Privacy Policy

Last updated: 28 August 2026

Nook Box operates this online store and website, including the related information, content, features, products and services we provide (the Services).

Our online store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how Nook Box collects, uses, stores and discloses personal information when you visit our website, create an account, purchase from us, subscribe to Nook Box, interact with our marketing, enter a promotion, submit a form, contact us or otherwise use our Services.

Privacy laws differ depending on where you live and how you interact with us. Where applicable, we handle personal information in accordance with privacy and data protection laws that apply to our activities and to you.

Nothing in this Privacy Policy is intended to limit any privacy or consumer rights that cannot lawfully be excluded.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing or disclosure of personal information, this Privacy Policy applies.

1. Personal Information We Collect

When we use the term personal information, we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with Nook Box, we may collect or process the following information.

Contact Information

This may include:

• Your name;
• Email address;
• Phone number;
• Billing address;
• Shipping address; and
• Other contact information you provide.

Account & Subscription Information

This may include:

• Customer account details;
• Account preferences;
• Subscription status;
• Subscription product and frequency;
• Renewal information;
• Skip and cancellation activity;
• Subscription history;
• Shipping preferences; and
• Other preferences associated with your account.
• Order & Transaction Information

This may include:

• Products you view;
• Products added to your cart;
• Products added to a wishlist where available;
• Products you purchase;
• Subscription orders;
• Add to Box purchases;
• Past orders;
• Returns;
• Refunds;
• Exchanges;
• Cancellations;
• Discount or promotional codes used; and
• Other transaction information.

Payment Information

Payments are processed through Shopify and other authorised payment providers.

Depending on the payment method you select, payment-related information may include:

• Payment method;
• Payment confirmation;
• Transaction details;
• Billing information; and
• Information required by the applicable payment provider.

Nook Box does not generally directly store complete payment card details where those details are securely processed by our payment providers.

Communications

We may collect information you provide when you:

• Contact customer service;
• Send or reply to an email;
• Submit a contact form;
• Submit a return, damage or replacement request;
• Make a complaint;
• Participate in a survey;
• Enter a competition or giveaway;
• Apply to collaborate or work with Nook Box;
• Submit information through our Work With Us forms; or
• Otherwise communicate with us.
• Marketing Information

This may include:

• Marketing subscription status;
• Email marketing preferences;
• Emails sent to you;
• Email opens and clicks where tracking is enabled;
• Products or links you interact with;
• Forms you submit;
• Customer segments;
• Unsubscribe activity; and
• Other interactions with our marketing.

Device & Website Usage Information

We, Shopify and our authorised service providers may collect information including:

• IP address;
• Browser type;
• Device information;
• Network information;
• Unique identifiers;
• Pages viewed;
• Products viewed;
• Referring websites;
• Website navigation;
• Cart activity;
• Checkout activity; and
• Other interactions with our Services.

2. Information We Do Not Need

Please avoid providing sensitive or confidential personal information to Nook Box unless it is reasonably necessary for your interaction with us.

If you provide information that we have not requested, we may delete or disregard it where it is not reasonably necessary for our business or legal obligations.

3. How We Collect Personal Information

We may collect personal information:

• Directly from you, including when you place an order, subscribe, create an account, submit a form or contact us;
• Automatically, through our website, cookies, pixels and similar technologies;
• From Shopify, where Shopify processes information through our store;
• From our service providers, where they provide services to us or on our behalf;
• From payment providers, where necessary to process or manage transactions;
• From subscription providers, where necessary to administer subscriptions;
• From shipping and fulfilment providers, where necessary to deliver or investigate an order;
• From marketing and advertising platforms, where permitted;
• From social media platforms, when you interact with Nook Box through those platforms; and
• From other third parties, where permitted or required by applicable law.

4. How We Use Personal Information

We may use personal information for the following purposes.

Providing Products & Services

Including to:

• Process and fulfil orders;
• Manage recurring subscriptions;
• Process subscription renewals;
• Manage skips and cancellations;
• Process payments;
• Arrange shipping;
• Provide tracking;
• Manage returns, refunds and replacements;
• Maintain customer accounts;
• Remember customer preferences;
• Provide customer support; and
• Otherwise perform our obligations to you.

Communicating With You

We may send communications relating to:

• Orders;
• Subscription renewals;
• Failed payments;
• Shipping and tracking;
• Product or subscription changes;
• Customer service enquiries;
• Returns and refunds;
• Account information;
• Policy changes where appropriate; and
• Other service-related matters.

