privacy policy
Last updated: 25 October 2026
1. About this policy
Xizhu Wu trading as XIWU STUDIO (ABN 69 821 270 329) ("we", "us", "our") respects your privacy. This policy explains how we collect, use, store, disclose, and protect personal information about you. We comply with privacy laws that apply to us, including the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) where applicable. The handling commitments in this policy apply regardless of whether a particular statutory obligation applies to us.
This policy applies to xiwustudio.com (the "Site") and transactions and interactions with us through the Site, email or other customer-service channels. It is a notice about our practices; using the Site is not, by itself, consent to marketing or optional tracking. Where consent is needed, we'll request it separately.
It should be read together with our Terms & Conditions (https://xiwustudio.com/terms-conditions) and Shipping & Returns Policy (https://xiwustudio.com/shipping-returns).
2. What information we collect
We collect personal information you give us directly when you:
Place an order — name, billing and shipping address, email address, phone number (optional at checkout; for mainland China deliveries, we follow up by email if the recipient’s mobile number is missing and obtain it before dispatch), order details and payment status. Full card details are handled by the payment provider; we may receive limited payment information such as card type and last four digits
Sign in to or create a customer account — account contact details, addresses and order history. Account authentication is handled through Squarespace; we do not receive your password in readable form
Opt in to marketing emails — email address and subscription preferences, together with available records of when and how you opted in
Email or message us — name, email, the content of your message
Squarespace processes technical and usage information when you browse the Site. The information available to us depends on the enabled features and your cookie choices. It can include:
IP address, browser type and version, operating system, device information
Referring pages, pages visited and interactions with the Site
Cookies and similar tracking technologies (see clause 7)
We don't deliberately collect "sensitive information" as defined by the Privacy Act (such as health, religious, or racial information), and ask that you don't provide it through the Site.
We may also receive payment confirmations, delivery updates and information needed to assess fraud or resolve a dispute from our payment and shipping providers. You can make a general enquiry anonymously or under a pseudonym where practicable. If you don't provide information needed for an order, delivery or account, we may not be able to provide that service.
3. Why we collect it
We collect personal information for the following purposes:
To process and fulfil orders (shipping, payment, customer support)
To respond to enquiries and provide customer service
To record optional marketing subscriptions and, if we begin campaigns, send marketing emails to people who have opted in
To improve the Site, our products, and the customer experience
To comply with our legal obligations (e.g., tax record-keeping, fraud prevention)
To exercise or defend our legal rights
We collect what we need for these purposes — no more.
4. Sharing your information
We don't sell your personal information. We share it only with parties needed to run our business and only for the purposes above:
Squarespace — our e-commerce platform; hosts the online store, manages customer accounts, and stores order records, customer-account contact details and marketing subscription records
Squarespace Payments and its payment service providers — process payments and assist with payment security, refunds and disputes. We do not store full card numbers or card security codes ourselves
Australia Post, destination delivery partners and customs authorities — to deliver orders and complete customs clearance, including using the recipient’s mobile number for mainland China shipments
Google Workspace — hosts our customer-service mailboxes, including info@xiwustudio.com and orders@xiwustudio.com, and stores and delivers correspondence with you
Order email services — deliver transactional messages about your orders
Squarespace Analytics — receives browsing and device information to help us understand Site traffic and usage, as described in clause 7
Professional advisors (accountants, lawyers, etc.) — only when needed and under confidentiality
Law enforcement, regulators, or courts — where we are legally required to disclose information
Each third-party service has its own privacy policy. Squarespace's policy is available at squarespace.com/privacy (https://www.squarespace.com/privacy). We take reasonable steps to select and manage providers appropriately. Using a provider does not remove responsibilities we have under applicable law. External websites you choose to visit have their own privacy practices.
5. Overseas processing and disclosure
Some of our service providers store or process information outside Australia, including in the United States through Squarespace and its service providers. International delivery also requires sharing delivery information with carriers and customs authorities in the destination country. Other processing locations depend on the providers used for your transaction.
Where APP 8 applies, we take reasonable steps required by that principle before disclosing personal information overseas and remain accountable as required by law. We do not treat your use of the Site or acceptance of this policy as consent to waive those protections. Contact us for information about relevant providers and processing locations.
6. Account, service and marketing communications
We store account and order contact details in Squarespace to provide those services. We may send non-promotional messages needed to manage your account, orders, deliveries, returns, refunds or security. Creating an account, making a purchase or appearing in our contact records does not itself subscribe you to marketing emails.
