Privacy Policy

This is a starting template, not legal advice. Every [PLACEHOLDER] below must be reviewed and completed — ideally with input from someone familiar with Australian small-business compliance — before it is relied upon as the site's real policy.

1. Who we are

Stitches by Dibi ("we", "us", "our") is a small crochet fashion house based in Adelaide and Melbourne, Australia. This policy explains what personal information we collect when you visit stitchesbydibi.com or place an order with us, and what we do with it.

2. What we collect

• Your name, email address, phone number and shipping address when you place an order or make a custom request.
• Payment information, processed securely by Stripe (once payment integration is live). We do not store your card numbers on our servers.
• Reference photos and inspiration images you upload as part of a custom order.
• Photos you voluntarily submit to our "Wear Dibi" community gallery.
• Messages you send us via the contact form or by email.
• Your email address if you subscribe to our newsletter or restock alerts.
• Basic technical information (browser type, general location, pages visited) via standard web logs.

3. How we use it

• To fulfill and ship your orders.
• To communicate with you about custom orders, production stages, and delivery.
• To send marketing emails and restock alerts you have opted in to. You can unsubscribe at any time using the link in any email.
• To display community photos submitted to "Wear Dibi" (only with your submission).
• To keep the website secure and improve our service.

4. Third parties your data flows through

We use trusted service providers to operate the site. Your information may be processed by:

• Supabase — database and file storage hosting (order details, custom request info, uploaded images).
• Stripe — payment processing (once live). Card data is handled directly by Stripe.
• Resend — transactional email delivery (order confirmations, custom order updates, restock alerts).

We do not sell your personal information to anyone.

5. Cookies and local storage

We use your browser's local storage to remember your shopping cart and wishlist between visits. These are not tracking cookies — they simply let the site work. We may also use minimal analytics to understand how the site is used.

6. How long we keep it

[PLACEHOLDER — Dibi to decide retention periods, e.g. "Order records: 7 years for tax purposes. Custom order reference images: 12 months after order completion unless you ask us to delete them sooner. Newsletter subscribers: until you unsubscribe."]

7. Your rights

You can ask us at any time to:

• See what personal information we hold about you.
• Correct anything that's wrong or out of date.
• Delete your information (subject to any legal record-keeping we're required to maintain).
• Unsubscribe from marketing emails.

The quickest way is to use our privacy request form. You can also email us at stitchesbydibi@gmail.com with "Privacy request" in the subject line.

8. Australian Privacy Act

[PLACEHOLDER — confirm whether formal Australian Privacy Act 1988 compliance obligations apply at this business's size and turnover. Small businesses under the AUD 3 million annual turnover threshold are often exempt, but there are exceptions. Dibi should confirm with a professional before finalizing this section.]

9. Changes to this policy

If we update this policy, we'll post the new version here and update the "Last updated" date at the top.