Privacy policy

Last updated: 2 November 2026

This policy explains how Linbec Pty Ltd, trading as Naughty But Nice (“we”, “us” or “our”), handles personal information when you visit naughtybutnice.au, shop with us or contact us.

1. Information we collect

Depending on how you interact with us, we collect your name, contact details, billing and delivery addresses, order and purchase history, payment and transaction information, account details, marketing preferences, and information you provide when requesting support, delivery, a return or a warranty service. Payment providers process payment credentials according to their own privacy notices.

Our website and service providers also collect information automatically, including IP address, browser and device information, cookie and other online identifiers, pages and products viewed, referral sources and interactions with our website. These identifiers can be linked to other information; they are not necessarily anonymous. You may browse without giving us your name, but automatic collection can still occur. If you do not provide information needed for an order or enquiry, we may be unable to fulfil it.

We collect information directly from you, automatically through our website, and from service providers involved in payments, orders, delivery, fraud prevention and marketing. Please avoid sending unnecessary sensitive information in enquiries or order notes.

2. How we use information

We use personal information to process payments and orders; arrange delivery or collection; provide customer support, returns and warranties; maintain accounts; prevent fraud and protect our services; meet legal and accounting obligations; understand website performance; and improve and market our products. Marketing and non-essential tracking are subject to applicable consent requirements and your choices.

3. Cookies, analytics and advertising

We use essential cookies and similar technologies for functions such as shopping carts, checkout, security and remembering privacy choices. We also use non-essential technologies for analytics, advertising and website experience measurement. Our website uses Shopify, Google Analytics and Google advertising technologies, Meta (Facebook) Pixel, Microsoft Clarity, and Klaviyo. These services may receive device and online identifiers, browsing or event information and, depending on the service and your interaction, customer or order information.

In the European Economic Area and United Kingdom, our regional cookie controls ask for your choice about non-essential tracking. You can accept, decline or manage available categories, and revisit your choice using the Cookie preferences control on our website. Essential technologies needed to provide the service remain in use. Refusing optional tracking does not prevent you from shopping.

We do not display the same opt-in cookie banner to visitors identified as being in Australia. Non-essential technologies may operate there without a banner, subject to applicable law. This does not mean every type of collection or marketing is exempt from consent requirements. You can also restrict cookies through your browser and use the privacy controls offered by Google, Meta and Microsoft. Blocking cookies may affect some website features. Regional controls depend on location detection, which may be affected by a VPN or similar service.

4. Shopify and other service providers

Shopify hosts our online store and processes information about visits and purchases to provide its services. Shopify Network Intelligence is enabled: Shopify also uses information about interactions with our store, other merchants and Shopify to provide enhanced services, including personalisation, advertising and service improvements. This does not give other merchants access to our customer records. See Shopify’s Consumer Privacy Policy and Shopify’s privacy portal for its practices and rights controls.

We disclose information as reasonably needed to ecommerce and store-system providers, payment processors, delivery and collection partners, customer-support providers, email and SMS platforms, analytics and advertising providers, professional advisers, and authorities where required or permitted by law. We may also disclose information in connection with a lawful business restructure or sale, subject to appropriate safeguards.

5. Overseas processing

Our service providers may store or process personal information outside Australia. These include global providers such as Shopify, Google, Meta, Microsoft and Klaviyo. Overseas processing can include the United States, Canada and other countries in which these providers and their service providers operate. The locations depend on the service and may change; this is not an exhaustive list. Contact us for further information about a particular service or disclosure.

Where applicable law requires safeguards for an overseas disclosure, we must take the steps that law requires. This policy is not a request for you to waive rights or consent to unrestricted overseas disclosure.

6. Marketing choices

We send promotional emails or SMS only where we have the consent or other permission required by applicable law. A purchase is not, by itself, blanket permission for all marketing. You can unsubscribe using the link or instructions in a marketing message, or contact us below. We will action Australian commercial-message unsubscribe requests within five business days. Necessary order and service messages are separate from promotional marketing.

7. Storage, security and retention

Personal information is held in the business systems and service-provider platforms used to operate our stores and website. No internet transmission or storage system is completely secure. Applicable privacy laws may require us to take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

We retain information for the purposes described in this policy, including legal, tax, accounting, warranty and dispute requirements. Retention periods depend on the record and those requirements. Requests to delete information are subject to lawful retention obligations. Where required by law, we must destroy or de-identify information no longer needed.

8. Access, correction and other requests

Contact us to request access to, or correction of, your personal information, to update your marketing preferences, or to request deletion. We may need to verify your identity using only information reasonably necessary for that purpose. We will respond within a reasonable time, explain any lawful refusal and tell you how to complain. We do not charge for making an access or correction request; if a lawful access-handling charge is proposed, we will explain it beforehand.

Depending on your location and the law applicable to our handling of your information, you may also have rights to object to processing, restrict processing, receive a portable copy, withdraw consent or complain to your local data-protection authority. Where consent is relied upon, withdrawal does not affect the lawfulness of earlier processing. If EU or UK data-protection law applies, relevant grounds for processing may include fulfilling your order, legal obligations, consent for optional tracking or marketing where required, and legitimate interests where permitted and balanced against your rights.

9. Privacy enquiries and complaints

Contact the Privacy Officer, Linbec Pty Ltd / Naughty But Nice, at hello@naughtybutnice.au, or write to Shop 19, 1177 Wynnum Road, Cannon Hill QLD 4170, Australia. Please describe your concern and the outcome you seek without including unnecessary sensitive information.

We will acknowledge and investigate privacy complaints and aim to provide a substantive response within 30 days. If more time is needed, we will explain why. If you are not satisfied, you can contact the Office of the Australian Information Commissioner, where it has jurisdiction, or the relevant regulator in your location.

10. Third-party sites and changes

Third-party websites and services have their own privacy practices. We may update this policy as our services or legal requirements change. The current version and its update date will be published here. This policy does not limit rights you have under applicable law.