Privacy Policy

Last updated: 23-09-2026

Section 1 — Who we are and scope

This Privacy Policy applies to our online store for customers in Australia and to all personal information handled in connection with visiting our website, using our online store, placing an order or contacting our customer service.

The entity responsible for handling personal information is:

Cass Online
Aristoteleslaan 19
2493ZN Den Haag
the Netherlands
Chamber of Commerce number: 92595545
VAT number: NL004963358B97
Phone: +31 6 53541092
Email: support@bondis-boutique.com

This Privacy Policy is intended for visitors to our website and customers in Australia who view products, place orders or get in touch with us.

Section 2 — Legal framework

When handling personal information, we comply with the applicable privacy laws. These include, where applicable:

  • the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs);
  • the Spam Act 2003 (Cth), in relation to commercial electronic messages;
  • the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, as we are established in the Netherlands.

We only collect and use personal information where this is reasonably necessary for a clearly described purpose.

Section 3 — Changes to this Privacy Policy

We may update this Privacy Policy from time to time. This may be necessary when our website, services, technical systems or legal requirements change.

The current version of this Privacy Policy is always available on our website. If we make material changes, we will inform you where required by email or through a clear notice on our website.

We recommend that you read this Privacy Policy regularly so that you stay informed about how we handle personal information.

Section 4 — What personal information we collect

We collect personal information that you provide to us yourself, that is collected automatically when you visit our website, or that we receive from service providers where this is necessary to deliver our services.

4.1 Information you provide

When you place an order, create a customer account, sign up for our newsletter or contact our customer service, we may collect the following information:

  • first and last name;
  • billing address;
  • delivery address;
  • email address;
  • phone number;
  • products ordered;
  • order number;
  • payment confirmation;
  • shipping and return information;
  • messages and enquiries to our customer service;
  • where applicable, account details such as username and encrypted password.

4.2 Information collected automatically

When you visit our website, technical and usage information may be collected automatically. This includes, among other things:

  • IP address;
  • device information;
  • browser type and version;
  • operating system;
  • pages visited;
  • click and usage behaviour;
  • date and time of your visit;
  • cookie and tracking data, where you have given your consent.

4.3 Information from third parties

In some cases, we receive personal information from service providers involved in processing your order or in the technical operation of our online store. These include, for example:

  • payment service providers;
  • shipping and logistics providers;
  • Shopify as our technical platform;
  • marketing and analytics partners, where you have given your consent.

We only collect information that is necessary for the relevant purpose.

Section 5 — Why we collect and use personal information

We only collect and use personal information for specific, clear and lawful purposes, in particular:

  • processing and delivering your order;
  • processing payments;
  • sending order confirmations and shipping information;
  • handling returns, refunds and complaints;
  • responding to customer enquiries;
  • providing and improving our website;
  • protecting our website and preventing fraud;
  • complying with legal obligations, for example tax record-keeping requirements;
  • sending newsletters and marketing emails, where you have consented;
  • analysing website usage, where you have consented;
  • showing relevant advertising, where you have consented.

If you do not provide the personal information we request, we may not be able to process your order or respond to your enquiry.

Section 6 — Disclosure of personal information

We only disclose personal information where this is necessary to provide our services, where we are legally required to, where another lawful basis applies, or where you have consented.

Recipients of personal information may include:

  • payment service providers to process your payment;
  • shipping and logistics providers to deliver your order;
  • IT and hosting providers;
  • Shopify as our e-commerce platform;
  • customer service and communication tools;
  • analytics and marketing providers, where you have consented;
  • authorities or other bodies where we are legally required to disclose information.

Where service providers handle personal information on our behalf, we enter into appropriate agreements with them.

We do not sell your personal information to third parties.

Section 7 — Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files stored on your device. They help make the website functional, secure and user-friendly.

We distinguish between the following cookie categories:

7.1 Necessary cookies

These cookies are required for our website to work. For example, they enable the shopping cart, checkout, language settings and security features. No consent is required for necessary cookies.

7.2 Analytics cookies

Analytics cookies help us understand how visitors use our website so that we can improve our website, content and usability.

7.3 Marketing and tracking cookies

Marketing and tracking cookies may be used to show personalised advertising, measure the effectiveness of advertising or re-engage visitors.

You can change your cookie settings at any time via our cookie banner or your browser settings. Please note that disabling certain cookies may limit the functionality of the website. More information can be found in our Cookie Policy.

Section 8 — Shopify

Our online store runs on Shopify. Shopify provides the technical e-commerce platform through which we offer products, manage orders, process payments and provide the checkout.

