Privacy policy

Last updated: 10 June 2026

Topic Details
Data controller Timber & Tale
Website timberandtale.com
Contact support@timberandtale.com
Data retention (orders) 7 years (tax compliance)
Data retention (marketing) Until you unsubscribe
Data retention (cookies) 12 months
Minimum age 16 years for privacy/data collection; ordering requires 18+ or parent/guardian permission


Who is responsible for your data?

Timber & Tale is the data controller for the personal data collected through timberandtale.com. Our business address is 159 Studley Ct, Derrimut VIC 3026, Australia.

What data do we collect?

When you place an order, we collect your name, email address, shipping address, phone number (if provided), and payment information. When you browse our website, we collect data through cookies and similar technologies, including your IP address, browser type, device information, pages visited, and referring URLs. When you contact us, we collect your name, email address, and the content of your message.

Why do we collect your data, and on what legal basis?

We process your personal data for the following purposes:

To process and deliver your order, including payment processing, shipping, and order updates. Legal basis: performance of a contract.

To communicate with you about your order, respond to enquiries, and provide customer support. Legal basis: performance of a contract and legitimate interest.

To improve our website, analyse browsing behaviour, and optimise our store. Legal basis: legitimate interest.

To send marketing communications, if you have opted in. Legal basis: consent. You can withdraw consent at any time by clicking unsubscribe in any marketing email.

To comply with legal obligations, including tax, accounting, and fraud prevention requirements. Legal basis: legal obligation.

How long do we keep your data?

Order data is retained for 7 years to comply with tax and accounting law. Marketing data is kept until you unsubscribe. Cookie data expires automatically after 12 months. Customer support correspondence is retained for 2 years after the last interaction.

Third-party services

We share your data with the following categories of service providers, only to the extent necessary to fulfil your order and operate our store:

Shopify (e-commerce platform and hosting), payment processors (Shopify Payments, PayPal), shipping and fulfilment partners (Australia Post, Sendle), ParcelPanel (order tracking), and email communication tools.

We never sell your personal data to third parties.

Cookies and tracking technologies

Our website uses cookies to provide core functionality and improve your browsing experience. These include:

Essential cookies required for the website to function, such as cart and session cookies (Shopify). Analytics cookies that help us understand how visitors use our site. Third-party cookies from services like ParcelPanel for order tracking.

You can manage your cookie preferences through your browser settings or through the cookie banner on our website. Disabling essential cookies may affect the functionality of our store.


International data transfers

Timber & Tale is based in Australia. Some of our service providers are based outside Australia, including in the United States and the European Economic Area. Whenever your data is transferred internationally, it is protected by appropriate safeguards to ensure your data receives an appropriate level of protection.

Children's data

Our store is not intended for children under 16 years of age. We do not knowingly collect personal data from anyone under 16. Customers must be 18 or have parent or legal guardian permission to place an order, as stated in our Terms of Service. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your privacy rights

You may have rights under applicable privacy laws, including the Australian Privacy Act 1988, such as:

The right to access your personal data. The right to have your data corrected if it is inaccurate or incomplete. The right to have your data deleted (right to erasure). The right to restrict processing. The right to data portability, to receive your data in a structured, commonly used format. The right to object to processing based on legitimate interest. The right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at support@timberandtale.com. We will respond within 30 days.

If you are not satisfied with how we handle your data, you can contact us using the details below or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Your rights under the Australian Privacy Act

Under the Australian Privacy Act 1988, you can request access to your personal data, request correction of inaccurate data, and make a complaint about how we handle your data. Customers in other destinations may also have rights under their local privacy laws.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

This policy may be updated from time to time. Whenever we make changes, we'll post the revised version on this page with the updated date at the top.

Company information

Trading name: Timber & Tale
Registered office: 159 Studley Ct, Derrimut VIC 3026, Australia
Return address: 159 Studley Ct, Derrimut VIC 3026, Australia

Note: Timber & Tale is an online-only store with no physical showroom. The registered office listed above is our administrative business address only.

Contact information

Email: support@timberandtale.com Contact form: timberandtale.com/pages/contact Average response time: within 24 hours

Customer service hours (AEST):
Monday to Friday: 9:00 AM – 5:00 PM
Saturday to Sunday: 9:00 AM – 1:00 PM