Privacy policy

Privacy Policy

Last Updated: 12 January 2026

Cotton & Blue Denim (CNBD) ("we," "us," or "our") operates the website www.cnbd.shop and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

Our Details:Cotton & Blue Denim

Email: contact@cnbd.com.au

ABN:  70 643 644 348

By using our website and services, you consent to the collection and use of your information as described in this policy.

1. Information We Collect

We collect personal information necessary to provide our products and services. The types of information we collect include:

Personal Identification Information

  • Full name
  • Email address
  • Phone number
  • Billing and shipping addresses
  • Date of birth (if provided)

Payment Information

  • Credit/debit card details (processed securely by our payment provider)
  • Transaction history

Technical Information

  • IP address
  • Browser type and version
  • Device information
  • Cookies and tracking data (see Section 8)

Behavioral Information

  • Pages visited on our website
  • Products viewed and purchased
  • Email engagement (opens, clicks)

2. How We Collect Information

We collect information:

  • Directly from you when you create an account, place an order, subscribe to our newsletter, or contact us
  • Automatically through cookies and analytics tools when you browse our website
  • From third parties such as payment processors (Shopify Payments), shipping providers, and social media platforms

3. How We Use Your Information

We use your personal information for the following purposes, in accordance with APP 6:

  • Order fulfillment - Processing and delivering your purchases
  • Customer service - Responding to inquiries and resolving issues
  • Marketing - Sending promotional emails (with your consent)
  • Website improvement - Analyzing site usage to enhance user experience
  • Legal compliance - Meeting tax, accounting, and regulatory obligations
  • Fraud prevention - Protecting against unauthorized transactions

4. Marketing Communications

With your consent, we may send you promotional emails about new products, special offers, and updates. You can opt out at any time by:

  • Clicking "unsubscribe" in any marketing email

  • Emailing contact@cnbd.com.au with "Unsubscribe" in the subject line

  • Updating your preferences in your account settings

We comply with the Spam Act 2003 and will never sell your email address to third parties for marketing purposes.

5. How We Share Your Information

We may disclose your personal information to:

Service Providers

  • Shopify - Our e-commerce platform provider
  • Payment processors - To process transactions securely
  • Shipping carriers - Australia Post, CouriersPlease, etc.
  • Email marketing tools - To send newsletters (e.g., Mailchimp, Klaviyo)
  • Analytics providers - Google Analytics, Facebook Pixel

Legal Obligations

  • When required by law or to comply with legal processes
  • To protect our rights, property, or safety
  • In connection with a business sale or merger

Cross-Border Disclosure (APP 8)

Some of our service providers are located overseas, including in the United States and Europe. By using our services, you consent to your information being transferred to these countries. We ensure all overseas recipients comply with privacy standards equivalent to the APPs.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • SSL encryption for all data transmitted through our website
  • PCI DSS compliance for payment processing
  • Secure servers with restricted access
  • Regular security audits

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:

  • Order and transaction data - 7 years (tax and accounting requirements)
  • Marketing data - Until you unsubscribe or 2 years of inactivity
  • Account information - Until you request deletion or 3 years of inactivity
  • Website analytics - 26 months (Google Analytics default)

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device.

Types of Cookies We Use

  • Essential Cookies - Required for website functionality (shopping cart, checkout)
  • Analytics Cookies - Google Analytics to understand site usage
  • Marketing Cookies - Facebook Pixel, Google Ads for targeted advertising
  • Preference Cookies - Remember your settings and preferences

Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. For more information, visit www.aboutcookies.org.

9. Your Privacy Rights

Under the Australian Privacy Act and APPs, you have the following rights:

Access (APP 12)

Request a copy of the personal information we hold about you.

Correction (APP 13)

Request correction of inaccurate or incomplete information.

Deletion

Request deletion of your personal information (subject to legal retention requirements).

Opt-Out

Unsubscribe from marketing communications at any time.

Complaint

Lodge a complaint about how we handle your personal information.

To exercise these rights, contact us at contact@cnbd.com.au.

We will respond to your request within 30 days. There is no fee for access requests unless the request is complex or voluminous.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., social media platforms, payment gateways). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our website is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.

13. Complaints and Disputes

If you have a complaint about how we handle your personal information:

  1. Contact us first at contact@cnbd.com.au - We will investigate and respond within 30 days.

  2. If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

14. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights:

Cotton & Blue Denim

Email: contact@cnbd.com.au