This Privacy Policy explains what information Kiddora may collect through the website, membership desk, and contact forms, and how that information supports gift recommendations, club access, and service improvement. By using the site you accept the practices below. Demo contact forms validate messages only in your browser and do not transmit personal data to a live server. Kiddora is a toy store at 1 Parliament Square, off, Parliament Pl, Melbourne VIC 3002, Australia.
We use handles for memberships, email for reminders, and optional notes about preferred toys, age group, or accessibility. We do not sell personal information to unrelated marketers. Third-party tools such as web fonts operate under their own policies. If any statement conflicts with a mandatory right under the Australian Privacy Principles and the Privacy Act 1988 (Cth), the legal right prevails.
1. Data we collect
Contact forms may include name, email, subject, and message. Membership accounts may include phone number, preferred toy categories, community handle, and club layer such as Play, Family, or Adventure. Technical data may include IP address, browser type, and pages viewed for security and stability. Gift preferences you share for birthdays or party calendars may be stored. Paid layers may retain payment references such as last card digits or a processor transaction ID, not full card numbers. Correspondence history may be kept so advisers can continue without repeating context. We do not request official ID for ordinary membership. Aggregate shopping statistics that cannot reasonably identify you may be stored separately. Support tickets may be held temporarily. Child data we recognize is deleted or handled with parental authority. Location, if used, is only coarse for region or language. We do not need microphone, contacts, or photo library access. Delivery addresses are used only to complete orders you place. CCTV may operate in the Melbourne store for safety under posted notices. Survey responses are voluntary. We avoid collecting sensitive information unless needed for a request you initiate, such as accessibility accommodations.
2. How we use data
We recommend toys, send membership reminders, answer questions, improve desk flow, and prevent fraud. Age notes help advisers choose suitable products. Aggregate statistics may guide staffing. Email may confirm layer changes, pauses, or policy updates. We do not build invasive psychological profiles. Marketing, if any, is limited to community news you can opt out of by writing the desk. Where we rely on consent, you may withdraw it without affecting prior lawful processing. Legal bases may include contract, legitimate interests, legal obligation, and consent under Australian privacy law. Security logs support attack detection. Purchase verification reduces fraud. We do not make automated credit or insurance decisions. Profiling, if used, is limited to showing more relevant toy topics. Orders are fulfilled, refunds processed, and recalls communicated when required. Payment processors receive only what is needed to charge your selected club or order. We share information with couriers solely to deliver goods. We do not use children's data for behavioural advertising. You may ask us to suppress marketing while still receiving transactional messages about active orders.
3. Retention and security
Access is limited to staff who need data for service or accounting. Membership records stay active while needed and afterward for a reasonable legal or tax period, often up to seven years for financial records when required in Australia. Demo form data that never leaves your browser is not stored by us. Use strong passwords if member portals open later. Measures include restricted desk access and careful devices. No method is perfectly secure; do not send passwords or full payment numbers in ordinary messages. High-risk breaches trigger legal notification duties under Australian law where applicable. Backups are encrypted where practical. Departing staff lose access. Vendor processor contracts are used. Full card data is not stored on store servers. Deletion requests are processed in a reasonable time, though backup purge may lag. Report security issues to [email protected]; aggressive testing needs written permission. Physical files at the Melbourne address are kept in locked cabinets after hours. Payment terminals follow industry standards for card handling. Staff receive privacy reminders during onboarding. Security is a shared responsibility between Kiddora and the account holder.
4. Your rights
Subject to legal exceptions, you may request access, correction, or deletion of personal data we hold. Write [email protected]; we generally respond within a reasonable period for simple requests under Australian privacy expectations. Cancel membership at the desk or by the same email. You may also request restriction, object to certain legitimate-interest uses, or ask for a portable copy when feasible. If mishandled, contact the Office of the Australian Information Commissioner or your consumer protection agency. Include enough detail to verify identity. Deletion may be refused when legal retention applies, with written reasons. Guardianship proof may be needed for child data. Exercising rights does not reduce service quality as retaliation. Closing an account may erase progress. We do not sell personal information in the ordinary commercial sense. Marketing opt-outs are honoured promptly for future campaigns. Transactional emails about current orders may continue. Parents may exercise rights for young children they lawfully represent. Complaints about our privacy handling can be escalated internally before external regulators.
5. Third-party services
Font providers may set cookies or collect technical data. Payment processors receive billing details needed to complete transactions under their own notices. Hosting, email, and analytics may process limited technical data as processors on our instructions. We do not authorize sale of membership lists. Transfers outside Australia use recognized mechanisms when required. Social buttons lead to other platforms with their own rules after you leave. Analytics use de-identification where available. Lawful authority disclosure may occur. We do not share sensitive categories with advertising networks. Couriers receive name, address, and phone for delivery only. Gift message text you provide may be printed for the recipient. We vet new vendors before connecting customer data. Contractors sign confidentiality undertakings. If ownership of Kiddora changes, data may transfer to the successor under continued privacy commitments with notice where required. Blocking trackers may reduce some optional features but not core catalogue reading. We are not responsible for privacy practices of sites you visit after leaving Kiddora.
6. Children, updates, and contact
Services are aimed at adults purchasing for children and, where appropriate, older youth under parental guidance. We do not knowingly collect personal information from children under fourteen without guardian involvement. If a guardian believes a child submitted data improperly, write us and we delete identifiable records promptly. We may update this Privacy Policy when tools, laws, or practices change. The Last Updated date reflects the current version. Contact: [email protected], +61392241234, or 1 Parliament Square, off, Parliament Pl, Melbourne VIC 3002, Australia. Families should discuss screen time and purchases. Toy recommendations never replace parental judgment. Material changes will be reflected on this page. Printed copies may be requested at the Melbourne desk. Thank you for reading how Kiddora protects family information while helping little dreams turn into big adventures.
Have a privacy question?
Write [email protected] or call +61392241234 during store hours.