Privacy policy

Last updated: 22 September 2026

Who we are and how to contact us

Jordan Hannan Lovett trading as SUBTLE NERD CO, ABN 20 585 811 550, operates subtlenerdco.com and is responsible for the personal information handled for our business. For privacy questions, requests or complaints, email info@subtlenerdco.com or write to 12 Cunningham Street, Newstead QLD 4006, Australia.

Information we collect

  • Contact, order and account information: information you provide, such as your name, email, delivery and billing addresses, phone number, purchases, account details and preferences.
  • Payment information: payment and transaction details are processed by the payment provider selected at checkout. We receive information needed to confirm payment, manage orders and address payment disputes. Do not email us card numbers or passwords.
  • Customer service information: messages, return requests, photos you provide about a product issue, and records of our response.
  • Device and activity information: IP address, browser and device details, cookie or similar identifiers, pages visited and shopping activity, collected by our store platform and permitted connected tools.

Information comes from you, your use of the store, and service providers involved in payment, fulfilment, delivery and permitted measurement. If information needed to process an order is not provided, we may be unable to complete it.

How and why we use it

We use information to operate the store, accept payment, fulfil and deliver purchases, provide support and returns, protect against fraud and security threats, maintain business records and meet legal obligations. Where permitted, we also use browsing and purchase information to understand store performance and measure or personalise marketing. Promotional messages depend on your preferences and the law that applies; you can unsubscribe or contact us to stop them.

Where EU or UK data protection law applies, our legal bases are performance of a contract or steps requested before a contract; legal obligations such as accounting and consumer-rights requirements; legitimate interests in operating and securing our business and handling enquiries, balanced against your rights; and consent where required, including for non-essential tracking and certain marketing. You can withdraw consent without affecting lawful processing before withdrawal.

Providers and other recipients

  • Shopify hosts the store and provides commerce services, including checkout, order and account tools. See Shopify's privacy policy and its privacy portal for processing for which Shopify is responsible.
  • Printful and delivery providers receive the order and contact information needed to make, dispatch and deliver your items and resolve fulfilment issues. See Printful's privacy policy.
  • Payment providers process payments, fraud checks, refunds and disputes under the terms for your selected payment method.
  • Connected measurement and advertising services include Google and YouTube, Meta's Facebook and Instagram, TikTok and Printful's app tools. When their tracking tools operate, and subject to applicable consent and opt-out choices, they may receive identifiers and browsing or purchase events for measurement and advertising. Their own policies also apply to processing they control: Google, Meta and TikTok.
  • Business support and legal recipients may receive relevant information to provide communications, professional services, comply with a lawful request, protect rights or manage a business transfer, subject to applicable law.

Cookies and your choices

Essential technologies support functions such as the shopping basket, checkout and security. Analytics, preference and advertising technologies can serve additional purposes. In regions where our cookie banner is shown, use it to accept, reject or adjust non-essential categories and revisit your choices through the store's cookie preferences link. Browser settings can also control cookies, although disabling essential cookies can affect store functions.

Advertising-related disclosures may be treated as a sale, sharing or targeted advertising under some US state laws even where no money is paid for the information. Where available, use the store's data-sharing opt-out link, or contact us to exercise an applicable opt-out right. Applicable recognised browser opt-out signals are handled through our store platform's privacy controls. Withdrawing consent or opting out does not prevent information being used as necessary to provide an order or comply with law.

International processing, retention and security

We operate in Australia and use providers with international operations. Information may be processed in Australia, the United States, Canada, the European Economic Area and other countries where our providers and fulfilment partners operate. Where transfer safeguards are required, we rely on applicable adequacy decisions or contractual safeguards, such as approved standard contractual clauses and relevant UK arrangements. Contact us for information about safeguards that apply to your data.

We keep information for as long as needed for the purpose it was collected, including fulfilling orders, handling returns or disputes, meeting accounting and legal obligations, and maintaining security. Retention depends on the record and applicable requirements. We delete or anonymise information when it is no longer needed, subject to lawful retention obligations. We use reasonable safeguards, but no online service can guarantee absolute security.

Your rights and complaints

Depending on the law that applies, you may have rights to access, correct, delete or obtain a portable copy of information, restrict or object to processing, withdraw consent, and opt out of sale, sharing or targeted advertising. Contact us using the details above. We may need proportionate information to verify your identity or an authorised agent's authority, and we will respond within applicable legal time limits. We will not unlawfully discriminate against you for exercising privacy rights.

If we decline a request, you may ask us to review the decision or appeal where local law provides that right. You can also complain to the relevant privacy regulator, including the Office of the Australian Information Commissioner, the UK Information Commissioner's Office, or your EU/EEA supervisory authority, as applicable. You do not have to contact us before exercising an available regulator complaint right.

Children and policy changes

Our store and adult apparel are not directed at children. If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate steps.

We may update this notice when our services or data practices change. The date above identifies the latest version. We will provide additional notice or obtain fresh consent where required.