Privacy Policy
Last updated: October 2026
This Privacy Policy explains how Tulip & Co. , trading as Tulip & Co (“Tulip & Co”, “we”, “us” or “our”), collects, uses, stores and shares personal information when you visit or shop at (the “Website”).
Privacy contact: tulipandco.au@gmail.com
1. Personal information we collect
Depending on how you use the Website, we may collect:
Contact and delivery details, such as your name, email address, phone number, billing address and shipping address.
Order information, such as the products you buy, order history, delivery instructions, returns and customer service messages.
Payment information. The payment provider handles payments selected at checkout. We do not receive or store your full card number.
Website and device information, such as your IP address, browser, device type, pages visited and how you interact with the Website. Squarespace and cookies or similar technologies may collect some of this information.
Marketing preferences, such as whether you choose to receive emails from us.
Information you provide voluntarily, such as when you contact us, submit a form, leave a review or respond to a survey.
We need some information to process and deliver an order. If you do not provide it, we may not be able to complete your purchase or respond to your request.
2. How we use personal information
We use personal information to:
process payments and fulfil, deliver and manage orders;
provide customer support and handle returns or complaints;
send order confirmations and other service messages;
send marketing emails if you have signed up to receive them;
operate, maintain and improve the Website and our products;
protect the Website, prevent fraud and meet legal or accounting requirements.
You can unsubscribe from marketing emails at any time using the unsubscribe link in the email. You may still receive messages about an order or another service you requested.
3. Squarespace, cookies and analytics
The Website is hosted on Squarespace. Squarespace may process information about Website visitors and customers to provide its website and commerce services. Squarespace may also collect certain visitor information for its own purposes, such as operating and protecting its platform. Read Squarespace’s Privacy Policy and Cookie Policy for more information.
The Website may use cookies and similar technologies to operate the site, remember preferences, understand Website traffic and support marketing. The cookies used depend on the Squarespace features and any third-party tools we have enabled.
You can manage cookie choices through the cookie banner on our Website, where available, and through your browser settings. Some Website features may not work as intended if you disable certain cookies.
Before publishing: add details of any analytics, advertising pixels or other tracking tools you have enabled, such as Google Analytics or Meta Pixel, and configure the Squarespace cookie banner to match. Squarespace provides controls for cookie consent, but notes that its banner settings may not meet every site’s legal requirements.
4. Who we share information with
We share personal information only where needed to run the Website and our business, fulfil your order, or meet legal obligations. This may include:
Squarespace, which hosts the Website and supports its commerce functions;
Payment providers: PayPal or Squarespace Payments
Delivery providers: DHL
Professional advisers, regulators, law enforcement or other parties where required by law or necessary to protect our rights.
The providers you use may have their own privacy policies. Please list only providers that actually receive personal information through your Website or business.
5. How long we keep information
We keep personal information only for as long as reasonably needed for the purposes described in this policy, including to manage orders, provide customer support, keep required business records and resolve disputes. We may keep some information for longer where the law requires it.
6. Keeping information secure
We take reasonable steps to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. No website or electronic storage system can be guaranteed to be completely secure.
8. Accessing or correcting your information
You can ask us to access or correct personal information we hold about you by emailing [privacy contact email]. We may need to verify your identity before responding.
9. Privacy complaints
If you have a privacy concern or complaint, contact us at [privacy contact email] and tell us what happened. We’ll review your complaint and respond within a reasonable time.
If you are not satisfied with our response, you may contact the privacy regulator in your country:
Australia: Office of the Australian Information Commissioner at oaic.gov.au
New Zealand: Office of the Privacy Commissioner at privacy.org.nz
10. Changes to this policy
We may update this Privacy Policy when our practices, Website features or legal requirements change. The updated version will be published on this page with a revised “Last updated” date.