Privacy Policy

As of 14 July 2026

1. About this policy

This website and the products sold on it are operated by Kathryn Jane Hall trading as Divert Collective (ABN 98747372842) (Divert Collective, we, us, our), based in Western Australia, Australia.
This policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to this website and to anyone who purchases or considers purchasing our Products.
We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you are located in the United Kingdom or European Union, we also have regard to the UK GDPR and EU GDPR where they apply to our processing of your information, as set out in section 9. You can contact us about privacy at hello@divertcollective.com

2. Information we collect

Information you give us directly:

Name and email address, when you purchase a Product or contact us
Payment and billing details, collected and processed by our payment processor (see section 4); we do not see or store full card details
Any information you include in emails, contact forms or survey responses, including replies to our post-purchase email sequence

Information collected automatically:

Standard technical data when you visit our website, such as IP address, browser type, device type, pages viewed and referring site, collected via website analytics tools
Advertising and engagement data, where you have interacted with our website after arriving from an ad or social platform, once paid advertising is active
Aggregated reporting data compiled from the above sources

We do not collect sensitive information (such as health, racial or religious information) and ask that you do not include it in messages to us.

3. How we use your information

We use personal information to:

process and deliver your purchase
send transactional emails, including delivery of your Product and our post-purchase email sequence
respond to customer service enquiries and refund requests
understand how our website is used and improve our Products and content
measure and manage advertising, once paid advertising is active
comply with our legal and tax obligations

We do not use your information to make automated decisions that produce legal or similarly significant effects on you.

4. Who we share your information with

We share personal information with third-party service providers who help us run our business, including:

Payment processing — SamCart and its payment processor SamPay (powered by Stripe), to process your purchase
Email delivery — a provider we use to send the post-purchase email sequence
Website analytics and advertising measurement — providers we use to understand website usage and, once paid advertising is active, measure ad performance
Automation and reporting tools — providers we use to connect the systems above and compile internal reporting

Each provider processes information under its own privacy policy and terms. We can provide the specific names of current providers on request.
We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.
We may disclose personal information where required by law, for example to tax authorities in connection with GST or VAT obligations, or to comply with a legal process.

5. Cookies and similar technologies

Our website uses cookies and similar technologies via Google Analytics and the Meta Pixel to recognise your browser, understand site usage and, where advertising is active, measure ad performance. You can control or disable cookies through your browser settings; disabling cookies may affect how the website functions.

6. International data transfers

Some of our third-party service providers, including our payment processor, may store or process information on servers located outside Australia, including in the United States. Where your information is transferred internationally, we rely on the protections built into these providers' own compliance frameworks (such as standard contractual clauses or equivalent safeguards where applicable). By using our website and purchasing our Products, you acknowledge that your information may be handled in this way.

7. Data retention

We retain personal information for as long as needed for the purposes described in this policy, including to meet our record-keeping obligations for tax and consumer law purposes (generally five years for financial records in Australia). Email marketing data is retained until you unsubscribe or request deletion, whichever is earlier.

8. Your rights

Under the Australian Privacy Principles, you may request access to the personal information we hold about you and request correction if it is inaccurate. Contact us at hello@divertcollective.com to make a request; we will respond within a reasonable time.
If you are unhappy with how we have handled your personal information, you can contact us directly, or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
If you are in the United Kingdom or European Union, you may also have the right to request erasure of your information, restrict or object to certain processing, and request a copy of your information in a portable format, to the extent these rights apply under the UK GDPR or EU GDPR. Contact us at hello@divertcollective.com to make a request. You also have the right to lodge a complaint with your local supervisory authority.

9. Scope of overseas privacy law

We sell our Products globally and this policy applies to buyers wherever you are located.
We are a small Australian sole trader business. We do not have a place of business in the United Kingdom or European Union and do not currently monitor the behaviour of UK or EU individuals in a targeted way beyond standard website and marketing analytics. Where our processing of UK or EU residents' information falls within the scope of the UK GDPR or EU GDPR, we aim to apply the principles of those frameworks as described in this policy.
Other countries, including the United States, operate privacy laws that generally apply once a business meets a size or data-volume threshold (for example, California's CCPA/CPRA applies once a business exceeds specific revenue or consumer-volume thresholds). At our current scale we do not meet these thresholds, so this policy is built around the Australian Privacy Principles as the baseline, with UK/EU GDPR principles applied on top because those frameworks carry no minimum threshold for overseas sellers. We will review this position as the business grows.

10. Children's privacy

Our Products and website are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@divertcollective.com and we will delete it.

11. Security

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including relying on the security measures of our third-party service providers. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. The version in force at the time you use our website or purchase a Product applies. The last updated date at the top of this page shows when this policy last changed.

13. Contact us

For any questions about this policy or how we handle your personal information, contact us at hello@divertcollective.com.

Back to Carry Less

Products

About us

Terms & Conditions