Privacy policy

Last updated: May 22, 2026

Overview

This Privacy Policy describes how Mother + Muse Pty Ltd (ABN 11 694 489 079), trading as Splash'd® ("we", "us", "our"), collects, uses, stores, discloses, and protects your personal information when you visit splashd.co, place an order, or otherwise interact with our Services.

We are committed to protecting your privacy and complying with applicable data protection laws, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, the EU General Data Protection Regulation (GDPR) and UK GDPR where applicable, and the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for California residents.

By using our Services, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use our Services.

Information We Collect

We collect personal information that you provide directly to us, information collected automatically as you use our Services, and information from third parties.

Information you provide to us:

• Contact details: name, email address, phone number, shipping and billing address
• Account information: username, password (encrypted), and any preferences you save
• Order information: products purchased, order history, and payment confirmation details
• Communications: messages you send to us via email, contact forms, or social media
• Reviews and feedback: any reviews, ratings, or product photos you submit through our reviews platform (Judge.me) or social media

 

Information collected automatically:

• Device and browsing data: IP address, browser type and version, operating system, device identifiers, and approximate location
• Usage data: pages visited, time on site, referring URLs, clicks, scrolls, and other browsing behaviour
• Cookies and similar tracking technologies (see Cookies and Tracking below)
• Cart activity: items added to your cart, including abandoned carts, so we may send recovery emails where you have consented

 

Information from third parties:

• Payment processors: confirmation of payment, but we do not store your full credit card or banking details
• Shipping partners: tracking and delivery status updates
• Social media platforms: if you interact with us via Instagram, TikTok, Facebook, or Pinterest, we may receive information about your engagement (such as tags, mentions, and shares)
• Advertising platforms: aggregated data about ad performance and audience characteristics

We do not knowingly collect sensitive personal information (such as health, biometric, or financial account data) unless required for a specific purpose and with your consent.

How We Use Your Information

We use your personal information to:

• Process and fulfil your orders — including production, shipping, payment processing, and customer support
• Communicate with you — order confirmations, shipping updates, customer service responses, and replies to your enquiries
• Send marketing communications — newsletters, promotions, new product launches, and abandoned cart reminders (only where you have opted in, and you can unsubscribe at any time)
• Personalise your experience — remember your preferences, recommend products, and tailor content
• Improve our Services — analyse website performance, fix bugs, and develop new features
• Run advertising campaigns — measure ad performance, retarget visitors, and reach similar audiences via Meta, Google, TikTok, and Pinterest
• Comply with legal obligations — meet tax, accounting, consumer protection, and anti-fraud requirements
• Protect our business — detect and prevent fraud, unauthorised access, and misuse of our Services

Legal Bases for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR to process your personal information:

• Performance of a contract: to fulfil your order, deliver products, and provide customer support
• Legitimate interests: to operate and improve our business, prevent fraud, and conduct analytics — provided your rights do not override these interests
• Consent: for marketing communications, non-essential cookies, and advertising tracking — which you can withdraw at any time
• Legal obligation: to comply with tax, accounting, and other applicable laws

How We Share Your Information

We do not sell your personal information. We share it only with the following categories of recipients, and only as necessary:

• Service providers and processors who help us run our business, including:
  • Shopify — our e-commerce platform and hosting provider
  • Payment processors — for secure transaction handling
  • Shipping and fulfilment partners — including global print-on-demand and apparel manufacturing partners that produce and ship our garments worldwide
  • Email marketing platform (Brevo) — for sending transactional and marketing emails
  • Reviews platform (Judge.me) — for collecting and displaying customer reviews
  • Analytics providers (Google Analytics) — for understanding website performance
  • Advertising platforms (Meta, Google, TikTok, Pinterest) — for running and measuring ad campaigns
• Professional advisers — our accountants, lawyers, and insurers, where required
• Government authorities and regulators — where required by law, court order, or to protect our legal rights
• Acquirers — in the event of a business sale, merger, or restructure, your information may be transferred (subject to this Privacy Policy)

All third-party processors we engage are required to handle your data securely and in compliance with applicable privacy laws.

International Data Transfers

As we sell worldwide and work with global service providers, your personal information may be transferred to and stored in countries outside Australia, including the United States, China, Mexico, and EU member states. These countries may have different data protection laws than your country of residence.