These communications may be sent even where you have opted out of promotional marketing where they are reasonably necessary to administer your order, subscription, account or relationship with Nook Box.

Marketing & Advertising

Where permitted, we may use information to:

• Send promotional emails;
• Send newsletters;
• Promote upcoming books, boxes and products;
• Personalise marketing;
• Recommend products;
• Measure marketing performance;
• Understand customer engagement;
• Create advertising audiences;
• Measure advertising effectiveness; and
• Show relevant advertising through third-party platforms.

Improving Nook Box

We may use information to understand:

• How customers use our website;
• Which products customers are interested in;
• Website and checkout performance;
• Subscription behaviour;
• Customer preferences;
• Marketing performance; and
• Opportunities to improve our Services.

Security & Fraud Prevention

We may use information to:

• Verify transactions;
• Authenticate accounts;
• Detect suspected fraud;
• Prevent unauthorised account access;
• Investigate chargebacks;
• Identify misuse of promotions;
• Protect our customers;
• Protect Nook Box; and
• Maintain the security of our Services.
• Legal & Administrative Purposes

We may use information where reasonably necessary to:

• Maintain business, accounting and taxation records;
• Comply with applicable laws;
• Respond to lawful requests from authorities;
• Resolve disputes;
• Establish, exercise or defend legal claims;
• Enforce our Terms and policies; and
• Protect our legal rights.
• 5. Legal Bases for Processing

Where laws such as the EU General Data Protection Regulation (GDPR) or UK GDPR apply to our processing of your personal information, we rely on one or more lawful bases depending on the circumstances.

These may include:

Performance of a Contract

We may process information where it is necessary to provide products or services you have requested, including to:

• Process orders;
• Process payments;
• Administer subscriptions;
• Arrange shipping;
• Manage returns and refunds; and
• Communicate with you about your order or subscription.

Consent

We may rely on your consent where required, including for certain:

• Marketing communications;
• Cookies;
• Advertising technologies; and
• Other optional processing activities.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

Legitimate Interests

Where permitted by applicable law, we may process information where reasonably necessary for our legitimate business interests, including to:

• Operate and improve Nook Box;
• Provide customer service;
• Understand how our Services are used;
• Prevent fraud;
• Protect our business;
• Secure our website and systems;
• Manage our customer relationships; and
• Conduct appropriate marketing activities.

Where we rely on legitimate interests, we consider whether those interests are overridden by your privacy rights and interests.

Legal Obligations

We may process information where necessary to comply with legal obligations, including taxation, accounting, regulatory and lawful government requirements.

Legal Claims

Where permitted, we may process information where necessary to establish, exercise or defend legal rights or claims.

The particular legal basis applicable to processing may vary depending on your location and the circumstances.

6. Email Marketing & Klaviyo

Nook Box may use Klaviyo or another email and customer marketing platform to manage email communications, customer segments, forms and marketing campaigns.

Information processed through our marketing platform may include:

• Name;
• Email address;
• Marketing consent;
• Purchase history;
• Subscription information;
• Website and shopping activity;
• Email engagement;
• Customer preferences; and
• Other information used to personalise, deliver or measure communications.

We send promotional electronic communications in accordance with applicable requirements.

You can unsubscribe from promotional emails at any time using the unsubscribe link contained in our emails.

Unsubscribing from promotional marketing does not prevent us from sending necessary transactional or service communications relating to your orders, account or subscription.

7. Cookies & Similar Technologies

Nook Box, Shopify and our authorised service providers may use cookies, pixels and similar technologies.

These technologies may be used to:

• Operate our website;
• Maintain website security;
• Remember preferences;
• Maintain shopping carts;
• Understand website activity;
• Analyse website performance;
• Measure marketing;
• Personalise experiences;
• Measure advertising effectiveness; and
• Provide relevant advertising.

Some cookies are necessary for our website to function. Others may be used for analytics, marketing or advertising.

Where applicable law requires consent before non-essential cookies or similar technologies are used, we will use available consent mechanisms to obtain and manage that consent.

Your available privacy and cookie controls may vary depending on your location.

Disabling certain cookies may affect website functionality.

8. Analytics & Advertising

We may use analytics, advertising and social media services to understand website activity and measure or deliver advertising.

These services may use cookies, pixels, identifiers or similar technologies to understand interactions with our website and advertisements.

Depending on your location and applicable law, information used for personalised or targeted advertising may be subject to additional consent or opt-out rights.

Where required, we will provide appropriate controls through our website or relevant platform.

9. Shopify

Our online store is hosted and powered by Shopify.

