Privacy Policy

Last updated: 24-10-2025

EB Collective (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information.
 This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the EU General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

This policy applies to all visitors and customers of our online store hosted on Shopify, as well as any related digital platforms operated by EB Collective.

1. Who We Are

Business Name: EB Collective
 Address: Geurdeland 17 G, 6673 DR Andelst, The Netherlands
 Email: info@matildasydney.com

EB Collective is the data controller responsible for processing your personal data.

2. Information We Collect

We collect personal information when you visit our website, make a purchase, or contact us. This may include:

  • Full name

  • Billing and shipping address

  • Email address

  • Phone number

  • Payment information (processed securely through third-party providers)

  • IP address and device information

  • Order and transaction history

  • Website usage and analytics data (via cookies and similar technologies)

We do not store credit card details; all payments are processed securely through our payment partners.

3. How We Use Your Information

We process your information for the following purposes:

  • To process and deliver your orders

  • To provide customer service and support

  • To process secure payments

  • To send order confirmations and relevant updates

  • To improve our website, services, and user experience

  • To comply with legal and tax obligations

  • For marketing purposes (only if you have provided consent)

4. Legal Basis for Processing (GDPR – Article 6)

We only process personal data where we have a lawful basis to do so:

  • Performance of a contract – when processing your order or providing requested services.

  • Legal obligation – to meet accounting, taxation, and record-keeping duties.

  • Legitimate interest – to improve our operations, prevent fraud, and market responsibly.

  • Consent – where you have opted in to marketing communications or cookies.

5. Sharing of Information with Third Parties

We only share personal data with third parties when necessary for our operations, including:

  • Shopify, Inc. – our e-commerce platform provider (data may be stored in Canada, the U.S., or other regions).

  • Payment providers (e.g., Shopify Payments, PayPal) – for secure transaction processing.

  • Suppliers and shipping partners in China – for order fulfilment and direct shipping to customers.

  • IT, marketing, and analytics providers – to help maintain and improve our online store.

We ensure that all third-party partners comply with privacy laws and only process data as instructed by us.
 Where required, we have signed Data Processing Agreements (DPAs) or equivalent contracts with these partners.

6. International Data Transfers

As our business operates internationally, your personal data may be transferred and stored outside the European Economic Area (EEA), including countries such as China, Canada, and the United States.

When transferring data internationally, we implement appropriate safeguards to ensure your privacy is protected, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, and

  • Technical and organisational measures such as encryption and restricted access.

For Australian customers, we comply with Australian Privacy Principle 8 (Cross-border disclosure of personal information), ensuring that any overseas recipient provides a comparable level of data protection.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law:

  • Order and billing records: 7 years (for tax and accounting purposes)

  • Customer communications: up to 2 years after your last contact

  • Marketing data: until you unsubscribe or withdraw consent

  • Cookies and tracking data: according to each cookie’s lifespan (see our Cookie Policy)

Once retention periods expire, your data will be securely deleted or anonymised.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Enable essential site functionality

  • Analyse website performance and usage

  • Deliver personalised advertising (only with your consent)

When you first visit our site, you will see a cookie banner allowing you to accept or reject non-essential cookies.
 You can update your preferences at any time via your browser or our cookie settings.

For more information, please refer to our Cookie Policy.

9. Data Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, misuse, loss, or disclosure.
 This includes:

  • SSL encryption on all pages

  • Restricted staff access to personal data

  • Secure data storage and regular system monitoring

  • Data processing agreements with all service providers

While we take all reasonable precautions, no system is entirely secure. You use our website and services at your own risk.

10. Your Rights

Under the GDPR and the Australian Privacy Act, you have the right to:

  • Access your personal information

  • Correct or update your information

  • Request deletion of your data (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent (e.g., unsubscribe from marketing)

You can exercise these rights at any time by contacting us at info@matildasydney.com.
 We will respond to all valid requests within 30 days.

11. Complaints and Supervisory Authorities

If you have concerns or complaints about how we handle your personal information, please contact us first at info@matildasydney.com and we will do our best to resolve the issue.

If you are not satisfied with our response, you may contact the relevant data protection authority:

  • For EU/Netherlands:
     Autoriteit Persoonsgegevens – www.autoriteitpersoonsgegevens.nl

  • For Australia:
     Office of the Australian Information Commissioner (OAIC) – www.oaic.gov.au

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations.
 Any updates will be posted on this page, and the “Last updated” date will be revised accordingly.
 We encourage you to review this policy periodically.

13. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy, please contact:

EB Collective
 Geurdeland 17 G
 6673 DR Andelst
 The Netherlands
 Email: info@matildasydney.com