Where we transfer personal data from the EEA, UK, or Switzerland to countries that have not been deemed to provide adequate protection, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or other legally recognised mechanisms.

Cookies and Tracking Technologies

We use cookies and similar technologies (pixels, tags, local storage) to operate our website, remember your preferences, analyse usage, and deliver personalised advertising.

Types of cookies we use:

• Strictly necessary cookies — required for the site to function (e.g., shopping cart, login, checkout)
• Performance and analytics cookies — help us understand how visitors use the site (e.g., Google Analytics)
• Functional cookies — remember your preferences and settings
• Marketing and advertising cookies — track activity across sites to deliver relevant ads (e.g., Meta Pixel, Google Ads, TikTok Pixel, Pinterest Tag)

You can manage your cookie preferences via the cookie banner displayed when you first visit our site, or by adjusting your browser settings to refuse cookies. Please note that disabling certain cookies may affect site functionality.

Marketing Communications

If you sign up for our newsletter or opt in to marketing communications, we may send you emails about new products, collections, promotions, and content we think you'll enjoy. We use Brevo to deliver these emails.

We may also send abandoned cart reminder emails to customers who have added items to their cart but not completed checkout, where they have consented to marketing communications.

You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by emailing us at team@splashd.co. Unsubscribing from marketing emails does not affect transactional emails (such as order confirmations and shipping notifications).

Advertising and Retargeting

We work with third-party advertising platforms — including Meta (Facebook and Instagram), Google, TikTok, and Pinterest — to show you Splash'd® ads as you browse other websites and apps.

These platforms use cookies, pixels, and similar technologies to track your activity on our site and across the web. This may include creating "custom audiences" of past visitors, or "lookalike audiences" of people similar to our customers.

You can opt out of personalised advertising via:

• Meta: facebook.com/adpreferences
• Google: adssettings.google.com
• TikTok: Through your account settings under "Privacy" and "Ads"
• Pinterest: Through your account settings under "Privacy and Data"
• Industry opt-outs: youronlinechoices.com (EU), aboutads.info (US), optout.networkadvertising.org

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Order and transaction records: retained for 7 years to comply with Australian Tax Office record-keeping requirements
• Account information: retained while your account is active; deleted on request or after a period of inactivity
• Marketing data: retained until you unsubscribe or request deletion
• Website analytics: typically retained for up to 26 months (per Google Analytics defaults), then anonymised or deleted
• Customer service records: retained for up to 7 years to handle disputes and warranty claims

After these periods, your data is securely deleted or anonymised, unless we are required to retain it for longer by law.

Your Rights

Depending on where you live, you have the following rights regarding your personal information:

All customers (under Australian Privacy Principles):

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Make a complaint about how we handle your information

EEA, UK, and Swiss residents (under GDPR / UK GDPR), additionally:

• Request deletion of your personal information ("right to be forgotten")
• Restrict or object to certain types of processing
• Request a copy of your data in a portable format
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with your local data protection authority

California residents (under CCPA / CPRA), additionally:

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information (subject to legal exceptions)
• Right to correct inaccurate personal information
• Right to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising (note: we do not sell your information, but we may share it with advertising partners as described above)
• Right to limit use of sensitive personal information
• Right not to be discriminated against for exercising these rights

To exercise any of these rights, please email us at team@splashd.co. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.

Children's Privacy

Our Services are not directed at children. We do not knowingly collect personal information from children under 16 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us at team@splashd.co and we will delete it.

Data Security

We take reasonable steps to protect your personal information from unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

• Encrypted data transmission (SSL/TLS)
• Secure payment processing via PCI-DSS compliant providers
• Access controls and authentication for our internal systems
• Regular review of our security practices

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites, plugins, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "last updated" date at the bottom of this page will indicate when the policy was most recently revised. Material changes will be communicated via email or a prominent notice on our website where required by law.

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Mother + Muse Pty Ltd trading as Splash'd® ABN: 11 694 489 079 Registered Office: C/- YK Partners, Level 1, 268-270 Rosslyn Street, West Melbourne, VIC 3003 Email: team@splashd.co Website: splashd.co

Complaints

If you believe we have breached your privacy rights, please contact us first at team@splashd.co so we can investigate and respond. We aim to resolve all complaints within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the relevant regulator:

• Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• European Union: Your local Data Protection Authority — edpb.europa.eu
• California: California Privacy Protection Agency — cppa.ca.gov

Last updated: [insert date when published]