Privacy Policy

Sasha Therese Pty Ltd (ABN 33 666 238 722)

Last updated: 12 August 2026

1. About this Privacy Policy

Sasha Therese Pty Ltd (ABN 33 666 238 722) (Sasha Therese, we, us or our) is committed to protecting personal information and handling it in accordance with applicable data privacy laws and regulations, including but not limited to the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the General Data Protection Regulation (EU) 2016/679 (GDPR), the Personal Information Protection and Electronic Documents Act (PIPEDA), and the California Consumer Privacy Act as amended by the California Privacy Rights Act. Sasha Therese is also committed to comply with the Spam Act 2003 (Cth).

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

visit or use our website available at https://sashatherese.com;
purchase products from us;
create an online account;
subscribe to our mailing list;
subscribe to our SMS/mobile messaging service;
contact us or interact with us; or
engage with us through social media or other online platforms.

Before accessing or using our services, please ensure that you have read and understood our collection, storage, use and disclosure of your personal information as described in this Privacy Policy. By using our services, you agree to the practices described in this Privacy Policy.

Our website is not intended for or directed to persons under the age of 18, and we will not knowingly collect information from persons under 18. To provide information to us through registration, making a purchase, or in any other manner on our website, you must be 18 years of age or older. If you have reason to believe that a child under the age of 18 has provided personal information to us through services, please contact us pursuant to the section 17 and we will endeavor to delete that information from our databases.

2. What is personal information?

Personal information means information or an opinion about an identified individual, an individual who is reasonably identifiable, or a household, whether the information or opinion is true or not and whether it is recorded in a material form or not.

3. Personal information we collect

We collect personal information that is reasonably necessary for our business functions and activities as an online retailer.

The types of personal information that we may collect include:

Contact details, including your name, email address, telephone/mobile number, billing address and delivery address.
Account information, including username, password, account login details, order history, saved preferences and account settings.
Transaction and order information, including products purchased, order numbers, purchase history, delivery preferences, returns and exchange information, payment status and related customer service records.
Payment-related information, including payment method and transaction confirmation details. We do not ordinarily store complete credit card details where payments are processed by third-party payment providers.
Sizing and preference information, including garment size, fit preferences, style preferences and other information you choose to provide in connection with a purchase or enquiry.
Marketing and communication information, including newsletter subscriptions, SMS/mobile messaging subscriptions, marketing preferences, responses to surveys or promotions, and records of communications with us.
Technical and usage information, including IP address, browser type, device identifiers, operating system, pages visited, links clicked, referring website, session information and information collected through cookies, pixels and similar technologies.
SMS and mobile messaging data, including your mobile number, subscription and opt-out records, message delivery status, message interaction data, and device and carrier information collected by our SMS platform provider.
Social media information, where you interact with us through platforms such as Instagram, TikTok or Facebook, including your username, public profile information and any messages or content you send to us.

De-identified Information: To the extent that we are in possession of de-identified information, we commit to maintaining and using de-identified information without attempting to re-identify the information.

4. How we collect personal information

We usually collect personal information directly from you, including when you:

place an order through our website;
create or update an online account;
subscribe to our mailing list;
subscribe to or interact with our SMS/mobile messaging service, including by providing your mobile number through our website, at checkout, or through another subscription mechanism we make available;
contact us or engage with us by email, social media, online form or other communication channel;
participate in a promotion, competition or survey;
request customer support, a return or an exchange; or
browse or interact with our website.

We may also collect personal information from third parties where permitted by law, including:

payment processors;
delivery and logistics providers;
e-commerce platforms, SMS service provider and website service providers;
marketing and analytics providers;
social media platforms; and
fraud prevention or security service providers.

5. Cookie Policy

We may use cookies, pixels, tags and similar technologies to operate our website, improve user experience, understand website traffic, measure marketing performance and deliver relevant advertising. Cookies are text files that are stored on your device when you visit a website. Pixels and tags are code that allows us to gather information about how you have interacted with our website or communications, or to track your behavior across websites and devices.

These technologies may collect technical and usage information such as your IP address, device identifiers, browser details, pages viewed, tracking items placed in your cart (including when you have abandoned your checkout) and interactions with our website.

We may use third-party analytics or advertising services, including services provided by platforms such as Pinterest, Google, Meta, TikTok or similar providers. These providers may use information collected from our website and other websites to provide analytics, advertising measurement and targeted advertising services.

You can manage or disable cookies through your browser settings. You can adjust or withdraw your consent for cookies, except for strictly necessary cookies, at any time by clicking the "Cookie Settings" link in the footer of any page on our website. If cookies are disabled, some parts of our website may not function properly.

For more information about the specific cookies we use, including who sets the cookies and duration, please reference our Cookie Policy page.

