This Cookie Policy applies to visitors to our Australian store at dollyanddotty.com.au (the Site) and to any Dolly and Dotty email or communication that links to it.

Dolly and Dotty is a trading name of Calveos Group Pte. Ltd., ABN 97 851 862 346. In this policy, “we”, “us” and “our” mean Calveos Group Pte. Ltd. trading as Dolly and Dotty.

We handle personal information in accordance with the Privacy Act 1988 (Cth) (the Privacy Act) and the 13 Australian Privacy Principles (APPs). We carry on business in Australia and collect personal information in Australia, so the Privacy Act applies to us.

This policy expands on section 4 of our Privacy Policy and should be read together with it. Our Privacy Policy explains more fully what personal information we collect, why, who we disclose it to and how you can access or correct it.

1. Are cookies “personal information”?

Sometimes, yes - and we want to be clear about that rather than claim otherwise.

Much of what our cookies record is technical or statistical and is not linked to a named person. However, cookies also assign your device an identifier, and where we can reasonably link that identifier to you - for example, because you are logged in, have placed an order, or have subscribed to our newsletter - the information becomes personal information under the Privacy Act. We may also combine cookie data with personal information we already hold about you, such as your order history.

When cookie data is personal information, we handle it in accordance with the APPs and our Privacy Policy. We do not use cookies to collect sensitive information (as that term is defined in the Privacy Act).

2. What we use cookies for

3. Who sets cookies on our Site

Cookies on our Site are set either by us, or on our behalf by service providers we engage. Our current providers are:

•      Shopify: our e-commerce platform and hosting: accounts, shopping bag, checkout and Site functionality.

•      Shopify Payments: card payment processing and automated fraud screening at checkout. Fraud screening is explained in section 7 of our Privacy Policy; a person always reviews an order before we decline it on fraud grounds.

•      Shopify Inbox: the chatbot built into our Site.

•      Google Analytics: Site analytics and reporting. Google holds this information and it may be transferred outside Australia. Google’s privacy policy is at policies.google.com/privacy.

•      Klaviyo: our email and SMS marketing platform. It sets cookies or similar identifiers when you use those features, and records whether you have opened or clicked our emails.

•     Meta Pixel and Google Ads tags: advertising delivery and measurement. These providers may match the information they receive with information they already hold about you.

•      Trustpilot and Reviews.io: collecting and displaying customer reviews.

Some of these are third parties who set their own cookies and use the data for their own purposes as well as ours. We do not control those cookies. We recommend you read the relevant provider’s own privacy and cookie notices.

We do not sell your personal information, and we do not disclose it to a third party for that third party’s own direct marketing without your express consent.

4. How long cookies last

•      Session cookies are deleted when you close your browser. We use them to keep track of you as you move around the Site, to keep track of the items in your shopping bag, and to prevent fraud and improve Site security. Blocking them means you cannot complete a purchase.

•      Persistent cookies stay on your device until they expire or you delete them - typically from a few days to around two years, depending on the cookie. We use them to recognise you when you return, to remember your preferences including your size and region, and to measure Site performance and, where you have agreed, to deliver and measure advertising.

5. Disclosure of cookie data overseas (APP 8)

Within Australia: Order fulfilment, returns handling and delivery are carried out in Australia by our fulfilment provider Invenco, at their Melbourne warehouse, and by our delivery carriers. Those disclosures are set out in our Privacy Policy.

Overseas: Part of our technology stack sits outside Australia. Information collected by cookies - including personal information - is likely to be disclosed to recipients in the following countries:

Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in a way consistent with the APPs — principally through contractual commitments in our agreements with them. Some of these countries do not have data protection laws equivalent to Australia’s, and we may not be able to control or enforce how an overseas recipient handles your information in every case. If an overseas recipient we have disclosed your information to mishandles it, you can still complain to us using the details below.

If you post personal information for publication, for example, in a public product review, it will be published on the internet and may be accessible worldwide.

6. Your choices

Marketing emails and SMS. Every marketing message we send identifies us and includes a functional unsubscribe facility, as required by the Spam Act 2003 (Cth). You can opt out at any time using the unsubscribe link in any marketing email or by emailing us. We will action your request within 5 business days. Unsubscribing stops the messages but does not by itself clear cookies already on your device.

Browser controls. Most browsers let you refuse all cookies, refuse third-party cookies only, or delete cookies already stored. The steps differ between browsers, check your browser’s help or privacy settings.

A note on what happens if you block cookies. Blocking only third-party cookies will not stop you browsing or ordering. Blocking all cookies, including our strictly necessary ones, will prevent you logging in, keeping items in your bag and completing a purchase, and will affect the usability of many other websites too. Deleting cookies removes them for now, but they will be set again on your next visit unless you have also blocked them.

7. Children

Our Site is intended for use by adults. We do not knowingly use cookies to build advertising profiles of children. Orders may only be placed by a person aged 18 or over, or by a parent or guardian on a child’s behalf. If you believe we hold information about a child that we should not, please contact us and we will look into it.

8. Access, correction and complaints

You can ask us for a copy of the personal information we hold about you, including information collected through cookies, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. You can also ask us to delete it, and we will do so unless we are required or entitled by law to keep it.

We will acknowledge your request promptly and respond within 30 days. We will not charge you for making a request, and we will not ask for more identity information than we need. Section 13 of our Privacy Policy sets out the full process.

If you have a complaint about how we have handled your personal information, please tell us in writing. We will acknowledge it within 2 business days and give you a substantive response within 30 days. 

9. Changes to this policy

We may update this policy from time to time by publishing a new version on the Site - for example, to reflect changes to our practices, our providers or the law. Where changes are significant, we will take reasonable steps to notify you. The date at the top of this policy shows when it was last updated.

10. How to contact us

Email: sales@dollyanddotty.com.au

We aim to reply within one business day.

Please note: email is the quickest way to reach us. Our Melbourne fulfilment centre is not a retail location and cannot accept correspondence or in-person requests. Returns go to the address on our Return Policy page.