Shopify collects and processes personal information relating to your access to and use of our Services in order to provide and improve Shopify's services.

Information you submit through our store may be transmitted to and shared with Shopify and service providers that may be located outside the country where you live.

We may use Shopify features that incorporate information obtained from your interactions with Nook Box, other Shopify merchants and Shopify.

In circumstances where Shopify independently determines how personal information is processed for Shopify's own purposes, Shopify is responsible for that processing and for responding to applicable requests relating to that processing.

More information is available through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

10. Payment Providers

Payments may be processed through Shopify Payments and other payment providers made available through our checkout.

We may also offer third-party payment services such as Afterpay for eligible purchases.

Payment providers may process personal information in accordance with their own terms and privacy policies.

The payment options available to you may depend on your location, order type, product and eligibility.

11. Subscription Services

Where you purchase a recurring subscription, personal information may be processed by Shopify and our subscription technology providers to:

• Establish your subscription;
• Process recurring payments;
• Schedule subscription orders;
• Manage renewal dates;
• Manage skips and cancellations;
• Retry failed payments;
• Maintain subscription records; and
• Provide customer account functionality.

Subscription information may be shared between Nook Box, Shopify, our subscription provider and applicable payment providers where reasonably necessary to administer your subscription.

12. Shipping & Fulfilment

We may provide information including your:

• Name;
• Delivery address;
• Email address;
• Phone number; and
• Relevant order information

to postal, courier, fulfilment and logistics providers where reasonably necessary to deliver or investigate your order.

These providers may process information in accordance with their own privacy practices and applicable laws.

13. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to:

• Shopify;
• Payment processors;
• Subscription providers;
• Shipping, postal and courier providers;
• Email and marketing platforms;
• Analytics providers;
• Advertising platforms;
• IT and cloud service providers;
• Customer support providers;
• Professional advisers such as accountants or lawyers;
• Government, regulatory or law enforcement authorities where required or permitted by law; and
• Other service providers assisting us in operating Nook Box.

We may also disclose information:

• Where you direct or consent to the disclosure;
• To investigate suspected fraud or unlawful activity;
• To protect our rights or the rights of others;
• To establish or defend legal claims;
• In connection with a sale, restructure or transfer of all or part of the Nook Box business; or
• Where otherwise permitted or required by applicable law.

We do not disclose personal information to unrelated third parties for their own direct marketing simply because you have purchased from Nook Box.

Some privacy laws use specific definitions of terms such as sale, sharing or targeted advertising. Where those laws apply, you may have additional rights relating to those activities even where no money is exchanged for your personal information.

14. Social Media & Customer Content

If you interact with Nook Box through a social media platform, information may also be processed by that platform according to its own privacy practices.

Where you tag, mention or submit content to Nook Box and we use that content in accordance with our Terms of Service, information contained within that content may become visible to other people when we repost, reproduce or publish it.

Please avoid including private or sensitive personal information in publicly shared content.

15. Competitions, Giveaways, Surveys & Forms

Where you enter a competition, giveaway, survey or submit another Nook Box form, we may collect the information reasonably necessary to:

• Administer the activity;
• Verify eligibility;
• Contact participants;
• Select and contact winners;
• Deliver prizes;
• Review feedback;
• Assess collaboration applications; or
• Carry out the purpose described when the information was collected.
• Additional terms or privacy information may apply to individual promotions or forms.

Entering a competition, completing a survey or submitting a form does not automatically subscribe you to promotional marketing unless this is clearly disclosed and permitted under applicable law.

16. Third-Party Websites & Services

Our Services may contain links to websites, platforms or services operated by third parties.

Third-party services have their own privacy and security practices.

We encourage you to review their privacy policies before providing personal information.

Nook Box is not responsible for the privacy practices of independent third-party websites or platforms.

17. Children & Age Restrictions

Nook Box subscriptions are intended for customers aged 18 years and over because some featured books may contain mature or explicit content.

We do not knowingly collect personal information from children for the purpose of providing an adult Nook Box subscription.

If you are a parent or guardian and believe a child has inappropriately provided personal information to Nook Box, please contact us at hello@nookbox.com.au.

Where applicable law provides additional protections for children's information, we will comply with those requirements where they apply to us.

18. Security

We take reasonable steps appropriate to our business to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

We also rely on reputable technology and payment providers to provide security for services they operate on our behalf.

However, no electronic system, transmission method or storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your customer account credentials and should not share passwords or account access information with another person.

19. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate business and legal requirements.

