Box of Cats Music ("Box of Cats", "we", "us") respects your privacy. This Privacy Policy describes what personal information we collect, why we collect it, who we share it with, and what choices you have. We handle personal information in accordance with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth), and where applicable the EU/UK GDPR.
1. What we collect
We only collect what we need to run the Site and fulfil your orders.
| Data | Purpose |
|---|---|
| Email address | Order receipts, download links, member login, transactional and (with consent) marketing emails |
| Name, shipping address, phone | Posting your merch or Nine Lives Club tee |
| Shirt size preference | Picking the right tee for yearly NLC subscribers |
| Payment details | Handled directly by Stripe — we never see or store full card numbers. We retain the last 4 digits of the card and the customer ID Stripe gives us, to manage subscriptions and refunds. |
| IP address, browser, referrer | Security (rate limiting, fraud prevention via Cloudflare) and aggregated traffic analytics |
| Cart and member-portal state | Stored in your browser (localStorage) so your cart survives a refresh and you stay logged in. We don't read this from our servers. |
2. Who we share it with
We share the minimum necessary with the third-party services that keep the Site running. We do not sell your data to anyone.
| Service | What they receive | Why |
|---|---|---|
| Stripe | Email, name, address, phone, payment method | Payment processing and subscription management. Stripe Privacy |
| Cloudflare | IP, request headers | Hosting, CDN, DDoS protection. Cloudflare Privacy |
| Resend | Email address, name, order details | Transactional and member emails. Resend Privacy |
| Australia Post / international couriers | Name and shipping address | Posting your merch order |
3. Marketing
We may occasionally send promotional emails about new releases, sample packs, members-only drops, or Box of Cats events. You can unsubscribe at any time using the link in the email or by emailing members@boxofcatsmusic.com. Transactional emails (receipts, download links, NLC welcome, password resets) will always be sent regardless of marketing preference.
4. Cookies and local storage
We use a small set of cookies and browser storage:
- Essential: remembering what's in your cart, keeping you signed in to the member area, fraud prevention via Cloudflare. Cannot be disabled.
- Analytics: aggregated, privacy-preserving page-view counts (no third-party advertising trackers).
We do not run third-party advertising networks or retargeting pixels.
5. Data retention
We keep:
- Order records for at least 7 years to meet Australian tax law requirements.
- Active member account data for as long as your subscription is active, plus 24 months after cancellation, to help you resume your membership.
- Mailing list email addresses until you unsubscribe.
6. Your rights
You have the right to:
- Request a copy of the personal information we hold about you.
- Ask us to correct anything that's wrong.
- Ask us to delete your information (subject to tax-law retention obligations and ongoing subscriptions).
- Withdraw consent for marketing communications at any time.
- Make a complaint to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your data.
To exercise any of these rights, email privacy@boxofcatsmusic.com. We'll respond within 30 days.
7. International data transfers
Our service providers (Stripe, Cloudflare, Resend) are based in or operate from the United States. By using the Site you consent to your data being transferred to and processed in those jurisdictions under their respective privacy frameworks.
8. Children
The Service is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us information, please contact us and we will delete it.
9. Changes to this policy
We may update this policy occasionally. The "Last updated" date at the top reflects the most recent change. Material changes will be highlighted on the Site or notified via email.
10. Contact
Privacy questions or requests: privacy@boxofcatsmusic.com.