Privacy Policy

Last updated: 7 October 2026

About this policy

This policy explains how Hattie Molloy, based in Daylesford, Victoria, Australia, handles personal information through shopbyhattie.com, our online orders, newsletter and enquiries. For privacy questions or requests, email info@hattiemolloy.com.

Information we collect

When you order, contact us or subscribe, we collect the information you provide. This can include your name, email, phone number, billing and delivery addresses, order history, payment status, newsletter preferences and correspondence. Enquiries can include an order or tracking number, project notes, budget or proposed trade order quantity. If you send us photographs to support a return, we receive those too. Please avoid sending sensitive information or payment-card details through our contact form or email.

Payment details are handled through the payment services offered at Shopify checkout. The information available to us depends on the payment method and includes transaction details needed to manage your order, payment or refund.

When you browse, Shopify and connected services can collect technical and usage information, such as an IP address, browser and device details, cookie identifiers, pages viewed and interactions with the store. We also receive order, delivery and transaction updates from the providers involved in your purchase.

How we use information

We use information to process and deliver orders, take payments and issue refunds, answer enquiries, manage returns, send service messages and maintain business records. Technical information helps operate and secure the website, prevent fraud and spam, understand visits and improve the shopping experience. If you subscribe to our newsletter, we use your contact details to send the updates you requested.

You can make a general enquiry without identifying yourself where practical. We will need sufficient contact, payment and delivery details to fulfil an order or resolve an order-specific request. If you provide someone else's details, such as a gift recipient's address, please make sure you are entitled to do so.

Shopify and other providers

Our store is hosted by Shopify. Shopify processes personal information to provide the storefront, checkout and related services. Its own handling of consumer information, including services informed by interactions with Shopify and other merchants, is explained in the Shopify Consumer Privacy Policy. You can also visit Shopify's privacy portal to learn about choices and requests relating to Shopify's own processing.

Information needed to operate the business may be shared with payment processors, shipping and delivery providers, order-management and fulfilment services, email and communications providers, technical support and professional advisers. For example, a delivery provider needs your delivery address and contact details. We may also disclose information where required by law or reasonably necessary to address fraud, security incidents or legal claims.

Cookies, analytics and connected services

Shopify uses cookies and similar technologies for functions such as the cart, checkout, security and store analytics. Our store has a Facebook & Instagram integration with customer-data access. Depending on its configuration and your privacy choices, Meta can receive information about visits and shopping activity for measurement and advertising. See Meta's Privacy Policy for its practices and available controls.

Our forms use Shopify's hCaptcha protection to help distinguish people from automated traffic. hCaptcha can process technical information and interactions used for that check. More information is available in the hCaptcha Privacy Policy.

You can manage or delete cookies using your browser settings, although blocking necessary cookies may affect shopping functions. Browser cookie controls do not necessarily prevent all information sharing, including information sent by a service directly. For questions or requests about our use of your information for marketing or advertising, contact info@hattiemolloy.com.

Marketing choices

You can unsubscribe from our newsletter using the link in a marketing email or by emailing us. Opting out of marketing does not stop order confirmations, delivery updates or replies needed to deal with your enquiry. Submitting an enquiry is not, by itself, a request to join our newsletter.

Storage, overseas processing and retention

Information is held in the systems used to run our store and communications. Shopify lists the United States as this store's data-hosting location. Shopify operates internationally, including in Canada, and hCaptcha operates from the United States. Information may also be handled in other countries where our providers operate, or in the destination country when we arrange international delivery. Privacy laws in those countries can differ from Australian laws. Contact us if you need further details about a particular provider or transfer.

We take reasonable steps to protect personal information and limit access to people and providers who need it for their work. No online transmission or storage system is completely secure. We keep information for as long as needed for the purpose it was collected, including order support, accounting, legal obligations and dispute resolution, and take reasonable steps to delete or de-identify it when it is no longer needed, subject to applicable retention requirements.

Access, correction and other requests

You can ask to access or correct personal information we hold about you by emailing info@hattiemolloy.com. You may also ask us to delete information, stop particular uses or explain how it is handled. Depending on the law that applies to you, additional rights can include objection, restriction, portability or withdrawal of consent. Some requests are subject to exceptions, such as records we must retain by law.

We may need to verify your identity before acting on a request. Please tell us what you need and provide enough detail to locate the relevant information; do not send identity documents unless we have agreed a suitable method. We will explain the outcome and any reason we cannot fulfil a request.

Privacy concerns and updates

If you have a privacy concern, email us with the details so we can investigate and respond. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner to ask whether it can assist, or the relevant privacy authority where you live.

We may update this policy when our practices change. The date above identifies the current version. Where required, we will provide additional notice or seek consent for a change; publishing an update does not itself create consent.