Privacy policy
PRIVACY POLICY
Last Updated: March 3rd 2026
This Privacy Policy explains how heist studio collects, uses, and protects your personal information when you visit or make a purchase from www.heiststudio.co (the “Site”).
By using the Site, you consent to the practices described in this Policy.
1. Information We Collect
A. Information You Provide Directly
When you interact with our Site, we may collect:
-
Full name
-
Billing and shipping address
-
Email address
-
Phone number
-
Payment information (processed securely by third-party processors)
-
Order details
-
Communications you send to us
If you subscribe to marketing communications, we collect your email and/or phone number for that purpose.
B. Information Collected Automatically
When you browse our Site, we automatically collect:
-
IP address
-
Browser type
-
Device type
-
Operating system
-
Referral URLs
-
Pages viewed
-
Time spent on pages
-
Clickstream data
This information is collected via:
-
Cookies
-
Pixels (e.g. Meta, Google, TikTok)
-
Log files
-
Analytics tools
2. How We Use Your Information
We use your information to:
-
Process and fulfil orders
-
Provide shipping updates
-
Communicate regarding your purchase
-
Provide customer support
-
Detect and prevent fraud
-
Screen orders for risk
-
Improve our website and marketing
-
Personalise your experience
-
Send marketing communications (if opted in)
-
Comply with legal obligations
We may use automated systems for fraud detection and payment screening.
3. Sharing of Information
We do not sell your personal information.
We may share information with trusted third parties where necessary to operate our business, including:
Service Providers
-
Payment processors (e.g., Shopify Payments, Stripe, PayPal)
-
Shipping carriers
-
Fulfilment partners
-
Email and SMS marketing platforms
-
Analytics providers
-
Fraud prevention tools
-
IT and hosting providers
These providers may process data on our behalf.
Legal & Compliance
We may disclose information if required to:
-
Comply with legal obligations
-
Respond to lawful requests
-
Protect our rights
-
Prevent fraud or abuse
Business Transfers
If HEWSON BRANDS PTY LTD undergoes a merger, acquisition, or asset sale, your information may transfer as part of that transaction.
4. Cookies & Tracking Technologies
We use cookies and tracking technologies to:
-
Maintain your shopping cart
-
Remember preferences
-
Analyse traffic and behaviour
-
Measure ad performance
-
Deliver targeted advertising
You may disable cookies via your browser settings. However, some site functionality may be limited.
By using our Site, you consent to the use of cookies and similar technologies.
5. SMS & Marketing Communications
If you opt in to receive marketing communications:
-
You may receive promotional emails or SMS messages.
-
Message frequency may vary.
-
Standard carrier rates may apply.
You may unsubscribe at any time by:
-
Clicking “unsubscribe” in emails
-
Replying STOP to SMS messages
-
Contacting us directly
Consent to marketing is not a condition of purchase.
6. Data Retention
We retain personal information for as long as reasonably necessary to:
-
Fulfil orders
-
Maintain business records
-
Resolve disputes
-
Enforce agreements
-
Comply with tax and legal requirements
When no longer required, data may be securely deleted or anonymised.
7. Data Security
We implement commercially reasonable security measures including:
-
SSL encryption
-
Secure hosting
-
Limited internal access
-
Third-party secure payment processing
However, no method of transmission over the internet is 100% secure. By using the Site, you acknowledge this risk.
8. Your Rights (US & International Users)
Depending on your location, you may have rights including:
-
Access to your personal information
-
Correction of inaccurate information
-
Deletion of personal data
-
Opt-out of marketing
-
Request information about how data is used
California residents may request:
-
Categories of personal information collected
-
Categories of third parties data is shared with
-
Deletion of personal information (subject to exceptions)
We do not sell personal information as defined under the California Consumer Privacy Act (CCPA/CPRA).
To exercise rights, contact:
📧 [SUPPORT EMAIL]
We may require identity verification before fulfilling requests.
9. International Data Transfers
As an Australian-based company, your information may be processed in:
-
Australia
-
The United States
-
Other jurisdictions where our service providers operate
By using our Site, you consent to international data transfers where applicable.
10. Children’s Privacy
Our Site is not intended for children under 13.
We do not knowingly collect data from children. If we become aware of such collection, we will delete the information promptly.
11. Third-Party Links
Our Site may contain links to third-party websites.
We are not responsible for the privacy practices of those sites.
12. Updates to This Policy
We may update this Privacy Policy periodically.
Changes will be posted on this page with an updated effective date.
Continued use of the Site after changes constitutes acceptance of the updated Policy.
13. Contact Us
For privacy-related questions or requests:
heiststudio.co@gmail.com
