Privacy policy

Badfella (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit our website, place an order, sign up to our mailing list, or otherwise interact with us.

This policy is written in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or providing your personal information to us, you agree to the practices described below.

1. Who We Are

Badfella is a streetwear brand based in Australia. We operate the website badfellaco.com (the “Site”).

For any privacy-related questions, contact us at privacy@badfellaco.com

2. What Personal Information We Collect

We may collect the following categories of personal information:

• Contact and identity information
• Full name
• Email address
• Phone number
• Shipping and billing addresses
• Date of birth (only if you provide it, e.g. for a birthday discount)
• Order and payment information
• Order history and product preferences
• Payment details (processed securely by our payment providers - we do not store full card numbers)
• Transaction history

Account information

•  Username, password (encrypted), and account preferences
• Communications with our team

Technical and usage information

IP address

• Browser type and version
•  Device type and operating system
• Pages viewed, time on site, referring URLs
• Cookies and similar tracking data (see Section 8)

Marketing information

• Email and SMS subscription status
• Engagement with our marketing (opens, clicks, etc.)
• Survey or feedback responses

We do not knowingly collect sensitive information (such as health, religious beliefs, or political views) and ask that you do not send us this information.

3. How We Collect Personal Information

We collect personal information:

• Directly from you (e.g. when you place an order, create an account, sign up to our mailing list, or contact us)
• Automatically when you use the Site (via cookies, analytics tools, and server logs)
• From third parties (e.g. payment processors confirming a transaction, social media platforms when you interact with our ads, or shipping carriers providing tracking updates)

4. How We Use Your Personal Information

We use your personal information to:

• Process and fulfil your orders, including arranging shipping and delivery
• Communicate with you about your orders (confirmations, dispatch, tracking, issues)
• Manage your account and respond to support enquiries
•  Process payments and detect or prevent fraud
•  Send you marketing communications (only if you’ve opted in), including drop announcements, promotions, and product news
• Personalise your experience on the Site and tailor product recommendations
• Improve our products, website, and customer experience
• Analyse traffic, behaviour, and sales data
• Comply with our legal obligations (e.g. tax records, consumer law requirements)
• Enforce our Terms of Service and protect our business interests

5. Who We Share Your Personal Information With

We don’t sell your personal information. We do share it with trusted third parties that help us run our business, including:

E-commerce platform

• Shopify Inc. - hosts our online store and processes orders. Shopify is headquartered in Canada.

Payment processors

• Shopify Payments, PayPal, Afterpay, Klarna, and any other payment provider shown at checkout. These providers handle your payment details directly under their own privacy policies.

Shipping and fulfilment

• Australia Post and other shipping carriers for delivery and tracking
• Customs authorities in your country, where required for international shipments

Marketing and communications

• Klaviyo or similar email/SMS marketing platforms (US-based)
• Social media platforms (e.g. Meta, TikTok, Google) for targeted advertising — see Section 8 for tracking pixels

Analytics

• Google Analytics, Shopify analytics, and similar tools that help us understand site usage

Reviews and customer service

• Product review platforms (e.g. Judge.me, Yotpo)
• Customer support tools

Professional advisors and government bodies

• Our accountants, lawyers, or IT providers where reasonably required
• Government agencies (e.g. Australian Taxation Office) where legally required

We require all third parties to handle your information securely and only for the purposes for which we’ve shared it.

6. Overseas Disclosure

Because some of our service providers are based overseas, your personal information may be transferred to and stored in countries including:

• Canada (Shopify)
• United States (Klaviyo, Meta, Google, Stripe, others)
• European Union and United Kingdom (some shipping and payment partners)

By providing your personal information to us, you acknowledge and consent to this overseas disclosure. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

7. Marketing Communications

If you’ve subscribed to our mailing list or SMS list, we may send you marketing about new drops, restocks, sales, and brand news.

You can opt out at any time by:

•  Clicking the “unsubscribe” link in any marketing email
• Replying STOP to any marketing SMS
• Emailing us at marketing@badfellaco.com

Even if you opt out of marketing, we may still send you transactional emails (order confirmations, dispatch notifications, etc.) - these are required to fulfil your order.

8. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to function properly and to help us understand how customers use the Site.

Types of cookies we use:

• Essential cookies - required for the Site to work (e.g. keeping items in your cart)
• Analytics cookies - help us measure and improve site performance (e.g. Google Analytics)
• Marketing/advertising cookies - used by platforms like Meta Pixel, TikTok Pixel, and Google Ads to show you relevant ads on other sites
• Preference cookies - remember your settings (e.g. language, currency)

You can control or disable cookies through your browser settings. Some parts of the Site may not function properly if you do.

In line with Shopify’s customer privacy settings, EU/UK visitors will see a cookie banner allowing them to consent to non-essential cookies.

9. Data Security

We take reasonable steps to protect your personal information from misuse, unauthorised access, loss, or disclosure. These steps include:

• SSL encryption on the Site
• Secure payment processing through PCI-DSS compliant providers
• Access controls on our internal systems
• Vetting our third-party service providers

No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will notify affected customers and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.

10. Data Retention

We keep your personal information only as long as we need it for the purposes set out in this policy, including to meet any legal, tax, or accounting obligations.

In general:

• Order records: at least 7 years (for tax and consumer law purposes)
• Marketing data: until you unsubscribe or request deletion
• Account information: while your account is active, plus a reasonable period after

11. Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Correct any information that is inaccurate, incomplete, or out of date
• Request deletion of your personal information (subject to our legal obligations to retain certain records)
• Withdraw consent to marketing at any time
• Make a complaint about how we’ve handled your information

To exercise any of these rights, email us at privacy@badfellaco.com We’ll respond within a reasonable timeframe, usually within 30 days. We may need to verify your identity before actioning your request.

12. International Visitors

For visitors in the EU or UK: You may have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to data portability and the right to object to processing. Contact us to exercise these rights.

For visitors in California, USA: You may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.

13. Children's Privacy

Our Site is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, please contact us so we can delete it.

14. Third-Party Links

The Site may contain links to third-party websites (e.g. social media, payment partners). We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before sharing personal information with them.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The most current version will always be available on the Site, with the “last updated” date below revised. We encourage you to review this page periodically.

16. How to Contact Us or Make a Complaint

For any privacy questions, access requests, or complaints, contact us at:

Email: privacy@badfellaco.com

Address: PO Box 7121, Rockbank, VIC, 3355

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):