Privacy Policy

Last updated: 27 July 2026

Miao.com.au (“Miao”, “we”, “us” or “our”) respects your privacy. This policy explains how the operator of miao.com.au collects, holds, uses and discloses personal information when you browse, shop for cat products, join our community, subscribe or contact us.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply, and otherwise use them as our privacy standard.

1. Scope

This policy covers Miao’s website, online store, newsletters, forms, support and BuddyBoss community. A third-party service has its own policy when you use it directly, including Shopify checkout or a linked social network. We do not control unrelated websites you visit through external links.

2. Information we collect

Depending on how you use Miao, we may collect:

• Identity and contact: name, username, email, phone number, delivery and billing address.
• Account and community: profile details and image, posts, comments, reactions, follows, groups, moderation reports, preferences and private messages.
• Orders and support: products, variants, price, discounts, delivery details, order history, returns, enquiries and correspondence.
• Payment-related: payment status, method type and transaction reference. Shopify and its payment providers process card details; we do not intentionally store full card numbers in WordPress.
• Device and use: IP address, browser, device, operating system, approximate location, pages viewed, referring links, searches, clicks, session data, cookie identifiers and error logs.
• Marketing: subscription status, campaign interactions and consent records.
• Other information: information you choose to provide, including cat details relevant to a question or product review.

Please do not post sensitive personal information in public community areas. If we receive information we did not request, we will assess whether we may lawfully retain it and delete or de-identify it when appropriate.

3. How we collect information

We collect information directly from you when you register, purchase, post, subscribe, enter a promotion or contact us; automatically through cookies, analytics, logs and security tools; and from Shopify, payment, delivery, supplier, fulfilment, marketing or authentication providers involved in your request. We may also receive lawful public information or information another person provides, such as a gift recipient’s delivery details.

4. How we use information

We use personal information to:

• operate accounts, community features, cart, checkout and customer support;
• take payment, confirm, supply, deliver, return and refund orders;
• personalise content and remember preferences;
• send service notices and, with the required consent, marketing;
• measure performance, improve products and understand aggregate use;
• moderate content and detect fraud, spam, misuse, security threats or technical faults;
• meet legal, accounting, tax, dispute and enforcement obligations.

Some tools may automatically rank content, recommend items, filter spam or flag suspicious activity. We do not currently use a solely automated process to make a decision that significantly affects a person’s legal or similarly significant rights. If that changes, we will update this policy and provide any notice required by law.

5. When we share information

We may disclose information to providers only where reasonably needed for the purposes above, including:

• Shopify and payment providers for store, account, checkout, payment and order functions;
• delivery, supplier and fulfilment providers, including Dropshipzone-connected services, to source, pack, track, deliver, return or support an order;
• website and community providers, including WordPress, BuddyBoss, hosting, backup, security, Jetpack and Akismet services;
• communications and analytics providers, including MailPoet and Google Analytics;
• professional advisers, insurers, regulators, courts or law enforcement where reasonably necessary or legally required;
• a successor or transaction adviser for a proposed business sale, restructure or transfer, subject to appropriate confidentiality.

We do not sell a list of our customers or community members. We may publish or share information when you direct us to, or share aggregated or de-identified information that does not reasonably identify you.

6. Community privacy

Your profile visibility, posts, comments, reactions and group activity may be visible to other members or the public according to the feature and your settings. Public content may be indexed, copied or shared by others. Review the audience before posting.

Private messages are intended for their participants, but authorised personnel or service providers may access them when reasonably necessary to investigate a report, enforce rules, protect safety, fix a technical issue or comply with law. Deleting an account may not remove content already copied by others or retained where legally required.

7. Cookies and analytics

We and our providers use essential cookies, local storage and similar technologies for login, cart, checkout, security, preferences and reliable operation. With consent where required, we may also use analytics or marketing technologies.

Google Analytics may collect cookie or device identifiers, page and session activity, approximate location and device/browser information. Shopify, WordPress, BuddyBoss, Jetpack, Akismet and MailPoet may set technologies needed for their functions.

You can use available cookie controls and browser settings. Blocking essential storage may prevent login, cart or checkout from working. You can also use Google’s Analytics opt-out browser add-on.

8. Marketing

We send electronic marketing only where permitted, identify the sender and provide a working unsubscribe option. You can unsubscribe through the message link or contact us. We will action an unsubscribe request within the period required by law. You may still receive transactional or service messages about an account, order, security or policy change.

9. Overseas handling

Online services may store or process information outside Australia. Depending on provider configuration and the people involved in your order, likely locations include Australia, Canada, the United States, the European Union/European Economic Area and other countries where Shopify, Google, WordPress-related providers, delivery or fulfilment partners operate.

Privacy protections can differ overseas. Where Australian law requires, we take reasonable steps before disclosure, such as assessing the provider and using contractual, access or security controls. Some transfers may instead occur with your informed consent or under another legal exception.

10. Security, retention and data breaches

We use reasonable technical and organisational safeguards, including access controls, authentication, updates, backups, monitoring and trusted providers. No online system is completely secure, so protect your password and tell us promptly about suspected misuse.

We keep information only as long as reasonably needed for the purpose collected and for legal, tax, accounting, fraud prevention, backup or dispute requirements. Retention varies by record. When no longer required, we take reasonable steps to delete or de-identify it, subject to lawful exceptions and backup cycles.

We assess suspected data breaches and will notify affected people and the Office of the Australian Information Commissioner (OAIC) when required under the Notifiable Data Breaches scheme.

11. Your choices and rights

You may ask what personal information we hold, request access or correction, unsubscribe from marketing, change available account or community settings, or request deletion where applicable. We may need to verify your identity. Access or deletion can be limited where law permits or requires, including where another person’s privacy, fraud prevention, recordkeeping or legal claims are involved.

Use our FAQ & Contact page and write “Privacy request” in your message. We will respond within a reasonable time and explain any lawful refusal.

12. Children’s privacy

Miao is not directed to children under 16 and they should not create an account or purchase without a parent or guardian. If you believe a child has provided personal information without appropriate involvement, contact us so we can investigate and take reasonable action.

13. Complaints and contact

Send a privacy question, request or complaint through our FAQ & Contact page. Include enough detail for us to investigate, but do not send passwords or full card details. We will acknowledge and investigate complaints within a reasonable time.

If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

14. Changes to this policy

We may update this policy when our services, providers or obligations change. The current version will appear here with a new “Last updated” date. We will take reasonable steps to give additional notice if a change materially affects existing personal information.