Privacy

Privacy Policy — Caramel Lobster

Caramel Lobster — Legal

Privacy policy.

Last updated: June 2026

Caramel Lobster is committed to protecting your privacy. This policy explains how we collect, use, store, and disclose your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Who we are

Caramel Lobster is an Australian online retailer operating at caramellobster.com. For any privacy-related enquiries, contact us at shop@caramellobster.com.


Information we collect

We collect personal information that is necessary to provide our products and services. This may include:

  • Name, email address, phone number, and delivery address when you place an order or create an account
  • Payment information — processed securely via Shopify Payments; we do not store your full card details
  • Browsing behaviour, device information, and IP address via cookies and analytics tools
  • Email address and preferences if you subscribe to our waitlist or marketing communications
  • Any information you voluntarily provide when contacting us

We only collect information that is reasonably necessary for our business functions. You are not required to provide personal information, but doing so may limit your ability to make a purchase or access certain features.


How we use your information

We use your personal information to:

  • Process and fulfil your orders and send order confirmations and shipping updates
  • Respond to your enquiries and provide customer support
  • Send marketing communications where you have opted in — you can unsubscribe at any time
  • Improve our website, products, and services through analytics
  • Comply with our legal obligations under Australian law
  • Prevent fraud and protect the security of our store

We will not use your personal information for any purpose that is unrelated to the above without your consent.


How we share your information

We do not sell your personal information. We may share your information with trusted third parties where necessary to operate our business, including:

  • Shopify — our ecommerce platform and payment processor
  • Australia Post and other carriers — for order fulfilment and delivery
  • Email marketing platforms — where you have opted in to receive communications
  • Analytics providers — to understand website traffic and behaviour in aggregate
  • Legal or regulatory authorities — where required by law

All third parties we work with are required to handle your information in a manner consistent with Australian privacy law.


Overseas disclosure

Some of our third-party service providers are based outside Australia, including Shopify (Canada) and Meta (United States). When your information is disclosed overseas, we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles. By using our website, you consent to your information being transferred to and processed in these countries.


Cookies and tracking

Our website uses cookies and similar tracking technologies to improve your browsing experience and deliver relevant advertising. Please refer to our Cookie Policy for full details on what we collect and how to manage your preferences.


Data security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Our website uses SSL encryption and all payment processing is handled by Shopify's PCI-DSS compliant infrastructure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.


Data retention

We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, including for legal, accounting, and reporting requirements. Order records are generally retained for a minimum of 7 years in accordance with Australian taxation law. You may request deletion of your personal data at any time, subject to our legal obligations.


Your rights

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information, subject to legal obligations
  • Opt out of marketing communications at any time via the unsubscribe link in any email or by contacting us directly
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy rights have been breached

To exercise any of these rights, contact us at shop@caramellobster.com. We will respond within 30 days.


Complaints

If you have a complaint about how we have handled your personal information, please contact us in the first instance at shop@caramellobster.com. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.


Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Your continued use of our website after any changes constitutes acceptance of the updated policy.