is the data controller responsible for your personal information when you visit inkuttu.com or buy from us.

If you have questions about this policy or how we handle your data, contact our privacy team at privacy@inkuttu.com.

We collect personal information you provide directly to us, including:

• Account and order data — name, email, billing and shipping addresses, phone number, order history.
• Payment data — handled directly by our payment processors (Shopify Payments, PayPal, Afterpay, Apple Pay). We do not see or store your full card details.
• Communication data — emails you send us, contact form submissions, customer service interactions.
• Marketing preferences — newsletter subscription status, marketing preferences.

We also collect technical and behavioural data automatically when you visit our site:

• Device and browser data — IP address, browser type, device type, screen size.
• Usage data — pages viewed, products viewed, items added to cart, time spent on site.
• Cookies and similar technologies — see our Cookies section below.

We use your personal information for the following purposes:

• To process and deliver your orders — including payment, fulfilment, shipping, customer service, returns and refunds.
• To manage your account — including login, order history, saved addresses and wishlist.
• To communicate with you — order confirmations, shipping updates, customer service responses, and (where you've opted in) marketing emails.
• To improve our products and site — analysing how customers shop, identifying issues, testing changes.
• To prevent fraud and protect security — verifying orders, identifying suspicious activity, complying with legal obligations.
• To meet legal and regulatory obligations — including tax, consumer protection and anti-money-laundering laws.

We do not sell your personal information to third parties. We do not use your data for purposes you wouldn't reasonably expect from a clothing retailer.

We share personal information only with service providers who help us operate the business, and only as needed for them to do their job. These include:

• Shopify — our ecommerce platform, hosting and order management.
• Payment processors — Shopify Payments, PayPal, Afterpay, Apple Pay, Google Pay.
• Shipping carriers — Australia Post, DHL Express, and other regional carriers as relevant to your destination.
• Email and marketing — Klaviyo for transactional and marketing email and SMS.
• Analytics — Google Analytics and Meta Pixel, configured to respect the cookie consent choices you make on this site.
• Customer service tools — helpdesk software for managing customer enquiries.
• Professional advisers — accountants, lawyers and auditors, where legally required.

We require all service providers to handle your data in line with this policy and applicable privacy laws.

We may also disclose information where required by Australian law, including in response to lawful requests from law enforcement or government agencies.

We use cookies and similar technologies to make the site work, to remember your preferences, and to understand how customers shop with us. The categories we use are:

• Strictly necessary — required for the site to function (login, cart, checkout). Cannot be disabled.
• Functional — remember your preferences (language, region, recently viewed products).
• Analytics — help us understand how customers use the site so we can improve it.
• Marketing — used by us and our advertising partners to show relevant ads on other sites.

You can manage your cookie preferences through your browser settings, or through the cookie banner shown on your first visit. Disabling cookies may limit site functionality.

Some of our service providers (including Shopify, payment processors and email platforms) are based outside Australia, including in the United States, Canada and the European Union. When your data is transferred outside Australia, we take reasonable steps to ensure it remains protected to a standard consistent with the Australian Privacy Principles.

By providing your information to us, you consent to this transfer.

We keep personal information only for as long as it's needed for the purposes set out in this policy, or as required by law:

• Order and tax records — kept for at least 7 years to comply with Australian Taxation Office requirements.
• Account data — kept while your account is active. You can request deletion at any time.
• Marketing data — kept until you unsubscribe.
• Customer service correspondence — kept for up to 3 years to help with future enquiries.

Under Australian privacy law you have the right to:

• Access the personal information we hold about you.
• Correct any information that's inaccurate, out of date or incomplete.
• Request deletion of your information, subject to our legal obligation to retain certain records (e.g. tax records).
• Withdraw consent for marketing communications at any time, by clicking unsubscribe in any email or emailing us.
• Make a complaint about how we've handled your information.

To exercise any of these rights, email privacy@inkuttu.com. We'll respond within 30 days.

We take data security seriously and use reasonable technical and organisational measures to protect your personal information. These include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Restricted internal access to customer data — only team members who need it for their job.
• Reputable hosting and payment partners who maintain industry-standard security practices.
• Regular review of our practices in line with evolving security standards.

That said, no system is 100% secure. If we ever experience a data breach affecting your personal information, we'll notify you in line with the Notifiable Data Breaches scheme under the Privacy Act.

If you're concerned about how we've handled your personal information, please email privacy@inkuttu.com in the first instance. We'll investigate and respond within 30 days.

If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC):

• Phone: 1300 363 992
• Online: oaic.gov.au

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version will always be available at this URL, with the last updated date at the top of the page.

For material changes, we'll notify registered customers by email before the changes take effect.