This may include retaining information to:

• Maintain an active account or subscription;
• Fulfil orders;
• Maintain transaction records;
• Meet accounting and taxation requirements;
• Resolve disputes;
• Prevent fraud;
• Respond to chargebacks;
• Enforce agreements and policies; and

• Establish or defend legal claims.

Different categories of information may be retained for different periods.

When information is no longer reasonably required, we may delete or de-identify it, subject to applicable legal requirements and technical limitations.

20. Your Privacy Rights

Depending on where you live and the laws applicable to our processing of your information, you may have some or all of the following rights:

• Access – to request information about personal information we hold or process about you;
• Correction – to request correction of inaccurate or incomplete information;
• Deletion – to request deletion of certain personal information;
• Restriction – to request restriction of certain processing;
• Objection – to object to certain processing, including processing based on legitimate interests or direct marketing;
• Portability – to receive certain personal information in a portable format where applicable;
• Withdrawal of consent – to withdraw consent where processing relies on your consent;
• Marketing opt-out – to stop receiving promotional communications; and
• Rights relating to certain automated decision-making where applicable.
• These rights are not absolute and may be subject to exceptions under applicable law.

We may need to verify your identity before completing a privacy request.

You may exercise applicable rights by contacting:

hello@nookbox.com.au

We will not discriminate against you for legitimately exercising an applicable privacy right.

21. European Economic Area & UK Privacy Rights

Where the GDPR or UK GDPR applies to our processing of your personal information, you may have rights including:

• Access;
• Rectification;
• Erasure;
• Restriction of processing;
• Data portability;
• Objection to processing;
• Withdrawal of consent; and
• Rights concerning certain automated decision-making.
• You may also have the right to lodge a complaint with the relevant data protection supervisory authority in the country where you live or work or where you believe an infringement occurred.

We encourage you to contact Nook Box first so we have an opportunity to address your concern.

22. Marketing Preferences

You can unsubscribe from promotional Nook Box emails at any time using the unsubscribe link contained in the email.

Where other marketing channels are offered, applicable opt-out mechanisms will also be provided.

Even if you unsubscribe from marketing, we may continue to send communications reasonably necessary to administer:

• Orders;
• Subscriptions;
• Accounts;
• Payments;
• Shipping;
• Returns;
• Refunds; or
• Other transactions with Nook Box.

23. International Transfers

Nook Box is based in Australia.

Shopify and some of our technology, payment, subscription, marketing, analytics, shipping and service providers operate internationally.

As a result, personal information may be transferred to, stored in or processed in countries other than Australia or the country where you live.

Where the GDPR, UK GDPR or another applicable law requires specific safeguards for an international transfer, we or the relevant service provider may rely on an applicable transfer mechanism, such as:

• An adequacy decision;
• Standard Contractual Clauses;
• The UK International Data Transfer Agreement or applicable UK Addendum;
• Another approved transfer mechanism; or
• Another lawful basis for the transfer.
• The applicable mechanism depends on the provider, destination and circumstances of the transfer.

24. Australian Privacy

Nook Box is an Australian small business.

Australian privacy obligations can depend on matters including the nature of a business, its activities and whether an exemption or other provision under Australian privacy law applies.

Regardless of whether particular provisions of the Privacy Act 1988 (Cth) apply to Nook Box at a particular time, we aim to handle personal information responsibly and transparently in accordance with this Privacy Policy.

Nothing in this section limits any privacy rights or obligations that apply to Nook Box under Australian law.

25. Privacy Complaints

If you have a concern or complaint about how Nook Box has handled your personal information, please contact us at:

hello@nookbox.com.au

We will take reasonable steps to investigate and respond to your concern.

Depending on where you live and the law that applies, you may also have the right to lodge a complaint with an applicable privacy or data protection authority.

Where Australian privacy law provides you with a right to make a complaint to the Office of the Australian Information Commissioner (OAIC), that right is unaffected.

Where the GDPR or UK GDPR applies, you may lodge a complaint with the relevant European or UK supervisory authority.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business;
• Our products or Services;
• Technology providers;
• Privacy practices; or
• Applicable legal requirements.

The current version will be published on our website and the Last updated date will be updated.

Where required by applicable law, we will provide additional notice of material changes.

27. Contact Us

For questions about this Privacy Policy, to exercise an applicable privacy right or to make a privacy complaint, contact:

Nook Box

Email: hello@nookbox.com.au

Postal address:
Parcel Locker 10304 01206
Shop 1, 31–32 Douglas Street
Noble Park VIC 3174
Australia