Privacy Policy

1. Introduction

This document sets out the privacy policy of William Howard trading as Fox and Howard, ABN 35 941 887 719 (referred to in this privacy policy as we, us or our).

We have created this privacy policy to explain how we collect, access, use, disclose and protect personal information, including information processed for us by service providers.

We are committed to preventing serious invasions of privacy and ensuring the protection of your personal information, so you can contact us using the details below if you have any questions or concerns.

When you provide personal information to us or through a service provider we use, we will handle it as described in this privacy policy and as otherwise permitted or required by law.

We may change this privacy policy from time to time by posting an updated copy on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy.

2. Types of personal information we collect

We collect only the personal information reasonably necessary to process and deliver orders, respond to enquiries and operate our website. This may include:

  1. (a) name;
  2. (b) mailing or street address;
  3. (c) email address;
  4. (d) telephone number, if you provide one for delivery or an enquiry;
  5. (e) order and transaction details, such as the Products ordered, the amount paid and order status. Square processes and stores payment information, including card details, and provides us with the information needed to administer the Order;
  6. (f) limited technical information generated when you use our website, such as device type, browser type, IP address and standard web log information, where our website or service providers collect it; and
  7. (g) the contents of an enquiry or other communication that you choose to send us.

3. Children鈥檚 privacy

Our Products may be used by children, but Orders must be placed by an adult. We do not knowingly collect personal information directly from children. A parent or guardian may contact us using the details below if they believe a child has provided personal information to us.

4. How we collect personal information

We collect personal information directly from you and, where necessary to process or deliver an Order, from Square or Australia Post. We may collect information when you:

  1. (a) contact us through our website;
  2. (b) purchase or receive goods from us;
  3. (c) submit an order, enquiry or other online form;
  4. (d) communicate with us by email or telephone;
  5. (e) interact with our website, including through cookies or similar technologies; and
  6. (f) make an enquiry about our business or products.

Our website may use cookies or similar technologies that collect limited technical information about website use. Cookies are small files stored on your device. You can disable cookies through your browser settings, although some website functions may then be unavailable.

If we use an analytics service, such as Google Analytics, that service may collect and process information about use of our website. Further details will be available through our Cookies Policy and the provider鈥檚 privacy information.

5. Use of your personal information

We collect and use personal information for the following purposes:

  1. (a) to process, fulfil and deliver Orders and respond to enquiries;
  2. (b) to keep records of Orders, communications and transactions as reasonably required for business, tax, accounting and legal purposes;
  3. (c) to enable Square to process payments and Australia Post to deliver orders;
  4. (d) to operate, maintain and improve our website and customer service;
  5. (e) to comply with legal obligations, resolve disputes and enforce our agreements; and
  6. (f) to send Order confirmations, delivery updates, responses to enquiries and other service messages requested by you.

We do not sell, rent or trade personal information. We disclose personal information only where reasonably necessary for the purposes described in this policy, including to Square for payment processing, Australia Post for delivery, website and cloud service providers, professional advisers, regulators and other persons where disclosure is required or authorised by law. Square and Australia Post handle information under their own privacy policies. Some service providers may store or process information outside Australia; where applicable law requires it, we take reasonable steps in relation to overseas disclosure.

6. Additional rights for people in Europe and the United Kingdom

  1. (a) If the General Data Protection Regulation or United Kingdom data protection law applies to our handling of your personal data, the following additional terms apply.
  2. (b) We process personal data where necessary to perform a contract with you, take steps at your request before entering a contract, comply with a legal obligation, pursue our legitimate interests in operating and improving our business, or where you have given consent. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.
  3. (c) Depending on the law that applies, you may have rights to access, correct, erase or restrict your personal data, object to processing, receive certain data in a portable form and complain to a relevant supervisory authority. These rights may be subject to legal exceptions.
  4. (d) We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, accounting and dispute-resolution requirements.
  5. (e) If we transfer personal data outside the European Economic Area or the United Kingdom, we use a lawful transfer mechanism where required, such as an adequacy decision or approved standard contractual clauses.
  6. (f) To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

7. Security

We take reasonable steps to ensure your personal information is secure and protected from misuse or unauthorised access. Our information technology systems are password protected, and we use a range of administrative and technical measures to protect these systems. However, we cannot guarantee the security of your personal information.

8. Data breaches

We will take reasonable steps to contain and assess any suspected loss of, unauthorised access to or unauthorised disclosure of personal information handled in connection with our business, including information processed by our service providers.

If the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme apply to us and a breach is an eligible data breach, we will notify the Office of the Australian Information Commissioner and affected individuals as required by law. Even where notification is not legally required, we may notify affected individuals where doing so is appropriate to reduce the risk of harm.

9. Links

Our website may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites and we suggest you review the privacy policies of those websites before using them.

10. Requesting access or correcting your personal information

If you wish to request access to the personal information we hold about you, please contact us using the contact details set out below including your name and contact details. We may need to verify your identity before providing you with your personal information. In some cases, we may be unable to provide you with access to all your personal information and where this occurs, we will explain why. We will deal with all requests for access to personal information within a reasonable timeframe.

If you think that any personal information we hold about you is inaccurate, please contact us using the contact details set out below and we will take reasonable steps to ensure that it is corrected.

11. Complaints

If you wish to complain about how we handle your personal information, please contact us using the details below. We will investigate and respond within a reasonable timeframe. If the Privacy Act 1988 (Cth) applies to us and you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.

12. Contact us

For further information about our privacy policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:

Name: William Howard trading as Fox and Howard

Email: contact@cellothumbsup.com

Our privacy policy was last updated on 1 October 2026.