Privacy and Cookie Policy

Last Updated: February 25, 2026

CaGu MoDu Australia operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Categories of Personal Information

Contact Details: Including your name, address, billing address, shipping address, phone number, and email address.

Financial Information: Including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.

Account Information: Including your username, password, security questions, preferences and settings.

Transaction Information: Including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.

Communications with Us: Including the information you include in communications with us, for example, when sending a customer support inquiry, product reviews, or feedback.

Device Information: Including information about your device, browser, or network connection, your IP address, device type, operating system, browser type, and other unique identifiers.

Usage Information: Including information regarding your interaction with the Services, including how and when you interact with or navigate the Services, pages viewed, links clicked, and other actions taken.

Location Information: Including approximate location derived from your IP address.

Marketing and Communication Preferences: Including your preferences for receiving marketing communications and your communication preferences.

Personal Information Sources

We may collect personal information from the following sources:

Directly from You

• When you create an account on our website
• When you make a purchase or place an order
• When you subscribe to our newsletter or marketing communications
• When you contact our customer support
• When you participate in surveys or promotions
• When you leave product reviews or feedback
• When you otherwise provide us with your personal information

Automatically Through the Services

• From your device when you use our products or services or visit our websites
• Through the use of cookies and similar technologies
• Through web analytics tools
• Through your interactions with our emails and advertisements

From Our Service Providers

• When we engage them to enable certain technology
• When they collect or process your personal information on our behalf
• From payment processors regarding transaction completion

From Our Partners or Other Third Parties

• From advertising and marketing partners
• From social media platforms if you interact with us through social media
• From publicly available sources

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services

• To perform our contract with you and provide you with the Services
• To process your payments and fulfill your orders
• To remember your preferences and items you are interested in
• To send notifications to you related to your account
• To process purchases, returns, exchanges or other transactions
• To create, maintain and otherwise manage your account
• To arrange for shipping and facilitate any returns and exchanges
• To enable you to post reviews and provide feedback
• To create a customized shopping experience for you
• To recommend products related to your purchases
• To better tailor and improve the Services

Marketing and Advertising

• To send marketing, advertising and promotional communications by email, text message or postal mail
• To show you online advertisements for products or services on the Services or other websites
• To personalize advertising based on items you previously have purchased or added to your cart
• To analyze your activity on the Services for marketing purposes

Security and Fraud Prevention

• To authenticate your account and verify your identity
• To provide a secure payment and shopping experience
• To detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity
• To protect public safety
• To secure our services and prevent unauthorized access

Communicating with You

• To provide you with customer support
• To respond to your inquiries and requests
• To send you important updates about your orders
• To notify you about changes to our Services or policies
• To maintain our business relationship with you

Analytics and Service Improvement

• To understand how you use our Services
• To analyze trends and user behavior
• To improve our website, products, and services
• To develop new features and functionality

Legal Reasons

• To comply with applicable law or respond to valid legal process
• To respond to requests from law enforcement or government agencies
• To investigate or participate in civil discovery, litigation, or other legal proceedings
• To enforce or investigate potential violations of our terms or policies
• To protect our rights, property, or safety, or that of our users or the public

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Contract Performance

Processing is necessary to perform our contract with you, such as to process your orders, provide customer service, and manage your account.

Legitimate Interests

Processing is necessary for our legitimate interests or those of a third party, such as:

• Improving our Services and developing new features
• Marketing our products and services
• Preventing fraud and ensuring security
• Analyzing how our Services are used

Legal Obligation

Processing is necessary to comply with our legal obligations, such as tax reporting or responding to legal requests.

Consent

In some cases, we process personal information based on your consent, such as for certain marketing communications. You may withdraw your consent at any time.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

Service Providers

We share personal information with vendors and other third parties who perform services on our behalf, including:

• IT management and hosting services
• Payment processing
• Data analytics
• Customer support services
• Cloud storage providers
• Order fulfillment and shipping companies
• Email marketing platforms
• Advertising networks

Business and Marketing Partners

We may share information with business and marketing partners to provide marketing services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.

With Your Consent or Direction

When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as:

• To ship you products through delivery services
• Through your use of social media widgets or login integrations
• When you choose to share information on social media platforms

Corporate Transactions

In connection with a business transaction such as a merger, acquisition, corporate reorganization, sale of assets, or bankruptcy.

Legal and Safety Reasons

To comply with applicable legal obligations, including:

• To respond to subpoenas, search warrants and similar legal requests
• To enforce any applicable terms of service or policies
• To protect or defend the Services, our rights, and the rights of our users or others
• To protect against legal liability

Affiliates

With our affiliates or otherwise within our corporate group for business purposes consistent with this Privacy Policy.

Third-Party Services We Use

We use the following categories of third-party services to operate our business and provide the Services. These service providers may have access to your personal information as necessary to perform their functions:

E-commerce Platform

Shopify: Our website is hosted on the Shopify e-commerce platform. Shopify provides us with the online platform that allows us to sell our products to you. Your data may be stored through Shopify's data storage, databases and general applications. For more information, please see Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

Payment Processing

Shopify Payments: We use Shopify Payments and other payment processors to process your payment transactions securely. Payment information is encrypted and transmitted directly to the payment processor. We do not store complete credit card information on our servers.

