Privacy policy

Who we are

Esme Sydney is an online clothing store selling to customers in Australia.

Esme Sydney is a trading name of BlockRetail, registered in the Netherlands, Chamber of Commerce (KvK) number 98541080.

For all privacy matters, contact us at info@esmesydney.com.

What this policy covers

This policy explains what personal information we collect when you use esmesydney.com, why we collect it, who we share it with, and what rights you have.

We handle your personal information in accordance with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth). As we are established in the Netherlands, we also apply the standards of the European General Data Protection Regulation (GDPR).

The information we collect

Information you give us. Your name, email address, delivery address, billing address and phone number when you place an order or create an account. Any information you include when you email us. Your email address if you subscribe to our newsletter. Any review or comment you submit.

Payment information. Payment is handled by our payment providers. We receive confirmation that a payment has succeeded, along with the payment method and the last four digits of your card. We never receive or store your full card number, expiry date or security code.

Information collected automatically. Your IP address, browser type and version, device type, operating system, the pages you view, the products you look at, how you arrived at our site and how long you stay. This is collected through cookies and similar technologies, as described in our Cookies Policy.

We do not collect sensitive information as defined by the Privacy Act, such as health information, racial or ethnic origin, or political or religious beliefs.

Why we use your information

We use your personal information to:

  • Process your order, take payment and arrange delivery
  • Send you order confirmations, dispatch notifications and tracking information
  • Handle returns, refunds, warranty claims and customer service enquiries
  • Send you marketing emails, where you have asked to receive them
  • Show you relevant advertising on other websites and social media platforms
  • Detect and prevent fraud and misuse of our website
  • Understand how our website is used, and improve it
  • Meet our legal and tax obligations

Under the GDPR, our legal bases for this are: performance of a contract with you (processing and delivering your order), your consent (marketing emails and non-essential cookies), our legitimate interests (fraud prevention, site improvement and security), and compliance with a legal obligation (record keeping and tax).

Who we share your information with

We share your personal information only where it is necessary, and only with:

  • Shopify, which hosts our store and processes our checkout
  • Payment providers, including Shopify Payments and PayPal, to process your payment
  • Delivery carriers, including Australia Post and our other logistics partners, to deliver your order
  • Our suppliers and fulfilment partners, to pack and dispatch your order
  • Email and marketing platforms, to send you the emails you have asked for
  • Analytics and advertising platforms, including Google, Meta and TikTok, as described in our Cookies Policy
  • Professional advisers and authorities, where we are legally required to do so

We never sell your personal information, and we never share it with third parties for their own independent marketing purposes.

Overseas disclosure

Because we are based in the Netherlands and use international service providers, your personal information will be disclosed to and stored by recipients located outside Australia. This includes recipients in the European Economic Area, the United Kingdom and the United States.

We take reasonable steps to ensure that any overseas recipient handles your personal information in a way that is consistent with the Australian Privacy Principles, including through contractual safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep your information

We keep order and transaction records for 7 years, to meet our tax and accounting obligations.

We keep customer service correspondence for 3 years.

We keep marketing subscription data until you unsubscribe, and for a short period afterwards to make sure we honour your request.

Information collected through analytics cookies is retained for the period set out in our Cookies Policy.

Your rights

You have the right to:

  • Ask what personal information we hold about you, and request a copy of it
  • Ask us to correct information that is inaccurate, out of date or incomplete
  • Ask us to delete your personal information, where we are not required to keep it
  • Withdraw your consent to marketing at any time
  • Object to, or ask us to restrict, certain kinds of processing
  • Receive your information in a portable, machine readable format
  • Unsubscribe from marketing emails, using the link at the bottom of every email

To exercise any of these rights, email us at info@esmesydney.com. We will respond within 30 days. We may need to verify your identity before acting on a request.

Security

We use industry standard measures to protect your personal information, including encrypted connections (SSL/TLS) across our entire website, restricted access to customer data, and payment processing through PCI DSS compliant providers.

No method of transmitting or storing information is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the relevant authorities as required by law.

Children

Our website is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at info@esmesydney.com and we will delete it.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first at info@esmesydney.com so that we can try to resolve it.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, or, in the Netherlands, with the Autoriteit Persoonsgegevens at www.autoriteitpersoonsgegevens.nl.

Changes to this policy

We may update this policy from time to time. The current version is always available on this page, and the date below tells you when it was last updated.

Contact

Email us at info@esmesydney.com. Our customer service team is available 24 hours a day, 7 days a week, and we respond within 24 hours.

Last updated: 12 September 2026