Marketing signup is optional. You can choose to subscribe by separately opting in to marketing emails. Subscribing is not required to create an account or place an order. Squarespace stores your email address and subscription preferences. We do not currently send marketing emails or newsletters; we collect these subscriptions for future updates about XIWU STUDIO, products and offers.
If we begin sending marketing emails, we plan to use Squarespace Email Campaigns and will send them only to people with verified consent. Each marketing email will identify us and include an unsubscribe option. You can also withdraw your marketing consent at any time by emailing info@xiwustudio.com. Opting out of marketing does not stop necessary account or order messages.
7. Cookies and tracking technologies
We use Squarespace's built-in analytics to understand Site traffic and how visitors use our pages. Information processed can include IP addresses, browser and device information, referring pages, pages viewed and interactions with the Site. We share this information with Squarespace to provide analytics. Squarespace also processes visitor information for its own platform purposes, including security and integrity, as explained in its Privacy Policy (https://www.squarespace.com/privacy).
Squarespace uses cookies and similar technologies to support functions such as the shopping cart and customer sessions, and to provide analytics. Some cookies last for a browsing session; others remain for a set period. Details are available in Squarespace's cookie documentation (https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses).
Our cookie banner lets you accept or decline non-essential cookies or manage your preferences. Squarespace analytics cookies are restricted until you accept them. Necessary cookies supporting checkout, customer sessions and other essential functions remain in use.
We use overall analytics reports and have disabled Squarespace’s individual-visit Activity Log. This does not mean Squarespace stops processing all technical information needed to operate and secure the platform, or that all analytics data is anonymous.
You can also manage cookies through your browser settings. Blocking necessary cookies may affect checkout or account features. Contact us if you need help with your privacy choices.
8. How we keep your information secure
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure:
We use HTTPS to protect information in transit and payment providers to handle payment-card information
Access to customer data is limited to authorised personnel
We rely on our e-commerce platform's industry-standard hosting security
No method of transmission or storage over the Internet is completely secure. This does not limit our legal responsibilities to protect information or respond to a breach.
9. How long we keep your information
We store customer account and order information in Squarespace and customer-service emails in Google Workspace. We do not currently have a routine review or deletion schedule for these records.
Order and financial records may need to be retained to meet tax and other record-keeping requirements or deal with an ongoing claim or dispute, including after an account is closed. Website analytics retention depends on Squarespace's service and our settings.
You can contact info@xiwustudio.com about the information we hold or to request deletion. We will consider requests in light of applicable legal obligations and any information we need to retain, and explain the outcome. Provider backups may follow separate retention and deletion cycles.
10. Access, correction, deletion and complaints
You can ask us to:
Access the personal information we hold about you
Correct any information that is inaccurate, out of date, incomplete, or misleading
Delete information we no longer need and are not required to keep
Make a privacy complaint about how we've handled your personal information
Email info@xiwustudio.com with your request or complaint. The business owner handles privacy requests and complaints. We aim to respond within 30 days, or sooner where required by law. We may reasonably verify your identity without collecting unnecessary documents. If we cannot grant a request, we'll explain our reasons and available complaint options, unless the law prevents us doing so. These processes do not limit any statutory rights you have under applicable privacy law.
If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) for guidance or to complain where it has jurisdiction, or another relevant privacy regulator:
Website: oaic.gov.au (https://www.oaic.gov.au/)
Phone: 1300 363 992
11. Notifiable Data Breaches scheme
We will promptly investigate suspected breaches, take steps to contain them and assess possible harm. Where the Notifiable Data Breaches (NDB) scheme applies, we will take all reasonable steps to complete an assessment of a suspected eligible breach within 30 calendar days and notify the OAIC and affected individuals as soon as practicable once an eligible breach is established, unless an exception applies. We will not wait for the assessment deadline if notification is already required. We will also meet any other applicable notification duties and take steps to prevent recurrence.
12. Children
The Site is not specifically directed at children. Where consent is needed, we consider whether the person has the capacity to give informed consent and seek a parent or guardian's consent where appropriate. If you believe we have collected a child's information inappropriately, contact info@xiwustudio.com. We'll investigate and delete information that we have no lawful reason to retain, while meeting any applicable record-keeping duties.
13. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, our service providers, or applicable law. The "Last updated" date at the top reflects the latest version. We'll notify users of material changes on the Site.
14. Contact
For privacy questions, requests, or complaints:
Xi Wu Studio (ABN 69 821 270 329)
Sydney, NSW, Australia