Privacy policy

Last updated: 10 July 2026

1. About this Privacy Policy

Bumpii Pty Ltd (ABN 33 690 656 609) (“Bumpii”, “we”, “us” or “our”) operates the Bumpii website and online store at bumpii.com.au, including the related content, features, products, tools and services that we make available through the website collectively, the “Services”).

Our business is based in Victoria, Australia.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

  • Visit or use our website;

  • Create or use a customer account;

  • Purchase, return or enquire about our products;

  • Subscribe to marketing communications;

  • Communicate with us through email, social media or customer support;

  • Participate in a promotion, competition or survey; or

  • Otherwise interact with Bumpii.

Our online store is hosted by Shopify, which provides the ecommerce platform that enables us to offer the Services.

Where there is a conflict between this Privacy Policy and our Terms of Service concerning the collection, holding, use or disclosure of personal information, this Privacy Policy will apply to that issue.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the information contained in this Privacy Policy.

2. What Is Personal Information?

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable.

Personal information does not generally include information that has been anonymised or de-identified so that it can no longer reasonably identify or be linked to an individual.

The meaning of personal information may vary depending on the privacy laws that apply in your location.

3. Personal Information We Collect

The personal information we collect depends on how you interact with Bumpii and which features of the Services you use.

Contact information

We may collect:

  • Your name;

  • Email address;

  • Telephone number;

  • Billing address;

  • Shipping or delivery address; and

  • Other contact information you provide to us.

Order and transaction information

We may collect:

  • Products viewed, added to your cart or purchased;

  • Order numbers and transaction history;

  • Purchase amounts;

  • Shipping and fulfilment information;

  • Returns, refunds, exchanges and cancellations;

  • Discount codes or promotions used;

  • Payment status; and

  • Communications relating to your order.

Payment information

Payments are processed through Shopify Payments, PayPal or other payment-service providers made available through our checkout.

These providers may collect payment information such as your payment-card number, account details, billing details and other information needed to process your payment.

Bumpii generally receives limited information about your payment, such as:

  • The payment method used;

  • Payment status;

  • Transaction amount;

  • Billing details; and

  • Limited payment-card details, such as the card type and last digits.

Bumpii does not generally receive or store your complete payment-card number.

Customer account information

If customer accounts are available and you create one, we may collect:

  • Your account login details;

  • Saved contact and delivery information;

  • Order history;

  • Preferences; and

  • Account settings.

You are responsible for maintaining the confidentiality of your account credentials and should not share your password or login information with another person.

Communications and customer-support information

We may collect information you provide when you:

  • Contact customer support;

  • Make an enquiry;

  • Submit a complaint;

  • Request a return or replacement;

  • Communicate with us through email or social media; or

  • Otherwise correspond with Bumpii.

This may include the contents of your message and any photographs, videos, documents or other materials you send to us.

Reviews and user-submitted content

If you submit a product review, photograph, testimonial or other content, we may collect and publish the information you provide, including your display name, review, rating and accompanying media.

You should not include sensitive personal information in content that may be published publicly.

Device and technical information

When you access the Services, we and our service providers may automatically collect information such as:

  • Internet Protocol address;

  • Browser type;

  • Device type;

  • Operating system;

  • Device and advertising identifiers;

  • Network information;

  • Approximate location derived from your IP address;

  • Cookie identifiers; and

  • Information about errors or technical performance.

Website usage information

We may collect information about how you use the Services, including:

  • Pages and products viewed;

  • The date and time of your visit;

  • Time spent on pages;

  • Links clicked;

  • Cart and checkout activity;

  • Referring websites or advertisements;

  • Interactions with marketing communications; and

  • How you navigate and interact with the website.

Marketing information

If you subscribe to marketing communications or otherwise provide your consent, we may collect:

  • Your email address;

  • Marketing preferences;

  • Whether you opened or interacted with a communication;

  • Products or promotions that may interest you; and

  • Information used to personalise advertising.

