Privacy policy

Last updated: 25 January 2026

Nara Studio (“we”, “us”, “our”) operates this website and online store (the “Services”). Our store is hosted on Shopify, which provides the ecommerce platform that enables us to offer the Services to you.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit, interact with, or make a purchase from our Services, or otherwise communicate with us.

If there is any inconsistency between our Terms & Conditions and this Privacy Policy, this Privacy Policy applies to the extent of the inconsistency in relation to personal information handling.

By using our Services, you acknowledge you have read and understood this Privacy Policy.

1. What personal information we collect

“Personal information” means information that identifies you or could reasonably identify you.

Depending on how you interact with us, we may collect the following types of personal information:

a) Contact and order details

Name
Email address
Phone number
Billing and shipping address
Order details (items purchased, returns, exchanges)

b) Payment information

Payments are processed by Shopify and/or third-party payment providers (such as Shopify Payments, PayPal or Afterpay, if enabled). We do not store full payment card details. We may receive limited payment information such as payment confirmation and transaction reference details.

c) Account information (if you create an account)

Login details (such as email and password)
Preferences (e.g. saved addresses)

d) Communications

Information you provide when contacting us (e.g. customer support enquiries)

e) Device and usage information

IP address
Browser and device type
Pages viewed, interactions, referral source
Cookies and similar identifiers (see Section 6)

2. How we collect personal information

We collect personal information:

Directly from you (e.g. when you purchase, subscribe, create an account, contact us)
Automatically through our Services (e.g. cookies, analytics and similar technologies)
From Shopify and service providers that help us operate the Services (e.g. payment processing, fulfilment, email tools, analytics)
From third parties where you have permitted them to share information with us (e.g. social platforms if you use a social login or interact with our ads)

3. Why we collect and use personal information

We use personal information to:

a) Provide and operate the Services

Process orders and payments
Deliver products and provide tracking
Provide customer support
Manage returns/refunds in line with our policies
Communicate with you about your order (e.g. confirmations, shipping updates)

b) Improve and protect our business

Maintain and improve website performance and user experience
Detect and help prevent fraud, misuse, security incidents, and unlawful activity
Enforce our Terms & Conditions and policies

c) Marketing (with choices available)

Send emails about new releases, restocks, and brand updates if you subscribe
Show you relevant ads or measure ad performance (where enabled)

You can opt out of marketing emails at any time by using the unsubscribe link in our emails or by contacting us.

4. When we disclose personal information

We disclose personal information only as needed to operate our business and provide the Services, including to:

Shopify, as our ecommerce platform provider
Payment providers, to process transactions
Shipping and fulfilment providers, to deliver your order
IT and security providers, to maintain the Services
Customer support tools, to manage enquiries
Analytics and marketing partners (such as Google, Meta, Klaviyo or similar tools if enabled) to understand site performance and marketing effectiveness

We may also disclose personal information:

if required by law, court order, or regulatory request
to protect the rights, safety, and security of our customers, our business, or others
as part of a business restructure, sale, or transfer (in which case information may be transferred as an asset)

5. Overseas disclosure

Some of our service providers (including Shopify) may store or process information outside Australia, including in the United States, Canada, and other countries where they operate.

Where we disclose personal information overseas, we take reasonable steps to ensure it is handled in a manner consistent with this Privacy Policy and, where applicable, the Australian Privacy Principles.

6. Cookies and similar technologies

We use cookies and similar technologies to operate our store, remember preferences, analyse performance, and support marketing (where enabled).

You can manage cookies through your browser settings. Blocking cookies may affect some site functionality.

If you use Shopify’s cookie banner/consent tools (where available), your choices there will also affect certain cookies.

7. Direct marketing choices

If you have subscribed to receive updates, we may send marketing communications by email (and other channels if you opt in).

You can opt out at any time:

via the unsubscribe link in any marketing email, or
by contacting us at hello@narastudio.com.au

Even if you opt out of marketing, we may still send essential messages such as order confirmations and shipping updates.

8. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as needed to:

provide the Services
meet legal, tax, and accounting requirements
resolve disputes
enforce our agreements and policies

9. Access, correction, and complaints (Australia)

You may request access to, or correction of, the personal information we hold about you by contacting us at hello@narastudio.com.au.

If you have a complaint about how we handle personal information, please contact us and we will respond within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

10. Children

Our Services are not intended for children and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

11. Third-party sites

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Please review their privacy policies before providing them with personal information.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. We will post the updated policy on this page and update the “Last updated” date.