Privacy Policy

As of 6 September 2026

1. About this policy

This website and the products sold on it are operated by Kathryn Jane Jane Hall trading as Divert Collective (ABN 98747372842) (Divert Collective, we, us, our), based in Western Australia, Australia.
This policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to this website and to anyone who purchases or considers purchasing our Products.
We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you are located in the United Kingdom or European Union, we also have regard to the UK GDPR and EU GDPR where they apply to our processing of your information, as set out in section 9. You can contact us about privacy at hello@divertcollective.com

2. Information we collect

Information you give us directly:

Name and email address, when you purchase a Product or contact us
Payment and billing details, collected and processed by our payment processor (see section 4); we do not see or store full card details
Your marketing preference, being whether you ticked the optional box at checkout to receive marketing emails from us
Any information you include in emails, contact forms or survey responses, including any replies you send us

Information collected automatically:

Standard technical data when you visit our website, such as IP address, browser type, device type, pages viewed and referring site, collected via website analytics tools
Advertising and engagement data, where you have interacted with our website after arriving from an ad or social platform, once paid advertising is active
Aggregated reporting data compiled from the above sources

We do not collect sensitive information (such as health, racial or religious information) and ask that you do not include it in messages to us.

3. How we use your information

We use personal information to:

process and deliver your purchase
send transactional emails, including your receipt and delivery of your Product
respond to customer service enquiries and refund requests
understand how our website is used and improve our Products and content
measure and manage advertising, once paid advertising is active
comply with our legal and tax obligations

Our legal bases. Where the UK GDPR or EU GDPR applies, our legal bases are: performing our contract with you, for processing and delivering your purchase and sending transactional emails; our legitimate interests in understanding and improving our website, Products and marketing; your consent, where we ask for it, for non-essential cookies and any marketing you opt into; and compliance with a legal obligation, for our tax and record-keeping requirements.

Marketing emails. When you buy from us, you can choose to receive marketing emails by ticking an optional box at checkout. That box is never ticked for you, and leaving it unticked does not affect your purchase in any way.
If you tick it, we may email you about new Products and related content. Every marketing email will identify us and include an unsubscribe link, and unsubscribing will stop all marketing email promptly. You can also withdraw your consent at any time by contacting us at hello@divertcollective.com, and withdrawing it does not affect anything we sent before you did.
Whether or not you opt in, we will still send you transactional emails about a purchase you have made, such as your receipt and the delivery of your Product.

We do not use your information to make automated decisions that produce legal or similarly significant effects on you.

4. Who we share your information with

We share personal information with third-party service providers who help us run our business, including:

Payment processing — SamCart and its payment processor SamPay (powered by Stripe), to process your purchase
Email delivery — our checkout provider, SamCart, sends your receipt and delivers your Product. If we engage a separate email provider in future, we will update this policy
Website analytics and advertising measurement — providers we use to understand website usage and, once paid advertising is active, measure ad performance
Automation and reporting tools — providers we use to connect the systems above and compile internal reporting

Each provider processes information under its own privacy policy and terms. We can provide the specific names of current providers on request.
We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.
We may disclose personal information where required by law, for example to tax authorities in connection with GST or VAT obligations, or to comply with a legal process.

5. Cookies and similar technologies

Our website uses cookies and similar technologies. These fall into two groups.

Necessary cookies. Our checkout provider, SamCart, sets a session cookie required for the website and checkout to work. These cannot be switched off.
Analytics and advertising cookies. We use Google Analytics to understand how the website is used, for example which pages are viewed and where visitors arrived from. If we begin paid advertising, we may also use advertising technologies such as the Meta Pixel to measure ad performance. We do not use the Meta Pixel today and this policy will be updated before we do.

We ask for your consent when you first visit the website, and analytics and advertising cookies are not set unless you give it. You can change your choice at any time using the cookie settings link on our website, and you can also control or disable cookies through your browser settings. Disabling cookies may affect how the website functions.

6. International data transfers

Our providers are primarily located in the United States. Before engaging a provider that stores or processes information overseas, we take reasonable steps to satisfy ourselves that they are bound by privacy obligations broadly comparable to the Australian Privacy Principles, and we rely on the safeguards in their own compliance frameworks, such as standard contractual clauses where those apply..

7. Data retention

We retain personal information for as long as needed for the purposes described in this policy, including to meet our record-keeping obligations for tax and consumer law purposes (generally five years for financial records in Australia). Email marketing data is retained until you unsubscribe or request deletion, whichever is earlier.

8. Your rights

Under the Australian Privacy Principles, you may request access to the personal information we hold about you and request correction if it is inaccurate. Contact us at hello@divertcollective.com to make a request. We will respond within 30 days, and will tell you if we need longer and why.
If you are unhappy with how we have handled your personal information, you can contact us directly, or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Wherever you are located, we will also honour a request to erase your information, to restrict or object to how we use it, to withdraw any consent you have given us, to object to direct marketing at any time, and to receive a copy of your information in a portable format. Some of these rights are guaranteed by law in particular countries, including under the UK GDPR and EU GDPR. We apply them to all of our customers as a matter of policy, whether or not the law where you live requires it. Contact us at hello@divertcollective.com to make a request. You also have the right to lodge a complaint with your local supervisory authority.

9. Scope of overseas privacy law

We sell our Products globally and this policy applies to every buyer and website visitor wherever you are located.
We are a small Australian sole trader business, based in Western Australia, with no place of business overseas. Privacy laws differ from country to country, and many apply only once a business reaches a certain size or handles a certain volume of data. Rather than apply a different standard depending on where you live, we have built this policy around the Australian Privacy Principles together with the standards set by the UK GDPR and EU GDPR, which apply to us with no minimum business size, and we extend the protections described here to all of our customers.
If the law in your country gives you privacy rights beyond those described in this policy, we will honour them. Contact us at hello@divertcollective.com and we will tell you how we can help, or where we cannot, why. This policy is built around the Australian Privacy Principles as the baseline, with UK/EU GDPR principles applied on top because those frameworks carry no minimum threshold for overseas sellers. We will review this position as the business grows.

10. Children's privacy

Our Products and website are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@divertcollective.com and we will delete it.

11. Security

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including relying on the security measures of our third-party service providers. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

12. Data Breaches

If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as soon as practicable. Where the UK GDPR or EU GDPR applies, we will notify the relevant supervisory authority within 72 hours of becoming aware of a breach where required, and notify you directly where the breach is likely to result in a high risk to your rights and freedoms.

13. Changes to this policy

We may update this policy from time to time. The version in force at the time you use our website or purchase a Product applies. The last updated date at the top of this page shows when this policy last changed.

14. Contact us

For any questions about this policy or how we handle your personal information, contact us at hello@divertcollective.com.

Back to Carry Less