Privacy policy
The short version
Last updated 10 October 2026.
We collect what we need to send you an order, answer you when you write, and see how the site is working. We do not sell your information.
- When you order, we get your name, address, email and phone.
- When you join the list, we get your email.
- When you browse, we record how the site is used. That includes session replays, with what you type hidden.
- We use Meta and Google to run and measure ads. You can opt out.
The rest of this page is the detail.
Who we are
Stay Wicked is run by Heathens Pty Ltd, 7-9 Love Street, Cloverdale, Western Australia 6105. ABN 49 688 179 339.
When this policy says we, us or Stay Wicked, it means Heathens Pty Ltd. We follow the Australian Privacy Principles in the Privacy Act 1988.
What we collect, and when
| When | What we collect |
|---|---|
| You place an order | Name, email, phone, shipping and billing address, what you bought |
| You pay | Payment is handled by Shopify and its payment providers. We never see or store your full card number |
| You join the list | Email address |
| You contact us or ask to stock us | Name, business name, contact details, and whatever you write |
| You browse the site | Device and browser type, IP address, rough location from that IP, pages viewed, clicks, scrolls and taps |
We do not ask for sensitive information such as health details, and we would rather you did not send it.
Session recording
We use Microsoft Clarity to see how people use the site: where they click, how far they scroll, and where they get stuck.
Clarity does this with session replays and heatmaps. A replay is a reconstruction of a visit, showing mouse movement, clicks, taps and scrolling. It is not a recording of your screen, camera or microphone.
Clarity hides what you type into form fields, so we do not see passwords or card numbers.
Clarity uses cookies to do this. Microsoft also receives this usage data and may use it for its own purposes, including site optimisation, security and advertising. The Microsoft Privacy Statement explains how.
Who else handles your information
We share information only with the companies that help us run the shop. We do not sell it.
| Company | What they do for us |
|---|---|
| Shopify | Runs the store, checkout, payments and order records |
| Microsoft Clarity | Session replays and heatmaps |
| Meta (Facebook and Instagram) | Measures and shows our ads. Instagram posts are embedded on the home page |
| Measures and shows our ads, lists our products in Google Shopping, serves fonts | |
| Australia Post, StarTrack and TNT | Get your name, address and phone to deliver your order |
| Tapstitch | Tees are printed to order, so the printer gets your name and address |
| Klaviyo | Sends the marketing emails you signed up for |
We will also hand over information when the law requires it.
Emails and ads
We send marketing emails only if you joined the list or ticked the box at checkout. Every one has an unsubscribe link. Order and delivery emails still come through, since you need those.
For ads, Meta and Google code on the site tells them which pages were viewed and what was bought. That lets us measure our ads and show them to people who have visited.
To opt out of that sharing, use our data sharing opt-out page. You can also change your ad settings with Meta and Google directly.
Cookies
The site uses cookies for three things.
- Running the shop: keeping your cart, getting you through checkout, remembering your region.
- Seeing how the site is used: Shopify analytics and Microsoft Clarity.
- Ads: Meta and Google.
You can block or delete cookies in your browser. If you block all of them, the cart and checkout may not work.
Where it is stored
We are in Western Australia. The companies listed above store information on servers outside Australia, including in the United States and Canada. By using the site you understand your information may be held overseas.
How long we keep it, and how we look after it
We keep order records for as long as tax and consumer law require. We keep your email on the list until you unsubscribe. Clarity keeps most replays for 30 days. Some replays and all heatmaps are kept for up to 9 months.
Only the people who need your information to do their job can get to it. No system is perfect. If there is a breach likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner.
Seeing, fixing or deleting your information
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email us at the address below. We will reply within 30 days. We may need to check it is you first.
Some records we have to keep by law, such as tax invoices. We will tell you if that applies.
If you think we have handled your information badly, tell us first and we will try to fix it. If you are not happy with the answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Children
You need to be 18 or over to order, or have a parent or guardian order for you. We do not knowingly collect personal information from children. If you think we have, email us and we will delete it.
Changes and contact
If we change this policy, we will post the new version here and change the date at the top.
Questions, requests or complaints:
- Email: sales@staywickedbrand.com
- Phone: 0401 813 300
- Post: Heathens Pty Ltd, 7-9 Love Street, Cloverdale WA 6105