Privacy policy.

01Who we are

This policy sets out how MarloBody collects, holds, uses and discloses personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can contact us at hello@marlobody.com.

MarloBody is run from Denmark, so we also follow the EU General Data Protection Regulation (GDPR). Where the two differ, we follow whichever gives you more protection.

02What we collect

We collect the information needed to take and deliver an order: your name, email address, delivery address, phone number and order history. We also keep the emails you send us.

Payment card details are processed by our payment provider and are not stored by us.

03How we collect it

We collect personal information directly from you when you place an order, join our email list or contact us by email. We also collect information through cookies and similar technologies when you use this website.

04Why we use it

We use personal information to process and deliver orders, to handle returns and claims, to answer enquiries and to meet our legal obligations.

We send marketing emails only to people who have asked to receive them. The box for this is never ticked for you.

05Who we share it with

We disclose personal information only to the extent needed for the purposes set out in this policy, to: the provider of our online store, our payment providers, the supplier and the carriers that pack and deliver your order, and the providers of our advertising and analytics services.

Today these are: Shopify (our online store, order emails and marketing emails), Shopify Payments and its card processor Stripe, PayPal if you choose to pay with it, our manufacturer and its carriers (your name, delivery address, phone number and the items in your order, so they can pack and deliver it), and Meta (Facebook and Instagram, to measure our ads). We do not sell personal information.

06Sending data overseas

Some of the recipients listed above are located outside Australia. Personal information is sent overseas only to the extent needed to run the online store, take payment and deliver your order.

The countries are: Canada and the United States (Shopify, Stripe, PayPal, Meta), Ireland (Meta in Europe), Denmark (where MarloBody is run) and China (our manufacturer, for delivery details only).

07Cookies and tracking

This website uses cookies and similar technologies to keep the items in your bag, to measure how the website is used and to measure advertising. You can block or delete cookies in your browser settings. If you do, some parts of the website may not work as intended.

To measure our ads we use the Meta Pixel, which tells Meta when someone who saw an ad visits this website or places an order. You can control how Meta uses this in your Facebook or Instagram ad settings, under "Activity information from ad partners".

08Marketing emails

We send marketing emails in accordance with the Spam Act 2003 (Cth). Every marketing email contains an unsubscribe link. You may also unsubscribe at any time by emailing hello@marlobody.com.

09Keeping it safe

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

We keep personal information only for as long as it is needed for the purposes set out in this policy or as required by law. After that it is destroyed or de-identified.

10Access and correction

You may ask for access to the personal information we hold about you, or ask us to correct it, by emailing hello@marlobody.com. You can also ask us to delete it, or to stop using it for marketing. We will respond within 30 days.

11Complaints

If you believe we have not handled your personal information in accordance with the Australian Privacy Principles, email hello@marlobody.com with the details. We will investigate and respond.

If you are not satisfied with our response, you may make a complaint to the Office of the Australian Information Commissioner at oaic.gov.au, or to the Danish Data Protection Agency at datatilsynet.dk.

12Changes to this policy

We may update this policy from time to time. The current version is the one published on this page, and its date is shown at the top of this page.