My Believer Shop is a trading name of URBAN CLOTHING PTY LTD (ACN 671 782 111 | ABN 78 671 782 111), a company registered in Queensland, Australia. We own the registered trademark NAVBHH® (Australian TM #2439901). Our website is mybelievershop.com. For any privacy-related questions, contact us at support@mybelievershop.com.

We collect two categories of personal information:

• Order & Account Information: When you make a purchase, we collect your full name, billing and shipping addresses, email address, phone number, payment method details (processed by third-party gateways – we do not store full credit card numbers), order history, and any communication with us.
• Technical & Usage Data: IP address, browser type, device identifiers, referring pages, time on site, clickstream data, and cookies (see Section 5).
• Optional Information: If you sign up for our newsletter, we collect your email address. If you leave a product review, we may store your display name and comment.

We do not knowingly collect information from children under 16 without parental consent. If you believe we have inadvertently collected such data, please contact us to delete it.

We use your data for the following legitimate business purposes:

• Process, fulfill, and ship your orders (including order confirmations, invoicing, and delivery updates).
• Communicate with you about your order, returns, or customer support inquiries.
• Detect and prevent fraud, unauthorized transactions, and other security risks.
• Improve our website, product offerings, and customer experience (e.g., analyzing browsing behaviour).
• Send marketing communications only if you have opted in (you may unsubscribe at any time via the link in the email).
• Comply with legal obligations (e.g., tax records, consumer law warranties).

We never sell your personal information. However, we share necessary data with the following categories of third parties:

• Service providers: Payment processors (e.g., Shopify Payments, Stripe, PayPal), shipping carriers (e.g., Australia Post, DHL), email marketing platforms (e.g., Klaviyo), and IT hosting providers (Shopify).
• Legal & regulatory: When required by law (e.g., court order, law enforcement request) or to protect our rights, property, or safety.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

All third parties are contractually obligated to protect your data and use it only for the services they provide to us.

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies: Required for cart functionality, checkout, and security.
• Analytics cookies: To understand how visitors use our site (e.g., Google Analytics).
• Functional cookies: To remember your preferences (e.g., currency, language).
• Advertising cookies: To show relevant offers (only if you have consented).

You can manage or disable cookies via your browser settings. However, disabling essential cookies may prevent the site from working properly. We also provide a cookie consent banner on first visit – your continued use implies acceptance of essential cookies.

We implement industry-standard security measures:

• SSL encryption for all data transmitted between your browser and our server.
• PCI DSS compliant payment gateways – we never store full credit card details.
• Regular security scans and access controls to our administrative systems.
• Employee training on data protection and confidentiality.

Retention periods: We retain order information for 7 years (as required by Australian tax law). Marketing data is retained until you unsubscribe. You may request deletion of your personal data at any time, subject to legal retention obligations.

In the event of a data breach, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

Our e-commerce platform (Shopify) is based in Canada and the United States. Some third-party service providers may also operate outside Australia. When we transfer your personal data outside Australia, we ensure that:

• The recipient country has adequate data protection laws (e.g., EU GDPR), or
• We have binding contractual clauses with the provider to protect your data, or
• The transfer is necessary for the performance of a contract (e.g., shipping your order).

By using our website, you consent to such transfers.

Australian Privacy Principles (APPs): You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or outdated data.
• Make a complaint about a breach of privacy (see Section 9).

If you are in the European Union (GDPR): You also have the right to:

• Erasure (“right to be forgotten”), subject to legal obligations.
• Restriction of processing.
• Data portability (receive your data in a structured, machine-readable format).
• Object to direct marketing or profiling.
• Withdraw consent at any time (where consent is the basis for processing).

To exercise any of these rights, email support@mybelievershop.com. We will respond within 30 days.

If you believe we have mishandled your personal data, please contact us first at support@mybelievershop.com. We will investigate and aim to resolve the issue within 15 business days. If you are not satisfied, you may lodge a complaint with:

• Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au or 1300 363 992.
• For EU residents: Your local Data Protection Authority (DPA) under the GDPR.

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will delete it.

We may update this policy from time to time to reflect changes in our practices or legal obligations. The updated version will be posted on this page with a new “Last updated” date. Material changes will be notified via email or a prominent notice on our website. Your continued use after 30 days of posting constitutes acceptance of the changes.

Last updated: 1 May 2026.