Privacy policy — The Bondi Store

We take your privacy seriously and handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This page explains what we collect, why, and what you can do about it.

Who we are

The Bondi Store is operated by Tesserix Pty Ltd, an Australian company based in Sydney, NSW. Our contact for privacy questions is [email protected].

What we collect

Account & order details — your name, email, shipping and billing address, phone number (if provided), and order history.
Payment details — handled by our payment processor (Stripe). We don't store your full card number on our servers; we receive a confirmation token.
Communications — emails you send us and our replies.
Browse data — pages you view, items you add to cart, the device and browser you used. Collected via cookies and similar technologies.
Marketing preferences — whether you've opted in to email marketing.

Why we collect it

To process and ship your orders
To respond to your questions
To send transactional emails (order confirmations, dispatch notices, return updates)
With your consent, to send marketing emails about new releases. You can unsubscribe at any time using the link in every marketing email.
To detect and prevent fraud
To comply with our legal obligations (tax, accounting, consumer law)
To improve the site — anonymous, aggregated patterns only

Who we share it with

We share personal information only with parties who help us run the business, under contract, and only to the extent they need it. These include:

Payment processor — Stripe (details handled per Stripe's privacy policy)
Shipping carriers — Australia Post and equivalent international partners, to deliver your order
Email & analytics — providers that help us send transactional emails and understand site usage
Hosting — Google Cloud Platform, primarily within Australian regions
Professional advisers — accountants and lawyers under confidentiality

We do not sell your personal information.

International transfers

Some of our service providers (e.g. Stripe, Google Cloud) may store data outside Australia. Where this happens, we take reasonable steps to ensure the receiving party handles it consistently with the APPs.

How long we keep it

We keep order and accounting records for at least 7 years to meet Australian tax law. Marketing data is kept for as long as you remain subscribed plus 12 months. Other personal information is kept only as long as we need it for the purposes above.

Cookies

We use:

Essential cookies — for cart, checkout, and login. Always on.
Analytics cookies — to understand site usage. Anonymous and aggregated. Set only with your consent where required.

You can clear or block cookies in your browser; some site features may not work without them.

Your rights

Under the APPs you have the right to:

ask what personal information we hold about you
ask us to correct it if it's wrong
ask us to delete it (subject to our legal record-keeping obligations)
complain if you think we've mishandled it

To exercise any of these rights, email [email protected]. We'll respond within 30 days. If you're not happy with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

Our site and service aren't directed at children under 18. We don't knowingly collect personal information from children. If you believe we have, please contact us and we'll delete it.

Changes

We may update this policy from time to time. Material changes will be flagged on the homepage for at least 14 days.

Last updated: 4 May 2026