Shopify may handle personal information on our behalf, such as contact details, order data, payment information, technical data and information about how you use the store.

Shopify is headquartered in Canada, among other locations, and may process data outside Australia. Appropriate safeguards are used to ensure an adequate level of data protection.

More information can be found in Shopify's privacy policy: https://privacy.shopify.com

Section 9 — Payment service providers

When you place an order in our online store, payment information is processed by the payment service providers offered. We do not receive your full payment details, only the information necessary to confirm your payment and process your order.

Depending on the payment method you choose, information may be passed on to the relevant payment provider. The payment provider's own privacy policy also applies to their processing.

Section 10 — Shipping and delivery

So that your order can be delivered, we share the necessary personal information with shipping and logistics providers. This includes in particular:

  • name;
  • delivery address;
  • email address;
  • phone number, where required for delivery;
  • order and shipping information.

This information is used solely to deliver your order, provide shipping status updates and resolve any delivery issues.

Section 11 — Overseas disclosure of personal information

Because Cass Online is based in the Netherlands, your personal information will be handled outside Australia. It may be disclosed to recipients in, among other places, the Netherlands and other countries of the European Union, Canada and the United States, for example where we use service providers located in those countries or operating technical systems there.

In such cases, we take reasonable steps to ensure that overseas recipients handle your personal information in a manner consistent with the Australian Privacy Principles. This may include contractual safeguards such as EU Standard Contractual Clauses and additional technical and organisational security measures.

On request, we will inform you, where possible and required, about the safeguards applicable to a particular transfer.

Section 12 — Children's information

Our website and products are not specifically aimed at minors. We do not knowingly collect personal information from persons under 16 years of age without the consent of a parent or guardian.

If we discover that we hold personal information of a minor without a valid basis, we will delete it as soon as possible. Parents or guardians who suspect that a child has submitted personal information to us can contact us at support@bondis-boutique.com.

Section 13 — Security of personal information

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

These measures include, among other things:

  • encrypted connections via SSL/TLS;
  • access restrictions on a need-to-know basis;
  • secure systems for processing orders and payments;
  • encrypted storage of passwords where accounts are used;
  • regular review of technical and organisational security measures.

Despite all security measures, data transmission over the internet can never be completely risk-free. However, we do our best to protect your information.

Section 14 — Retention periods

We only keep personal information for as long as necessary for the relevant purposes or as required by law.

As a guide:

  • order and invoice data: in line with statutory record-keeping obligations;
  • customer account data: for as long as your account exists or until you request deletion, unless legal obligations prevent this;
  • customer service enquiries: for as long as necessary for handling and follow-up;
  • marketing data: until you withdraw your consent;
  • cookie and analytics data: depending on the respective cookie lifetime and your settings;
  • website log files: only for as long as necessary for security, analysis and troubleshooting.

When personal information is no longer needed and there is no legal obligation to keep it, it is deleted or de-identified.

Section 15 — Access and correction

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Depending on the applicable law, you may also request deletion of your information, object to certain processing or withdraw your consent.

To make a request, please contact us at support@bondis-boutique.com. We may ask you to verify your identity before processing your request. We will respond within a reasonable period, usually within 30 days.

Section 16 — Complaints

If you believe we have not handled your personal information properly, please contact us first at support@bondis-boutique.com. We will investigate your complaint and respond within a reasonable period, usually within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au

Section 17 — Marketing communications

We only send newsletters and commercial emails if you have consented or if another lawful basis applies.

You can unsubscribe at any time via the unsubscribe link at the bottom of every marketing email. Alternatively, you can send a message to support@bondis-boutique.com to withdraw your consent.

Transactional emails, such as order confirmations, shipping information or return information, are not marketing communications. These emails are sent because they are necessary to process your order or enquiry.

Section 18 — Links to external websites

Our website may contain links to external websites, for example payment services, shipping services, social media or other external platforms.

We have no control over the content and privacy practices of these external websites. Please read the privacy policy of the relevant website before providing any personal information there.

Section 19 — Customer service and contact

If you have any questions about this Privacy Policy or the handling of your personal information, you can contact us at any time:

Cass Online
Aristoteleslaan 19
2493ZN Den Haag
the Netherlands
Chamber of Commerce number: 92595545
VAT number: NL004963358B97
Phone: +31 6 53541092
Email: support@bondis-boutique.com

Opening hours: Monday to Friday, 9:00 am to 5:00 pm

Our current average response time is 24 hours.