Fraud-prevention information

We or our payment and fraud-prevention providers may collect or generate information used to identify, investigate or prevent fraudulent, unauthorised or unlawful activity.

This may include transaction information, device information, IP addresses, delivery information, payment risk indicators and the results of fraud-screening checks.

4. How We Collect Personal Information

We may collect personal information:

Directly from you

This includes when you:

  • Make a purchase;

  • Create an account;

  • Contact us;

  • Request support;

  • Subscribe to marketing;

  • Submit a return, warranty or replacement request;

  • Leave a review;

  • Enter a promotion; or

  • Otherwise provide information to us.

Automatically

We may collect information automatically through:

  • Cookies;

  • Pixels;

  • Tags;

  • Software development kits;

  • Server logs;

  • Analytics tools; and

  • Similar tracking technologies.

From service providers

We may receive information from service providers that assist us with:

  • Website hosting;

  • Payment processing;

  • Fraud prevention;

  • Shipping and fulfilment;

  • Analytics;

  • Advertising;

  • Email marketing;

  • Customer support;

  • Product reviews; and

  • Cloud storage.

From advertising and business partners

We may receive information from advertising platforms, social-media platforms and other partners when permitted by law.

For example, an advertising platform may provide information about whether a person interacted with one of our advertisements.

From publicly available sources

We may collect information that you have made publicly available, including information posted publicly on social-media platforms, where it is reasonably necessary for our business activities and permitted by law.

5. Why We Collect and Use Personal Information

We may collect, hold, use and disclose personal information for the following purposes.

Providing and administering the Services

We use personal information to:

  • Operate our website and online store;

  • Process and fulfil orders;

  • Process payments;

  • Arrange shipping and delivery;

  • Provide order confirmations and tracking information;

  • Manage customer accounts;

  • Process returns, refunds, replacements and exchanges;

  • Provide customer support;

  • Respond to questions and complaints;

  • Maintain records of transactions; and

  • Otherwise perform our obligations to you.

Improving and personalising the Services

We may use personal information to:

  • Understand how customers use our website;

  • Improve website performance and usability;

  • Develop or improve products and services;

  • Remember customer preferences;

  • Recommend products;

  • Personalise content; and

  • Measure customer satisfaction.

Marketing and advertising

Subject to applicable law and your communication preferences, we may use personal information to:

  • Send promotional emails;

  • Inform you about products, offers and promotions;

  • Measure the effectiveness of our marketing;

  • Create advertising audiences;

  • Display advertisements on other websites and social-media platforms;

  • Conduct remarketing or retargeting; and

  • Personalise advertisements based on your interactions with Bumpii.

You can unsubscribe from promotional emails at any time by selecting the unsubscribe link in the relevant email.

Even if you unsubscribe from marketing, we may still send non-promotional communications relating to your orders, account, customer-support requests, legal notices or other transactions with us.

Security and fraud prevention

We may use personal information to:

  • Authenticate account access;

  • Protect our website, customers and business;

  • Detect, investigate and prevent fraud;

  • Identify suspicious or unauthorised transactions;

  • Prevent misuse of the Services;

  • Enforce our terms and policies; and

  • Protect the rights, safety and property of Bumpii, our customers and others.

Legal and regulatory purposes

We may use personal information to:

  • Comply with applicable laws;

  • Maintain accounting, tax and business records;

  • Respond to lawful requests from courts, regulators, government agencies or law-enforcement authorities;

  • Establish, exercise or defend legal claims;

  • Resolve disputes;

  • Investigate possible breaches of our terms or policies; and

  • Meet our other legal and regulatory obligations.

6. Legal Bases for Processing in the EEA and United Kingdom

Where the European Union General Data Protection Regulation, United Kingdom General Data Protection Regulation or similar law applies, we process personal information using one or more of the following legal bases:

Performance of a contract

We may process your personal information when it is necessary to enter into or perform a contract with you, including to:

  • Process your order;

  • Accept payment;

  • Deliver products;

  • Provide customer support; and

  • Manage returns, refunds or replacements.

