1. INTRODUCTION
This document sets out the privacy policy of CostumeBox.com.au ACN 098 155 518 (referred to in this privacy policy as ‘we’, ‘us’, or ‘our’).
We take our privacy obligations seriously and treat your personal information with the utmost importance. We have created this privacy policy to explain how we store, maintain, use and disclose personal information.
This privacy policy applies whenever we collect your personal information (or personal data). This includes between you, the visitor to this website (whether directly as our customer or as personnel of our customer), and us, the owner and provider of this website and also where we are directed by a third party to process your personal information. This privacy policy also applies to our use of any and all data collected by us or provided by you in relation to your use of the website and the provision of our services. By providing personal information to us, you consent to our storage, maintenance, use and disclosing of personal information in accordance with this privacy policy.
We may change this privacy policy from time to time by posting an updated copy on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy.
If you do not agree with this policy, do not access or use our services (including this website) or interact with any other aspect of our business.
2. TYPES OF PERSONAL INFORMATION WE COLLECT
The personal information we collect may include the following:
(a) name;
(b) mailing or street address;
(c) email address;
(d) social media information;
(e) telephone number and other contact details;
(f) age;
(g) date of birth;
(h) credit card or other payment information;
(i) information about your business or personal circumstances;
(j) content and information you provide through the use or selection of our products, services, websites or our support channels;
(k) information in connection with client surveys, questionnaires and promotions;
(l) your device identity and type, I.P. address, geo-location information, page view statistics, advertising data and standard web log information;
(m) information about third parties; and
(n) any other information provided by you to us via our website or our online presence, or otherwise required by us or provided by you.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information either directly from you, or from third parties, including where you:
(a) contact us through our website;
(b) receive goods or services from us;
(c) register an account with us or submit any of our online sign up forms;
(d) communicate with us via email, telephone, SMS, social applications (such as LinkedIn, Facebook or Twitter) or otherwise;
(e) interact with our website, social applications, services, content and advertising; and
(f) invest in our business or enquire as to a potential purchase in our business.
We may also collect personal information from you when you use or access our website or our social media pages. This may be done through use of web analytics tools, ‘cookies’ or other similar tracking technologies that allow us to track and analyse your website usage. Cookies are small files that store information on your computer, mobile phone or other device and enable and allow the creator of the cookie to identify when you visit different websites. Cookies are mandatory for our shopping basket function to work properly. If you do not wish information to be stored as a cookie, you can disable cookies in your web browser. Please note that if your web browser is set to refuse cookies from our website, you will not be able to complete a purchase or take advantage of certain features of our website, such as storing items in your shopping cart or receiving personalised recommendations.
We may use Google Analytics to collect and process data, including when you use third party websites or apps. To find out more see How Google uses data when you use our partners’ sites or apps.
4. USE OF YOUR PERSONAL INFORMATION
We collect and use personal information for the following purposes:
(a) to provide goods, services or information to you;
(b) for record keeping and administrative purposes;
(c) to provide information about you to our contractors, employees, consultants, agents or other third parties for the purpose of providing goods or services to you;
(d) to improve and optimise our service offering and customer experience;
(e) to comply with our legal obligations, resolve disputes or enforce our agreements with third parties;
(f) to send you marketing and promotional messages and other information that may be of interest to you and for the purpose of direct marketing (in accordance with the Spam Act 2003 (Cth). In this regard, we may use email, SMS, social media or mail to send you direct marketing communications. You can opt out of receiving marketing materials from us by using the opt-out facility provided (e.g. an unsubscribe link);
(g) to send you administrative messages, reminders, notices, updates, security alerts, and other information requested by you; and
(h) to consider an application for employment from you.
(i) To utilize automated systems and artificial intelligence (AI) to enhance our customer support experience. We prioritize service providers who utilize data masking to protect sensitive information and who do not use your personal data to train public AI models.
Customers who register an account with us are entitled to receive benefits such as discounts, points and promotional emails. The information collected through the registration process will be used to contact you when appropriate for customer service reasons or otherwise to enable us to provide goods or services to you. You will be given a member identification number and a password to keep this information secure.
We may disclose your personal information to cloud-providers, contractors and other third parties located inside or outside of Australia. If we do so, we will take reasonable steps to ensure that any overseas recipient deals with such personal information in a manner consistent with how we deal with it.
Any credit card or other payment information provided by you during a transaction with us is not retained by us. Once you submit a transaction through our website such details are sent via secure means to a third party who processes this information.
5. SECURITY
We take reasonable steps to ensure your personal information is secure and protected from misuse or unauthorised access. Our information technology systems are password protected, and we use a range of administrative and technical measures to protect these systems. However, we cannot guarantee the security of your personal information.
6. LINKS
Our website may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites and we suggest you review the privacy policies of those websites before using them.
7. REQUESTING ACCESS OR CORRECTING YOUR PERSONAL INFORMATION
If you wish to request access to the personal information we hold about you, please contact us using the contact details set out below including your name and contact details. We may need to verify your identity before providing you with your personal information. In some cases, we may be unable to provide you with access to all your personal information and where this occurs, we will explain why. We will deal with all requests for access to personal information within a reasonable timeframe.
If you think that any personal information we hold about you is inaccurate, please contact us using the contact details set out below and we will take reasonable steps to ensure that it is corrected.
8. HOW WE USE ARTIFICIAL INTELLIGENCE AND AUTOMATION
To provide you with fast and efficient service, we utilize artificial intelligence (AI) and automated computer programs across our digital platforms. This section explains how these technologies impact your privacy.
(a) Helpdesk Interaction: When you use our chat support, you may be communicating with an AI Agent. We identify these interactions with an 'AI Assistant' or similar label. The AI processes the text of your query to provide relevant answers. We take reasonable steps to ensure these systems do not process sensitive financial information.
(b) Automated Decision-Making: We use automated systems to assist in making certain decisions that affect your experience. These include:
(i) Fraud Detection: Analyzing transaction patterns to protect your account.
(ii) Promotional Eligibility: Determining your access to loyalty rewards and discounts.
(iii) Support Triage: Prioritizing urgent queries based on the nature of the request.
You have a right to request an explanation of the logic behind any significant automated decision that affects your interests.
(c) Human Oversight: Our AI tools are designed to support, not replace, human judgment. You have the right to request a transfer to a human agent at any time during our business hours. If you believe an AI-generated response or decision is inaccurate, please contact our support team for a manual review.
(d) Data Governance: We do not permit our AI service providers to use your personal information to train their public models. We use enterprise-grade security controls, including data masking and encryption, to protect your data as it moves through our AI support pipeline.
9. COMPLAINTS
If you wish to complain about how we handle your personal information held by us, please contact us using the details set out below including your name and contact details. We will investigate your complaint promptly and respond to you within a reasonable timeframe.
10. CONTACT US
For further information about our privacy policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:
Customer Service Hours: 9.00am – 5.00pm (Sydney time) Monday to Friday
Phone: 02 8105 5041
Email: info@costumebox.com.au
Our privacy policy was last updated on 25 February 2026.