Last updated 2026
When you place an order or create an account, we collect your name, email, shipping address, phone number and order history. Payment details are processed directly by Stripe — we never see or store your full card number.
We use this information to process and deliver orders, respond to enquiries, and — only if you opt in — send occasional updates about new arrivals and offers. We don't sell your data to third parties.
We share the minimum necessary information with our shipping carriers (to deliver your order), Stripe (to process payment) and Cloudinary (to serve product images) — each bound by their own privacy and security obligations.
You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete your account at any time by emailing ithazhiboutique@gmail.com.
We use essential cookies to keep your cart and session working, and optional analytics cookies to understand how the site is used. You can disable non-essential cookies in your browser settings.
We use Microsoft Clarity to understand how visitors use this website. Clarity records how pages are used — clicks, scrolling and navigation — and can replay a session as an anonymised recording, so we can see where the shop is confusing and fix it. We use this only to improve the site, never to identify you.
Personal details are masked before anything is recorded. Your name, address and contact details are hidden from these recordings, and your card number is never seen by this website at all — payment happens on Stripe’s own secure page. You can read how Microsoft handles this data in the Microsoft Privacy Statement.
Some of the services we rely on store or process information outside Australia — Stripe for payments, Cloudinary for product photographs, Microsoft for analytics, and our website hosting and email providers. This means your information may be handled in the United States or elsewhere. We take reasonable steps to ensure each of these providers protects it to a standard consistent with the Australian Privacy Principles.
We keep order records for as long as we are required to for tax and consumer-law purposes — generally seven years. Account details are kept until you ask us to delete them. Analytics data is retained by Microsoft in line with their own policy and is not linked to your account.
If you have a concern about how we have handled your information, please contact us first and we will respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.