Compliance with a legal obligation

We may process personal information when necessary to comply with tax, accounting, consumer-protection, regulatory or other legal obligations.

Legitimate interests

We may process personal information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

These legitimate interests may include:

  • Operating and improving our business;

  • Protecting the security of the Services;

  • Preventing fraud;

  • Understanding website performance;

  • Responding to enquiries;

  • Maintaining appropriate business records; and

  • Marketing our products where permitted by law.

Consent

We may process personal information based on your consent, including for certain:

  • Marketing communications;

  • Advertising activities;

  • Analytics technologies; and

  • Non-essential cookies.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing that occurred before consent was withdrawn.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients where reasonably necessary for the purposes described in this Privacy Policy.

Shopify

Our online store is hosted by Shopify. Information submitted through the Services may be transmitted to and processed by Shopify to provide, secure, personalise and improve the ecommerce services used by Bumpii.

Shopify may also process certain information as an independent controller or business for its own purposes, including to provide enhanced commerce features, security, fraud prevention and personalised services across Shopify merchants.

You can learn more by reviewing the Shopify Consumer Privacy Policy:

Depending on your location, you may also be able to manage certain Shopify privacy choices through the Shopify Privacy Portal:

Payment providers

We may disclose personal information to payment processors, banks and financial-service providers to:

  • Process payments;

  • Confirm transactions;

  • Issue refunds;

  • Prevent fraud; and

  • Resolve payment disputes or chargebacks.

This may include Shopify Payments, PayPal and any other payment provider you select at checkout.

Shipping and fulfilment providers

We may disclose your name, address, contact information, order information and delivery instructions to couriers, postal services, fulfilment providers and logistics partners so they can deliver your order.

Technology and business-service providers

We may disclose information to providers that assist us with:

  • Hosting;

  • Cloud storage;

  • Website operation;

  • Customer accounts;

  • Email delivery;

  • Customer support;

  • Data analytics;

  • Accounting;

  • Legal services;

  • Information security;

  • Fraud prevention;

  • Product reviews; and

  • Other operational functions.

Marketing and advertising providers

We may disclose or make limited information available to advertising, analytics and marketing providers where permitted by law.

This may include information about:

  • Website visits;

  • Product views;

  • Cart activity;

  • Purchases;

  • Device identifiers;

  • Cookie identifiers; and

  • Interactions with advertisements.

Advertising partners may use cookies or similar technologies to provide or measure personalised advertisements across different websites and platforms. This may include Meta, Google, TikTok, Klaviyo, X.com or other platforms. 

Professional advisers

We may disclose information to accountants, lawyers, insurers, auditors and other professional advisers where reasonably necessary to obtain advice, manage our business or protect our legal rights.

Legal and regulatory recipients

We may disclose personal information where we reasonably believe disclosure is necessary to:

  • Comply with applicable law;

  • Respond to a court order, subpoena, warrant or lawful government request;

  • Protect the rights, property or safety of Bumpii, our customers or others;

  • Investigate fraud or unlawful conduct; or

  • Enforce our terms and policies.

Business transactions

If Bumpii is involved in a merger, acquisition, reorganisation, financing, sale of assets, insolvency or similar business transaction, personal information may be disclosed to relevant parties and advisers as part of that transaction.

At your direction or with your consent

We may disclose personal information when you direct us to do so or otherwise provide your consent.

8. Cookies, Analytics and Targeted Advertising

We and our service providers use cookies, pixels, tags, scripts and similar technologies to:

  • Operate essential website functions;

  • Remember settings and preferences;

  • Keep the website secure;

  • Maintain cart and checkout functionality;

  • Analyse website traffic;

  • Understand how customers use the Services;

  • Measure marketing performance;

  • Personalise content; and

  • Provide targeted or personalised advertising.