Do Not Track Signals and Global Privacy Control: Our website does not currently respond to standard browser-based "Do Not Track" ("DNT") signals. However, where required by applicable law, we recognize and honor opt-out preference signals sent via Global Privacy Control ("GPC"). If your browser or device transmits a verified GPC signal when visiting our website, we will automatically treat that signal as a valid request to opt-out of non-essential third-party tracking tools and cookies for that specific session.

6. Why we collect, use and disclose personal information

We collect, use and disclose personal information for purposes connected with our business, including to:

process, fulfil and deliver orders;
manage payments, refunds, returns and exchanges;
create and manage customer accounts;
provide customer service and respond to enquiries;
communicate with you about orders, products, services and business updates;
send marketing communications, including by SMS/text message where permitted by law;
manage your SMS/mobile messaging subscription, including processing opt-in and opt-out requests and maintaining consent records;
personalise and improve your shopping experience;
operate, maintain, secure and improve our website;
conduct analytics, reporting and business planning;
administer promotions, surveys or competitions;
prevent fraud, misuse, security incidents and unlawful activity;
comply with legal, regulatory, tax and accounting obligations; and
manage disputes, complaints and legal claims.

We may also use or disclose personal information for a purpose related to the primary purpose of collection where you would reasonably expect us to do so, or where otherwise permitted or required by law.

7. Disclosure of personal information

We do not sell (as defined by applicable data privacy laws) personal information. We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy, including to:

payment processors and fraud prevention providers;
delivery, courier and logistics providers;
website hosting and e-commerce platform providers;
IT, cloud storage and software service providers;
email marketing, SMS marketing and customer relationship management providers;
analytics, advertising and social media platforms;
customer support and communications providers;
professional advisers, including lawyers, accountants and insurers;
regulators, law enforcement agencies, courts and government authorities where required or authorised by law; and
a purchaser or prospective purchaser of our business or assets, subject to appropriate confidentiality arrangements.

Sharing and Targeted Advertising: We utilize third-party tracking and analytics cookies that may result in the sharing of online identifiers with ad networks, which may constitute "sharing" or "targeted advertising" under applicable laws. In the preceding 12 months, we have shared categories of personal information including identifiers (such as IP addresses and cookie IDs), commercial information (such as products viewed or purchased and order values) and internet or electronic network activity information (such as browsing history and interactions with our site) with third-party advertising and analytics partners. To exercise your right to opt out of targeted advertising or sharing, you may click the "Do Not Sell or Share My Personal Information" link in our website footer or use Global Privacy Control (GPC).

8. Overseas disclosure

We are headquartered in Australia, and the personal information we collect may be transferred to, processed on, and stored on servers located within Australia or other countries where our third-party service providers may be located. These countries may have data protection laws that differ from, and in some cases may not be as protective as, the laws of your home jurisdiction. Where applicable law allows for such rights, and subject to statutory exceptions, we take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy.

Where we disclose personal information to overseas recipients, we will take reasonable steps to ensure that the recipient handles the information in a manner consistent with applicable privacy laws (such as the APPs), unless an exception under applicable privacy laws applies. Some recipient countries are subject to an adequacy decision by relevant regulatory bodies (such as the European Commission or the United Kingdom Government). For transfers to countries where this is not the case, we protect such transfers by implementing appropriate statutory transfer mechanisms. This includes utilizing the modernized Standard Contractual Clauses (SCCs) approved by the European Commission, the United Kingdom International Data Transfer Addendum, or relying on permitted data transfer mechanisms embedded within our agreements. Information regarding these safeguards can be provided upon request by contacting us pursuant to section 17, "Contact Us" below.

9. Third-party websites and social media platforms

Our website may contain links to third-party websites, applications or platforms. We are not responsible for the privacy practices or content of those third-party services.

If you interact with us on third-party social media platforms such as Instagram, TikTok or Facebook, the information you provide may also be handled in accordance with the privacy policy and terms of that platform.

Payments made through our website are processed by third-party payment providers, including Stripe or other providers we may use from time to time. We do not collect or store your full credit card details. Your payment information is provided to, and processed by, the relevant payment provider in accordance with its terms and privacy policy.

To the maximum extent permitted by law, we are not responsible for any loss, damage or claim arising from the processing, storage, use or security of your payment information by a third-party payment provider. Nothing in this clause limits any rights you may have under applicable law (including the Australian Consumer Law).

10. Anonymity and pseudonymity

Where practicable, you may deal with us anonymously or using a pseudonym. However, this may not be possible where we need personal information to provide products or services, process an order, deliver goods, respond to an enquiry, verify your identity or comply with legal obligations. You may decline to provide us with personal information we request, but that may mean that we are unable to provide services to you.

11. Security of personal information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps may include technical, administrative and organisational safeguards such as access controls, secure systems, password protection, staff access restrictions, secure payment processing and monitoring of our website and systems.

Users of our website are encouraged to exercise care in sending personal information via the internet.

No method of transmission over the internet or electronic storage is completely secure. Accordingly, while we take reasonable steps to protect personal information, we cannot guarantee absolute security.

