Nurtura

1. Who we are

Entity: The Nurtura Co
Trading names: The Nurtura Co and Nurtura
ABN: 30 384 057 421
Website: thenurturaco.com.au
Privacy contact: hello@thenurturaco.com.au

2. Personal information we may collect

The information we collect depends on how you interact with us. It may include:

• your name, email address, telephone number and communication preferences;
• billing and delivery addresses;
• order, product, delivery, refund, return and customer-support information;
• transaction references and payment status supplied by our payment providers;
• account details if you create a website account;
• enquiries, live-chat transcripts, emails, form submissions, reviews and other correspondence;
• newsletter subscriptions, consent records and marketing interactions;
• photographs, testimonials or social content you choose to submit, together with the permissions associated with their use;
• business, role and procurement information for organisational or professional enquiries; and
• technical and usage information such as IP address, approximate location, browser, device, referring page, pages viewed, session events and cookie identifiers.

We do not ordinarily receive or store your complete payment-card number. Card and other payment details are entered into and handled by the relevant payment provider. We may receive transaction identifiers, payment method, payment status and information required to reconcile or support an order.

3. Nurtura Baby registration and personalised services

If you choose to register a Nurtura Baby or request personalised owner materials, we may collect additional information about the purchaser, owner, Nurtura Baby, intended setting and requested personalisation. Depending on the form and choices you make, this may include:

• the Nurtura Baby's model, characteristics, serial or identification details, chosen name and birthday details;
• the owner's or recipient's name, age range, pronouns or gender where optionally provided;
• the broad use setting, such as personal, family, educational, community, disability, health or aged-care use;
• cultural background where voluntarily provided for an agreed personalisation or research purpose;
• postal details for certificates, letters or milestone communications; and
• consent choices for follow-up, feedback, images or sharing.

4. Children and information about other people

Our website and purchasing services are directed to adults. A parent, guardian or other authorised adult should complete purchases, registrations and forms on behalf of a child where personal information about the child is required.

If you provide personal information about another person—including a child, recipient, family member, employee, client or participant—you should have authority to provide it and, where appropriate, make them or their parent or guardian aware of this policy.

If we become aware that personal information about a child has been submitted without appropriate involvement or authority, we may contact the submitting adult, restrict its use or delete it where appropriate.

5. How we collect information

We generally collect personal information directly from you when you browse our website, create an account, purchase a product, register a Nurtura Baby, subscribe, complete a form, communicate with us, use instant chat, participate in feedback or interact with our content.

We may also receive limited information from:

• payment, ecommerce, delivery and fraud-prevention providers;
• an organisation, purchaser or authorised representative arranging a product or service for you;
• marketing, analytics, advertising and social platforms when you interact with our content or campaigns; and
• publicly available sources where collection is lawful, fair and reasonably necessary.

You may browse much of the public website without telling us your name. If you choose not to provide information needed for an order, registration, delivery, refund, personalised item or enquiry, we may not be able to provide that part of the service.

6. Why we collect, use and disclose information

We may handle personal information where reasonably necessary to:

• provide products, process payments, fulfil and deliver orders;
• administer accounts, registrations, certificates, owner resources and agreed follow-up communications;
• respond to enquiries, accessibility requests, complaints, returns, safety concerns and customer support;
• communicate operational information about an order or service;
• manage subscriptions and send marketing where consent exists or the law otherwise permits;
• understand website performance and improve our products, content, services and customer experience;
• detect, investigate and prevent fraud, misuse, security incidents and unlawful activity;
• maintain business, taxation, accounting, insurance and legal records;
• establish, exercise or defend legal claims; and
• comply with applicable laws, regulatory requirements and lawful requests.

If we wish to use personal information for a materially different purpose, we will consider whether further notice or consent is required.

7. Direct marketing

We may send newsletters, product updates, launch information or other commercial electronic messages where you have consented or where otherwise permitted by law. Service messages needed to administer an order, account or requested service are not treated as marketing merely because they are sent electronically.