These technologies may collect information such as:

  • IP address;

  • Browser and device information;

  • Cookie and advertising identifiers;

  • Pages and products viewed;

  • Referring websites;

  • Cart and checkout activity;

  • Purchase activity; and

  • Interactions with advertisements.

Essential cookies

Some cookies are necessary for the website, checkout, fraud prevention and other core functions to operate. These cookies generally cannot be disabled through our website without affecting the availability or performance of the Services.

Analytics and advertising cookies

Where required by applicable law, we will obtain your consent before using non-essential analytics or advertising cookies.

You may manage or withdraw your choices through the cookie-preferences tool made available on our website.

Where required by applicable law, we will obtain your consent before placing non-essential analytics, advertising or personalisation cookies on your device.

When you first visit our website, you may be presented with a cookie banner that allows you to accept, reject or manage certain categories of cookies. Essential cookies required for the operation, security and checkout functionality of the website may remain active because they are necessary to provide the Services.

You may review or change your cookie preferences at any time through the cookie-preferences link or tool available on our website. Withdrawing consent will not affect the lawfulness of any processing that occurred before consent was withdrawn.

You may also control cookies using your browser settings. Blocking cookies may affect the operation of certain website features.

Depending on your location, certain disclosures for cross-context behavioural advertising or targeted advertising may be considered “sharing” or a “sale” under applicable privacy laws, even where no money is exchanged.

Where applicable, you may exercise an opt-out right through the privacy or cookie controls made available on our website or by contacting us.

9. International Disclosures and Transfers

Bumpii is based in Australia, but some of our service providers operate or store information in other countries.

As a result, your personal information may be disclosed to, stored in or processed in countries outside Australia and outside the country in which you live.

These countries and regions may include Australia, Canada, the United States, New Zealand, Singapore, the United Kingdom and countries within the European Economic Area. The specific locations in which your personal information is processed may vary depending on the service providers, payment methods, shipping services and website features used in connection with your transaction.

Privacy and data-protection laws in these countries may differ from those in your jurisdiction.

Where required by applicable law, we take reasonable steps to ensure that overseas disclosures are subject to appropriate privacy protections.

Where personal information is transferred from the European Economic Area or United Kingdom to a country that has not been recognised as providing an adequate level of protection, the relevant provider may rely on approved contractual safeguards, including the European Commission’s Standard Contractual Clauses, the United Kingdom International Data Transfer Agreement or an applicable United Kingdom addendum.

10. How We Store and Protect Personal Information

We generally hold personal information electronically through Shopify and other cloud-based systems and service providers.

We take reasonable administrative, technical and organisational measures designed to protect personal information from:

  • Misuse;

  • Interference;

  • Loss;

  • Unauthorised access;

  • Unauthorised modification; and

  • Unauthorised disclosure.

These measures may include access restrictions, account-security controls, secure service providers and internal processes for handling personal information.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

You should avoid sending sensitive or confidential information through insecure communication channels.

If you create a customer account, you are responsible for keeping your account credentials confidential and notifying us if you believe your account has been accessed without permission.

11. How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The appropriate retention period depends on factors including:

  • The type and sensitivity of the information;

  • Whether it is required to provide the Services;

  • Whether it is needed to manage an account;

  • Warranty, return and customer-service requirements;

  • Fraud-prevention and security requirements;

  • Accounting, tax and legal recordkeeping obligations;

  • The need to resolve disputes;

  • The establishment, exercise or defence of legal claims; and

  • Other applicable legal requirements.

When personal information is no longer reasonably required, we take reasonable steps to delete, destroy or de-identify it, subject to any legal requirement to retain it.

Information may remain for a limited period in secure backups after it has been removed from active systems.

12. Third-Party Websites and Services

The Services may contain links to websites, applications or platforms operated by third parties.

We do not control and are not responsible for the privacy, security or content of third-party services.

If you follow a link to a third-party service, you should review that provider’s privacy policy and terms before providing personal information.

The inclusion of a third-party link does not necessarily indicate that Bumpii endorses or is affiliated with that third party.