12. Retention and deletion

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide products and services, maintain business records, comply with legal, tax and accounting obligations, resolve disputes, prevent fraud and enforce our rights.

When personal information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless we are required or permitted by law to retain it.

13. Data subject rights

Where applicable law allows for such rights, and subject to statutory exceptions, you may have the following privacy rights in relation to the personal information we collect:

Right to Know: You have a right to information about how we collect and use your personal information, which we provide via this Privacy Policy.
Right to Access: You have the right to request a copy of the personal information we have collected about you, provided in a portable, machine-readable, and readily usable format.
Right to Correct: We take reasonable steps to ensure that the personal information we hold is accurate, up to date, complete, relevant and not misleading. If your personal information is inaccurate or incomplete, you are entitled to ask that we correct or complete it.
Right to Delete: You may ask us to delete your personal information under certain circumstances. Please note that we may retain certain personal information as permitted or required by law, such as to maintain the security of our platform, comply with legal obligations, or complete transactions under an active corporate agreement.
Right to Opt Out of Sale or Sharing: You have the right to opt-out of the selling of your personal information or the sharing of your personal information for targeted advertising. We do not sell your personal information, but you can exercise your right to opt out of sale of your personal information at any time by declining or managing optional cookies via our website's cookie banner.
Right to Non-Discrimination: We will not discriminate or retaliate against you in any way for exercising your privacy rights.
Right to Appeal: If we decline to take action on your privacy request, you may have the right to appeal our decision under applicable state laws by contacting us.
Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Object and Restrict: Where we rely on legitimate interests to process your data, you have the right to object to our processing, or request that we restrict how we use your data.
Right to Lodge a Complaint: If you believe our processing of your personal information violates applicable data protection laws, you have the right to lodge a complaint with your local supervisory authority.
Right to Limit Sensitive Personal Information: You have the right to request that we limit our use or disclosure of sensitive personal information to only that which is necessary to perform our services. We do not collect sensitive personal information.

You may contact us using the details provided in section 17, "Contact Us" to ask us questions relating to your rights or, where applicable allows for such right, to exercise your right. We may need to verify your identity before responding to an access request. We will respond within a reasonable period.

In some circumstances, we may refuse access where permitted by applicable data privacy laws, including where providing access would have an unreasonable impact on the privacy of others, would be unlawful, or would prejudice enforcement-related activities. If we refuse access, we will provide written reasons where required by law.

14. Privacy complaints

If you have a concern or complaint about how we have handled your personal information, please get in touch with us using the details provided in section 17, "Contact Us".

Please include sufficient details of your complaint so that we can investigate and respond. We will acknowledge your complaint within a reasonable period and aim to respond within 30 days, or otherwise within a reasonable timeframe, depending on the nature of the complaint.

If you are not satisfied with our response, you may contact the relevant supervisory privacy authority where you reside.

Australia
Office of the Australian Information Commissioner
Website: https://www.oaic.gov.au
Telephone: 1300 363 992

Canada
Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca/en/

European Economic Area
Your country's national data protection authority.

New Zealand
Office of the Privacy Commissioner
Website: https://www.privacy.org.nz/

United Kingdom
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/make-a-complaint/
Telephone: +44 (0)303 123 1113

United States
Your state's Attorney General or local consumer protection agency (such as the California Privacy Protection Agency).

15. Lawful Basis

If you reside in the United Kingdom or any country within the European Economic Area, our lawful bases include:

Consent: You have given explicit consent to the processing for one or more specific purposes (such as when you affirmatively opt-in to non-essential tracking tools). Where we rely on your consent to process your personal information, you have the right to withdraw your consent at any time. You can manage or withdraw your consent for non-essential cookies and tracking tools at any time by clicking the "Cookie Settings" link in the footer of any page on our website.
Performance of a Contract: The processing is necessary to deliver our requested services, including managing your account, processing billing, and facilitating orders;
Legal Obligation: The processing is necessary for compliance with a legal or regulatory obligation; or
Legitimate Interests: The processing is necessary for the purposes of the legitimate interests pursued by us or a third party (such as monitoring system performance, securing our platform against fraud, and analyzing aggregate website traffic), provided your interests and fundamental rights do not override those interests.

16. Sensitive Personal Information

We do not collect or process any sensitive personal information as defined under applicable law. We do not require, request, or knowingly accept such information in connection with your use of our website or services.

17. Contact us

For privacy enquiries, access or correction requests, or complaints, please contact:

Sasha Therese Pty Ltd
ABN 33 666 238 722
Email: hello@sashatherese.com
Contact form: https://sashatherese.com/pages/contact

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time by publishing the updated version on our website. If we make a material change to this Privacy Policy, we will notify you as required by applicable law.

The updated Privacy Policy will take effect from the date it is published, unless otherwise stated. The "last updated" date at the beginning of this Privacy Policy indicates when it was most recently amended.