This Privacy Policy explains how Mia Creates ("Mia Creates", "we", "us" or "our") collects, holds, uses and discloses personal information when you visit or use www.miacreates.com.au, create an account, purchase our products, submit an enquiry, subscribe to marketing communications, order a personalised product, or otherwise communicate with us.

Mia Creates sells 3D-printed toys, gadgets, fidgets and related products, including personalised products.

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, privacy practices or applicable laws. When we make changes, we will update the "Last updated" date above and publish the revised Privacy Policy on our website.

The personal information we collect depends on how you interact with Mia Creates. This may include:

• your name, email address, telephone number and delivery address;
• account information, including information associated with your Mia Creates account;
• order and transaction information, including products purchased, delivery details and order history;
• information you provide when contacting us or requesting customer support;
• marketing preferences, including whether you have subscribed to or unsubscribed from marketing communications;
• information you voluntarily provide when ordering a personalised product, such as a child's name to be printed on that product; and
• technical and usage information such as your IP address, browser and device information, pages viewed, interactions with our website, and information collected through cookies and analytics technologies.

We do not generally require sensitive information such as health information, government identifiers, racial or ethnic information, religious information or information about a person's sexual orientation. Please do not provide sensitive information to us unless it is reasonably necessary for your interaction with Mia Creates.

We may collect personal information:

• directly from you when you create an account or place an order;
• when you complete a contact or enquiry form, including through www.miacreates.com.au/contact;
• when you subscribe to our marketing communications;
• when you provide information for a personalised product;
• when you communicate with us by email or other customer support channels;
• when you purchase from us online or at a physical market using Square; and
• automatically when you use our website, including through cookies, Firebase and Google Analytics.

We may use personal information to:

• create and manage customer accounts;
• process, fulfil and deliver orders;
• process payments and transactions;
• create personalised products in accordance with your order;
• respond to enquiries and provide customer support;
• send marketing communications where you have subscribed or where otherwise permitted by law;
• understand how customers use our website and improve our products, website and services;
• maintain the security of our website, accounts and systems and help prevent fraud or misuse;
• maintain business and transaction records; and
• comply with our legal obligations and exercise or defend our legal rights.

Mia Creates offers personalised products that may include a child's name or other personalisation information supplied by the customer.

If you provide a child's name for a personalised product, we use that information to create and fulfil the personalised product and for purposes directly related to the order, such as customer support and order administration.

We do not use a child's name supplied for product personalisation for marketing, targeted advertising or profiling. We do not require information such as a child's date of birth, school, address or other personal details about the child to personalise a product.

If you are a parent or guardian and have questions about a child's personal information provided to us, please contact us at hello@miacreates.com.au.

If you create an account with Mia Creates, we collect and hold the information needed to create and manage your account and provide account-related functionality. You are responsible for keeping your account credentials confidential.

We use Square to process payments and transactions for online and in-person purchases. Square may collect and process payment, transaction, contact, device and related information as necessary to provide its services.

Mia Creates does not intentionally store customers' full payment card details. Payment information is handled through the payment services we use.

We use Firebase services provided by Google to support parts of our website and related functionality. Depending on the features enabled, this includes Firebase Authentication, Cloud Firestore, Firebase Hosting and Firebase Analytics.

These services may process information such as account details, authentication information, website or service usage information, device information and other information necessary to provide the relevant functionality.

Google processes information in accordance with its applicable terms and privacy documentation. Firebase services may process and store information in locations outside Australia.

We use cookies and similar technologies to operate our website, maintain sessions, remember preferences, understand website usage and improve our services.

We use first-party analytics on our website. This means we set cookies on miacreates.com.au (including visitor and session identifiers) and collect information such as pages viewed, device type, and a coarse geographic location derived from your IP address at the time of the visit. We do not store your IP address after that lookup. Where you place an order, we may link your browsing session to that order so we can measure conversion rates.

You can control or reject cookies through your browser settings. Some website functions may not work correctly if certain cookies are disabled.

If you subscribe to marketing communications, we may use your contact details to send you information about Mia Creates products, promotions, new products and other updates.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting hello@miacreates.com.au.

We will continue to send non-marketing communications where reasonably necessary, such as messages about your account, orders or transactions.

We may disclose personal information where reasonably necessary to operate Mia Creates, provide our products and services, or comply with our legal obligations.

This may include disclosure to:

• payment and transaction service providers, including Square;
• technology and hosting providers, including Google and Firebase;
• delivery or fulfilment providers where necessary to deliver an order;
• professional advisers and service providers who assist us in operating our business;
• law enforcement, regulators, courts or other parties where disclosure is required or authorised by law; and
• another entity in connection with a sale, transfer or restructuring of all or part of our business.

We do not sell your personal information as a business practice.

Some of the third-party service providers we use may process or store personal information outside Australia. This includes Google/Firebase and Square.

Depending on the service and circumstances, personal information may be processed or stored in countries including the United States, Canada, Japan, Ireland, France, Spain and the United Kingdom, as well as other countries where our service providers or their service providers operate.

When personal information is disclosed to an overseas recipient, we take reasonable steps to ensure that it is handled in accordance with applicable privacy requirements.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. We use appropriate technical and organisational measures for the systems and services we operate and use.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security of information.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including maintaining accounts, fulfilling orders, providing customer support, maintaining business and transaction records, meeting legal obligations and resolving disputes.

Information provided for product personalisation, including a child's name, may be retained for as long as reasonably necessary for order administration, customer support, record keeping and legal obligations. It is not retained for marketing or profiling purposes.

You may contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, incomplete or out of date.

To make a request, email hello@miacreates.com.au. We may need to verify your identity before providing access to or changing personal information.

We will generally respond to requests within a reasonable period. In some circumstances, we may be unable to provide access or make a requested change where permitted or required by law.

You may ask us to delete personal information we hold about you by contacting hello@miacreates.com.au. We will consider the request in accordance with applicable law.

We may need to retain certain information where required by law or where reasonably necessary for legitimate business purposes, including transaction records, security, fraud prevention or resolving disputes.

If you believe Mia Creates has mishandled your personal information or breached applicable privacy requirements, please contact us at hello@miacreates.com.au. Please provide enough information for us to understand and investigate your complaint.

We will investigate the complaint and respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) about your privacy complaint.

Office of the Australian Information Commissioner: www.oaic.gov.au

Our website may contain links to third-party websites or services. Those third parties have their own privacy policies and practices. We are not responsible for the privacy practices or content of third-party websites or services.

If you have a question about this Privacy Policy, want to exercise a privacy right, or wish to make a privacy complaint, please contact Mia Creates:

Email: hello@miacreates.com.au

Website contact form: www.miacreates.com.au/contact

We will review this Privacy Policy from time to time to ensure it remains accurate and reflects how Mia Creates handles personal information.