Privacy policy

Last updated: June 16, 2026

At Sonny Label, our customers are at the heart of everything we do. We are committed to not only providing a quality service but also genuinely respecting and protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it.

Sonny Label is powered by Shopify, which enables us to provide our services to you. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this policy carefully. By creating an account or making a purchase with us, you acknowledge that you have read and understood this Privacy Policy.


Personal Information We Collect

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. We may collect the following, depending on how you interact with us:

  • Contact details — your name, email address, phone number, billing address, and shipping address.
  • Transaction information — items you view, add to your cart, purchase, return, or exchange, and your order history.
  • Account information — your username, password, and account preferences.
  • Communications with us — information you include when contacting our customer support team.
  • Device and usage information — your IP address, browser type, and how you navigate and interact with our website.

A note on payments: We do not store your credit card or bank account numbers. All payment information is processed securely by Shopify and our payment providers, who are PCI-DSS compliant. We only receive confirmation that a payment was made.


How We Use Your Personal Information

We use your personal information for the following purposes:

Providing our products and services (lawful basis: contract performance) To process your orders and payments, fulfill and ship your purchases, manage your account, send order and account notifications, and facilitate returns or exchanges.

Marketing and advertising (lawful basis: legitimate interest / consent where required) To send you marketing emails, promotions, and personalised advertising — including ads shown on other websites based on your activity with us. You can opt out of marketing emails at any time using the unsubscribe link in any email we send, or by contacting us directly. If you opt out, we will still send essential account and order emails.

Improving our services (lawful basis: legitimate interest) To better understand how our website is used, personalise your shopping experience, and improve our products and services over time.

Security and fraud prevention (lawful basis: legitimate interest / legal obligation) To keep your account secure, detect and investigate fraudulent or unlawful activity, and protect the safety and integrity of our services.

Legal compliance (lawful basis: legal obligation) To comply with applicable laws, respond to lawful requests from authorities, and enforce our terms and policies.


How We Share Your Personal Information

We do not sell your personal information. We may share it in the following circumstances:

  • With Shopify — as our platform provider, Shopify processes your information to enable our store to function. See the Shopify Consumer Privacy Policy for details.
  • With service providers — such as payment processors, shipping carriers, and customer support tools, who process your data on our behalf and are bound by confidentiality obligations.
  • With marketing and advertising partners — to show you relevant ads. You may opt out of targeted advertising based on your activity across different websites and merchants here.
  • With affiliates — companies within our corporate group, where relevant.
  • In a business transaction — if Sonny Label is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
  • When required by law — in response to valid legal requests such as court orders or subpoenas.
  • With your consent — when you direct us to share information, such as through social media login integrations.

Our Relationship with Shopify

Our store is hosted by Shopify, which independently collects and processes certain information about your use of our services. Shopify may also use data from your interactions with our store — combined with data from other Shopify merchants — to provide and improve their platform.

Where Shopify processes your personal information independently, Shopify is responsible for handling your rights requests in relation to that processing. You can learn more and exercise those rights at the Shopify Privacy Portal.


Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our website, remember your preferences, and support our marketing. You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect how the website functions.

We honour the Global Privacy Control (GPC) signal — if your browser sends a GPC opt-out signal, we will treat it as a request to opt out of targeted advertising for that browser. We do not otherwise respond to "Do Not Track" signals.


Third-Party Websites

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites and encourage you to review their policies independently.


Children's Privacy

Our services are intended for adults and are not directed at children under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.


Security and Retention

We take reasonable technical and organisational steps to protect your personal information from loss, theft, unauthorised access, disclosure, copying, use, or modification. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We recommend avoiding unsecured channels when communicating sensitive information to us.

We retain your personal information for as long as necessary to provide our services, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements — typically for the duration of your customer relationship with us plus up to 7 years for legal and tax purposes, unless a longer period is required by law.


Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — request that we correct inaccurate or incomplete information.
  • Deletion — request that we delete your personal information, subject to certain legal exceptions.
  • Portability — request a copy of your data in a structured, machine-readable format.
  • Opt out of targeted advertising — opt out of us sharing your information for targeted advertising purposes here.
  • Managing marketing preferences — unsubscribe from marketing emails at any time via the link in our emails or by contacting us.

If you live in the UK or European Economic Area, you also have the right to:

  • Object to or restrict how we process your personal information.
  • Withdraw consent at any time where we rely on consent as our lawful basis (this does not affect any processing carried out before withdrawal).
  • Lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available here.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your rights.


International Transfers

Your personal information may be transferred to and stored in countries other than where you reside, including countries where Shopify and our service providers operate. For transfers from the EEA or UK, we rely on recognised mechanisms such as the European Commission's Standard Contractual Clauses to ensure your information is adequately protected.


Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post any updates on this page with a revised "Last updated" date and notify you as required by applicable law.


Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint about how we handle your personal information, please contact us at:

Email: hello@sonnylabel.com.au

We will respond to your inquiry in a timely manner. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority.