Privacy policy

Last updated: 3 October 2026

This Privacy Policy explains how Pipi Swimwear Pty Ltd ("we", "us", "our") collects, holds, uses and discloses personal information when you visit www.pipiswimwear.com.au, place an order, subscribe to our emails or SMS, leave a review or contact us. We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and we send marketing messages in line with the Spam Act 2003 (Cth).

1. Personal information we collect

  • Contact and order details: your name, email address, phone number, billing and delivery address, order history, and any gift message or gift recipient details you give us.
  • Payment details: payments are processed by our payment providers (such as Shopify Payments, PayPal and Afterpay). We do not see or store your full card number.
  • Marketing preferences: whether you have subscribed to our emails or SMS, and how you interact with them (for example, opens and clicks).
  • Device and browsing information: IP address, device and browser type, approximate location, pages and products viewed, items added to cart, purchases, and how you reached our website (including which ad you clicked). This is collected through cookies, pixels, tags and similar technologies.
  • Reviews and messages: product reviews and photos you submit, and messages you send us.

We do not ask for sensitive information (such as health information), so please don't send it to us. You can browse our website without telling us who you are, but to place an order we need your name, contact and delivery details.

2. How we collect it
We collect personal information directly from you (at checkout, when you create an account, subscribe, enter a competition, leave a review or contact us), automatically when you use our website (through cookies, pixels and similar technologies), and from third parties such as our payment, delivery and review providers and advertising platforms (for example, reports showing that a purchase came from one of our ads). If you give us someone else's details, such as a gift recipient, please make sure they're happy for you to do so. We use gift recipient details only to deliver the gift.

3. Why we use it

  • To process, deliver and support your orders, pre-orders, returns and enquiries.
  • To detect and prevent fraud and protect our website and customers.
  • To run, analyse and improve our website, products and service.
  • To send you marketing emails and SMS where you have consented (see section 4).
  • To show you relevant ads and measure how our advertising performs (see section 4).
  • To comply with our legal obligations, such as tax and consumer law.

4. Advertising and marketing
Pixels and tags. Our website uses the Meta Pixel and Meta Conversions API (Facebook and Instagram), Google tags (including Google Ads and Google Analytics) and Shopify analytics. These tools record visits and actions on our website (such as pages viewed, items added to cart and purchases) so we can measure our ads and show our ads to you on those platforms and on other websites and apps. Meta and Google may also collect information through their own cookies and combine it with information they hold about you, in line with their own privacy policies.

Customer lists. We may share your email address and phone number (and, where needed, your name and postcode) with Meta and Google in hashed (scrambled) form so they can match you to an account you hold with them. We do this to show you relevant ads, to stop showing you ads for things you've already bought, to measure the results of our ads, and to help the platforms find new people with similar interests ("lookalike" or "similar" audiences). The platforms use this information to match and measure on our behalf and give us only aggregated reports.

Shopify Audiences. We may use Shopify Audiences, which shares information about your use of our website and your purchases with Shopify so it can help merchants, including us, show ads to people likely to be interested in their products.

Email and SMS. We send marketing emails and SMS (using providers such as Klaviyo) only with your consent, either when you subscribe or where consent can reasonably be inferred under the Spam Act, such as from an existing customer relationship. Every message identifies us and includes a working unsubscribe option, and we action unsubscribe requests within 5 business days. Order, pre-order and delivery messages are not marketing and will still be sent.

Your choices. You can:

  • unsubscribe using the link in any email, or reply STOP to any SMS;
  • email us at hello@pipiswimwear.com.au or call 1300 644 998 to ask us not to include you in customer lists shared with advertising platforms, or not to use your information for direct marketing at all, free of charge;
  • manage your ad preferences in Meta ad preferences and Google My Ad Center;
  • opt out of Google Analytics with the Google Analytics opt-out add-on; and
  • block or delete cookies in your browser settings (some parts of our website may not work properly if you do).

You can also ask us where we obtained your information for direct marketing.

5. Who we share it with
We share personal information only as needed with:

  • Shopify, which hosts our online store;
  • payment providers (such as Shopify Payments, PayPal and Afterpay);
  • delivery providers (such as Australia Post and other couriers), including in New Zealand and other destination countries for international orders;
  • email and SMS marketing providers (such as Klaviyo);
  • product review providers (such as Loox);
  • advertising and analytics platforms (Meta and Google) and any agency that manages our advertising on our behalf;
  • IT, customer service and professional advisers; and
  • government agencies or others where required or authorised by law.

We do not sell or rent your personal information.

6. Overseas disclosure
Some of our service providers store or process personal information outside Australia, mainly in the United States, Canada and Ireland (for example Shopify, Meta, Google and Klaviyo), and may use other countries where they or their subcontractors operate. If you order for delivery outside Australia, we share your name, address and contact details with delivery providers and customs authorities in the destination country so your order can be delivered. We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles.

7. Storage, security and retention
Your information is stored electronically by us and our service providers and protected by access controls, encryption and secure payment processing. We keep personal information only for as long as we need it for the purposes above or to meet legal requirements (for example, tax records are generally kept for at least 5 years), and then delete or de-identify it. If we have a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) where required by law.

8. Automated decisions
We do not make decisions about you using only automated processes that significantly affect your rights or interests. Our checkout uses Shopify's automated fraud screening, which may flag or block a suspicious transaction. If you think your order was affected, contact us and a person will review it.

9. Children, reviews and photos
Our website is intended for adults. We do not knowingly collect personal information directly from anyone under 18. If you submit a review photo that shows a child, you confirm that you are their parent or guardian (or have their permission), and you can ask us to remove it at any time.

10. Access and correction
You can ask to access or correct the personal information we hold about you by contacting us. We will respond within 30 days. There is no charge to make a request, but we may need to verify your identity first. If we refuse a request, we will tell you why and how you can complain.

11. Complaints
If you have a concern about how we have handled your personal information, please contact us first and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992. If you are in New Zealand, you can also complain to the New Zealand Office of the Privacy Commissioner at www.privacy.org.nz.

12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

13. Contact us
Pipi Swimwear Pty Ltd
Email: hello@pipiswimwear.com.au
Phone: 1300 644 998

We're an online store. All orders are shipped from Sydney, NSW.