You can unsubscribe using the link in a marketing email or by contacting us. We will action valid electronic-marketing unsubscribe requests within the period required by Australian spam law. We may retain a limited suppression record so that we know not to add the address back to the relevant marketing list.

8. Cookies, analytics and similar technologies

Our website uses cookies and related technologies to operate essential features, remember choices, maintain security, understand traffic and, where enabled, measure or support marketing.

These technologies may collect device and usage information and may be placed or accessed by providers such as WordPress or WooCommerce services, Google Analytics and Site Kit, Mailchimp, advertising platforms, security tools and Tawk.to chat. The exact tools may change as the website develops.

You can control many cookies through your browser and any consent controls made available on the website. Blocking essential cookies may prevent checkout, account, preference or security features from working correctly. Browser settings do not necessarily stop every server-side record or technology.

9. Disclosure to service providers and other recipients

We may disclose relevant information to providers that help us operate, including:

• website hosting, WordPress, ecommerce and technical-support providers;
• payment providers such as Stripe and any payment option selected at checkout;
• email and customer-communication providers such as Mailchimp;
• analytics, security, fraud-prevention and advertising providers;
• form, file-storage, cloud productivity and registration providers;
• instant-chat and customer-support providers such as Tawk.to;
• Australia Post, couriers, freight providers and fulfilment partners;
• professional advisers, insurers, accountants and legal representatives; and
• regulators, courts, law-enforcement bodies or other recipients where required or authorised by law.

We aim to disclose only the information reasonably needed for the relevant service. Each external provider may also handle information under its own privacy terms and security practices.

10. Overseas processing and disclosure

Some technology, cloud, analytics, marketing, payment, form and support providers may store or process information outside Australia or make it accessible to personnel in other countries. Depending on the provider and service configuration, these locations may include the United States, New Zealand, the United Kingdom, countries in the European Economic Area and other locations used by global service networks.

Service locations can change. Where Australian privacy law applies to an overseas disclosure, we will take the steps required of us in the circumstances. Overseas recipients may be subject to different privacy and legal regimes from those in Australia.

11. Storage, security and retention

We take reasonable steps appropriate to the nature of the information and our operations to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include reputable hosting and platforms, encryption in transit where supported, access controls, passwords, multi-factor authentication where available, software updates, backups and limiting access according to business need.

No internet transmission, platform or storage system can be guaranteed completely secure. Please do not send complete card details, passwords, identity documents, detailed health information or other highly sensitive material through ordinary email or instant chat unless we have specifically requested it and agreed on an appropriate method.

We retain information only for as long as reasonably needed for the purpose collected, related business needs and applicable legal, taxation, accounting, consumer, dispute and warranty requirements. Retention periods therefore vary. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to legal and technical constraints such as secure backups.

12. Data incidents

If we suspect that personal information has been lost or accessed or disclosed without authorisation, we will assess and respond to the incident. Where the Notifiable Data Breaches scheme or another law applies, we will notify affected individuals and the Office of the Australian Information Commissioner when required.

13. Access and correction

You may ask whether we hold personal information about you, request access to it or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the privacy email below and describe what you are seeking.

We may need to verify your identity before providing access or making a correction. We will respond within a reasonable period and explain any lawful reason if access or correction cannot be provided in the form requested. We will not require you to use one rigid request format.

14. Privacy questions and complaints

If you have a concern about how we handled personal information, please email us with enough information to understand the issue and contact you. We will acknowledge the complaint, investigate it fairly and aim to provide a response within a reasonable period.

If you are dissatisfied with our response and the matter falls within its jurisdiction, you may contact the Office of the Australian Information Commissioner.

15. External websites and services

Our website may link to platforms and websites operated by other organisations. Their privacy practices are controlled by them, and this policy does not replace their privacy notices. We encourage you to review the relevant provider's information when using an external service.

16. Changes to this policy

We may update this Privacy Policy when our services, technology, providers or legal obligations change. The current version will be published on this page with its updated date. Material changes may also be communicated through the website or directly where appropriate.