Privacy policy

Last updated: June 2026

KINESTRA ("we", "us") operates this store. This policy explains how we collect, use and protect your personal information, in compliance with the Australian Privacy Act, the EU/UK GDPR and the California CCPA/CPRA.

What we collect — Order data (name, shipping address, email, phone, items purchased); payment data (processed entirely by PCI-DSS Level 1 providers — we never see or store card numbers); technical data (device, browser, IP, cookies); marketing data (email, only if you opt in).

Why — Order fulfilment and delivery; customer support, returns and warranty; fraud prevention; marketing emails with consent (unsubscribe anytime); tax and accounting obligations.

Sharing — Only what is needed to operate the store: Shopify (hosting), payment processors, shipping carriers and fulfilment partners (name and address, to deliver your parcel), and email providers. We never sell your personal information.

International transfers — Order data may be processed outside your country (e.g. Shopify infrastructure), protected by standard contractual clauses and equivalent safeguards.

Retention — Order records are kept as long as tax law requires (typically 7 years in Australia), then deleted. Marketing data is deleted on unsubscribe.

Your rights — Everyone: access, correction, deletion (subject to legal retention). EU/UK: additionally portability, restriction, objection, and complaint to your supervisory authority. California: right to know, delete, correct and opt out of sale/sharing — we do not sell or share personal information for cross-context advertising. Contact us via the Contact page; we respond within 30 days.

Cookies — Essential cookies keep your cart and checkout working; analytics cookies help us improve the store. Block non-essential cookies in your browser at any time.

Children — This store is not directed at children under 16 and we do not knowingly collect their data.