Privacy policy

Drink Styx Pty Ltd t/a Nooks Balm

Last updated: January 2026

The Short Version

We collect what we need to ship you balm and run a business. We don't sell your data. You have rights. We respect them.

Not complicated. Here's the rest:

The Full Version

What We Collect

Things you give us:

  • Contact info: Name, email, phone, shipping address. So we can send you things and contact you if something goes wrong.
  • Payment info: Card details, billing address. Processed securely through Shopify — we never see or store your full card number.
  • Account info (if you create one): Order history, preferences. So you don't re-enter everything every time.
  • Messages: Emails, customer service chats. So we can actually help you.

Things we collect automatically:

  • Device & browsing info: IP address, browser, pages visited, time on site. To understand what's working, what's broken, and prevent fraud.
  • Cookies: Small files that remember your cart and track site activity. You can disable them in your browser, but your cart might forget you exist.

What We Do With It

  • Run the store: Process orders. Ship products. Handle returns. Send shipping updates. The basics.
  • Make things better: Understand what people like. Fix bugs. Improve the site. Prevent fraud.
  • Marketing (optional): Emails about new products or launches. You can unsubscribe anytime — there's a link at the bottom of every email. We're not needy.
  • Legal obligations: Comply with laws. Respond to legal requests. Protect against fraud. The boring but necessary stuff.

Who Sees Your Data

We don't sell it. Ever.

But we share it with partners who help us operate:

  • Shopify: Our e-commerce platform. They host the store, process payments, and see your activity because that's how online stores work. Shopify's Privacy Policy
  • Shipping carriers: Australia Post and couriers need your address. Obviously.
  • Payment processors: Handle transactions securely. We never see your full card number.
  • Email tools: Klaviyo or similar — only if you've opted into marketing.
  • Analytics: Google Analytics and similar. Helps us understand site traffic.
  • Advertising platforms: Meta, Google. If you've visited our site, you might see ads on social media. You can opt out (see below).

We may also share data if legally required, or if NOOKS is acquired by another company (unlikely, but lawyers make us say it).

Your Rights

Depending on where you live, you can:

  • Access: Request a copy of what we have on you.
  • Delete: Ask us to delete your data (with some legal exceptions — tax records, etc.).
  • Correct: Fix inaccurate info.
  • Opt out of marketing: Unsubscribe link at the bottom of every email. Or just ask us.
  • Opt out of targeted ads: Through your browser settings, Global Privacy Control (GPC), or contact us directly.
  • Data portability: Get your data in a transferable format.
  • Withdraw consent: Changed your mind? Let us know.

To exercise any of these:

Email hi@nooksbalm.com with subject line: "Privacy Request"

Include what you want (access, delete, opt-out, etc.) and your order number or email address.

We'll verify it's actually you, then respond within 30 days. We won't punish you for exercising your rights — same prices, same service, no passive-aggression.

Cookies & Tracking

What they are: Small files stored on your device that remember things.

What we use them for:

  • Remember your cart
  • Keep you logged in
  • Understand site traffic
  • Show you relevant ads

How to control them: Most browsers let you block or delete cookies in settings. Note: blocking everything might break your cart.

Third-party tracking: Meta, Google, and others track you across the web. If you want out, use Global Privacy Control (GPC), browser privacy settings, or ad-blocker extensions.

International Data Transfers

Your data might be processed outside Australia (like the US, where Shopify is based). When this happens, we use legal mechanisms like Standard Contractual Clauses to keep it protected.

Translation: Your data might travel. We follow the rules to keep it safe.

Data Security

We use industry-standard protection:

  • Encrypted connections (HTTPS/SSL)
  • Secure payment processing via Shopify
  • Limited internal access — only people who need it
  • Regular security updates

But no system is 100% bulletproof. We do our best. Don't email us your passwords.

How Long We Keep It

  • Active customers: As long as you have an account or keep ordering.
  • Inactive customers: Deleted or anonymised after 3–7 years (depending on legal requirements).
  • Marketing data: Until you unsubscribe or ask us to delete it.
  • Legal records: Some data we keep for tax/accounting (usually 7 years). Blame the ATO.

Children's Privacy

NOOKS products can be used on kids, but we don't market to children under 13.

If you're a parent and think your child gave us their info without permission, email hi@nooksbalm.com and we'll delete it immediately.

Third-Party Links

Our site might link to other websites (Instagram, articles, etc.). Once you leave our site, you're subject to their privacy policy, not ours. Read theirs before giving them your info.

Changes to This Policy

We might update this occasionally. When we do:

  • We'll update the "Last updated" date
  • Major changes get an email or site notice
  • Continuing to use the site after changes means you accept them

Complaints

Questions? hi@nooksbalm.com

Not happy with our response? You can file a complaint with your local data protection authority:

  • Australia: Office of the Australian Information Commissioner (OAIC)
  • EU/EEA: Your national data protection authority
  • UK: Information Commissioner's Office (ICO)

Business Details

Drink Styx Pty Ltd t/a Nooks Balm
ABN: 47 676 148 762
Melbourne, Australia
Email: hi@nooksbalm.com
Platform: Shopify Inc.

 

The Bottom Line

We collect what we need. We protect it. We don't sell it. You have rights. We honour them.

Small business. Real humans. Actual ethics.

Questions? hi@nooksbalm.com
We read our emails.