Privacy policy

Last updated: October 2026

Foreverkidz Australia ("we", "us") is a baby gift shop in Perth, Western Australia. This policy explains what personal information we collect, why, who we share it with and how you can access or correct it. We handle personal information in line with the Australian Privacy Principles.

What we collect

When you order: your name, email, phone number, billing and delivery addresses, the recipient's name and address, any gift message, and what you bought.
When you create an account: your name, email and a password (stored scrambled — we can't read it), plus your saved addresses and order history.
When you contact us: your name, email, phone number (if you give it) and your message.
When you join our newsletter: your email address and your consent.
When you use the website: your IP address and basic browser details, used only to keep the site working and to stop spam and abuse. We don't use analytics or advertising trackers.

Why we use it

to take payment for, pack and deliver your order, and send you emails about it
to run your account if you have one
to answer your questions
to send our newsletter, only if you've asked for it — every newsletter has an unsubscribe link
to protect the shop from fraud, spam and abuse
to meet our legal obligations, such as keeping tax records

We don't sell or rent your personal information.

Payments

Card and PayPal payments are handled by PayPal. We never see or store your card number. If you pay by bank transfer, we see the payment and reference in our bank account. If you pay cash on pickup, no payment details are collected online.

Who we share it with

We use trusted service providers to run the shop. They only get the information they need to do their job:

Couriers and Australia Post — the recipient's name, address and phone number, to deliver your gift
PayPal — to process card and PayPal payments
Vercel — website hosting
Railway — runs our shop system (orders, accounts, stock)
Neon — stores our shop database
Resend — sends our emails (order emails, replies, newsletter)
Cloudflare — stores product photos and runs the spam check on our forms
Upstash — limits repeated requests to protect the shop from abuse; it keeps a scrambled version of your IP address for a few minutes only

We may also disclose personal information if the law requires it.

Information stored overseas

Our shop system, database and website servers are located in Singapore, so your order, account and contact details are stored there. Some of our providers are based in the United States (Vercel, Resend, Cloudflare, PayPal, Upstash) and may process information in the United States and other countries where they operate, including Japan for email sending. We choose providers that protect personal information with strong security, and we only share what each one needs.

Cookies

We use only the cookies the shop needs to work:

_medusa_cart_id — remembers your cart (7 days)
_medusa_jwt — keeps you signed in to your account (7 days)
_medusa_cache_id — helps pages load quickly
_medusa_locale — remembers your country and language
_medusa_onboarding and _medusa_pending_customer — short-lived, used while you sign up or finish an order
Cloudflare Turnstile — checks that a form is being sent by a person, not a bot

You can block cookies in your browser, but the cart and checkout won't work without them.

How long we keep it

Orders: as long as Australian tax law requires (generally five years).
Accounts: until you ask us to delete your account.
Messages sent through our contact form: 12 months.
Newsletter: until you unsubscribe.

Security

The website uses a secure (HTTPS) connection, passwords are stored scrambled, and only our team can access shop records. No method of storing or sending information online is completely secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.

Access, correction and complaints

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete your account. Email info@foreverkidz.com.au or call 0421 488 129. We'll reply within 30 days.

If you have a privacy complaint, please contact us first. If you're not satisfied with our answer, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or 1300 363 992.

Children

Our gifts are for babies, but the shop is for adults buying them. We don't knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.