Information you publish on public or semi-public platforms, including social-media platforms or public product reviews, may be visible to other users and may be collected or used by third parties.

13. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 16 years of age.

We do not knowingly collect personal information directly from children under 16.

If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorisation, please contact us using the details below. We will take reasonable steps to investigate and, where appropriate, delete the information.

We do not knowingly sell or share, as those terms may be defined under applicable law, the personal information of individuals under 16 years of age.

14. Your Privacy Rights

The privacy rights available to you depend on the laws that apply in your location. These rights are not absolute and may be subject to conditions or exceptions.

Depending on your location, you may have the right to:

  • Request access to personal information we hold about you;

  • Request correction of inaccurate or incomplete information;

  • Request deletion of your personal information;

  • Request restriction of processing;

  • Object to certain processing;

  • Receive certain information in a portable format;

  • Request transfer of certain information to another organisation;

  • Withdraw consent where processing is based on consent;

  • Opt out of targeted advertising or certain information sharing;

  • Opt out of marketing communications;

  • Appeal certain decisions concerning a privacy request; and

  • Lodge a complaint with a privacy or data-protection authority.

You may make a request by contacting us at support@bumpii.com.

We may need to verify your identity before completing a request. This may require information reasonably necessary to confirm that you are the person to whom the information relates.

You may also authorise another person to submit a request on your behalf. We may require evidence that the person has authority to act for you and may contact you directly to verify the request.

We will respond within the period required by applicable law.

We will not unlawfully discriminate against you because you exercised a privacy right.

In some circumstances, we may refuse or limit a request where permitted or required by law. If this occurs, we will explain our decision where legally required.

15. Accessing and Correcting Your Information in Australia

You may request access to personal information Bumpii holds about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Requests may be made using the contact information below.

We will respond within a reasonable period and may need to verify your identity.

We generally do not charge for making an access or correction request. Where permitted by law, we may charge a reasonable amount for costs associated with providing access. We will notify you before applying any charge.

There may be circumstances in which we are permitted or required to refuse access or correction. Where required by law, we will provide written reasons for the refusal and information about available complaint mechanisms.

16. Marketing Preferences

You may unsubscribe from promotional emails at any time by:

  • Selecting the unsubscribe link in the email; or

  • Contacting us using the details below.

It may take a short period for an unsubscribe request to be processed.

After unsubscribing from marketing, you may continue to receive communications that are necessary to:

  • Process or deliver an order;

  • Administer your account;

  • Respond to a customer-service request;

  • Provide information about a return, refund or replacement;

  • Send a legal or security notice; or

  • Complete another transaction you requested.

17. Privacy Complaints

If you have a complaint about how Bumpii has handled your personal information, please contact us using the details below.

Your complaint should include enough information for us to understand:

  • The nature of your concern;

  • The personal information or interaction involved;

  • Any relevant dates; and

  • The outcome you are seeking.

We will acknowledge and investigate your complaint and aim to provide a response within 30 days. If we need additional time, we will notify you and explain the reason for the delay.

If you are located in Australia and are not satisfied with our response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner.

Information about making a complaint is available through the OAIC website.

If you are located outside Australia, you may also have the right to lodge a complaint with the privacy or data-protection authority in your country or region.

Individuals in the European Economic Area or United Kingdom may lodge a complaint with their relevant supervisory authority.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our products or Services;

  • Our information-handling practices;

  • Our service providers;

  • Applicable laws;

  • Regulatory guidance; or

  • Other operational, legal or business requirements.

When we make changes, we will publish the revised Privacy Policy on our website and update the “Last updated” date.

Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

You should review this Privacy Policy periodically to remain informed about how we handle personal information.

19. Contact Us

For questions, privacy requests or complaints, please contact:

Bumpii Pty Ltd
ABN: 33 690 656 609
Attention: Privacy Officer
Email: support@bumpii.com
Telephone: +61450495036

Please do not send complete payment-card details, account passwords or other highly sensitive information by email.