Analytics Services

Google Analytics: We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to our site. For more information about Google Analytics, please visit https://www.google.com/policies/privacy/partners/.

Advertising and Marketing

We may use the following services for advertising and marketing purposes:

• Google Ads: For search and display advertising
• Facebook Pixel: For tracking conversions and remarketing
• Email marketing platforms: For sending newsletters and promotional emails

Shipping and Fulfillment

We share necessary information with shipping carriers (such as Australia Post, Allied Express, or other delivery services) to fulfill and deliver your orders.

Customer Support

We may use customer support platforms to manage customer inquiries and provide assistance.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files that are placed on your device when you visit our website. They help us recognize your device and remember information about your visit.

Types of Cookies We Use

How to Manage Cookies

You can control and manage cookies in several ways:

Browser Settings: Most web browsers allow you to control cookies through their settings. You can usually find these settings in the "Options" or "Preferences" menu of your browser. Here are links to cookie settings for common browsers:

• Google Chrome
• Firefox
• Safari
• Microsoft Edge

Opt-Out Tools: You can opt out of certain advertising cookies through these resources:

• Network Advertising Initiative Opt-Out
• Digital Advertising Alliance Opt-Out
• Your Online Choices (Australia)

Google Analytics Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Currently, there is no uniform standard for recognizing and implementing DNT signals. As such, we do not currently respond to DNT browser signals.

Marketing and Advertising

Email Marketing

We may send you promotional emails about new products, special offers, and other information we think you may find interesting. You can opt out of these emails at any time.

How to Unsubscribe:

• Click the "unsubscribe" link in any marketing email we send you
• Log in to your account and update your email preferences
• Contact us at support@cagumodu.com

Note: Even if you opt out of marketing emails, we will still send you transactional emails related to your account and orders (such as order confirmations, shipping notifications, and customer service responses).

Online Advertising

We use online advertising to promote our products and services. This may include:

Retargeting/Remarketing: We may show you ads on other websites based on your previous visits to our website. This is done using cookies and similar technologies.

Interest-Based Advertising: We may show you ads based on your interests and online activity across different websites.

How to Opt Out of Personalized Advertising

Google Ads: Visit Google Ads Settings to opt out of personalized Google advertising.

Facebook: Visit Facebook Ad Preferences to control ads on Facebook.

General Opt-Out: Visit the following platforms to opt out of interest-based advertising from participating companies:

• Network Advertising Initiative
• Digital Advertising Alliance
• Your Online Choices (Australia)

Mobile Advertising: You can limit ad tracking on your mobile device through your device settings:

• iOS: Settings > Privacy > Advertising > Limit Ad Tracking
• Android: Settings > Google > Ads > Opt out of Ads Personalization

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party.

Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods

Deletion Process

When we no longer need your personal information, we will:

• Securely delete or destroy it
• De-identify it so it can no longer be linked to you
• Archive it in a secure manner if required for legal compliance

You can request deletion of your personal information at any time by contacting us (see "Your Rights and Choices" section below).

Security of Your Information

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

Security Measures

Our security measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment processors
• Access Controls: We limit access to personal information to authorized personnel only
• Secure Storage: Personal information is stored on secure servers with appropriate safeguards
• Regular Security Reviews: We regularly review and update our security practices
• Employee Training: Our staff are trained on data protection and security practices

Your Responsibilities

If you choose to use the Services and register an account, you are responsible for:

• Keeping your account credentials (username and password) safe and confidential
• Not sharing your password with anyone else
• Notifying us immediately if you suspect unauthorized access to your account
• Using a strong, unique password
• Logging out of your account when using shared or public devices

Important Security Notice

If you become aware of any security breach or unauthorized access to your account, please contact us immediately at support@cagumodu.com.

Children's Data

The Services are not intended to be used by children under the age of 18, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction.

If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

Right to Access / Know

You may have a right to request access to personal information that we hold about you, including:

• The categories of personal information we have collected
• The sources from which we collected the information
• The purposes for which we use the information
• The categories of third parties with whom we share the information
• The specific pieces of personal information we have collected about you

Right to Delete

You may have a right to request that we delete personal information we maintain about you. Please note that we may need to retain certain information as required by law or for legitimate business purposes.

Right to Correct

You may have a right to request that we correct inaccurate personal information we maintain about you.

Right of Portability

You may have a right to receive a copy of the personal information we hold about you in a structured, commonly used, and machine-readable format, and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

Right to Opt Out

You have the right to opt out of:

• Marketing communications: Unsubscribe from promotional emails at any time
• Sale or sharing of personal information: Request that we not sell or share your personal information for targeted advertising
• Automated decision-making: Object to decisions based solely on automated processing

Managing Communication Preferences

We may send you promotional emails, and you may opt out of receiving these at any time by:

• Using the unsubscribe option displayed in our emails to you
• Logging into your account and updating your preferences
• Contacting us at support@cagumodu.com

If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

How to Exercise Your Rights

You may exercise any of these rights by:

• Logging into your account and updating your settings (where available)
• Contacting us at support@cagumodu.com
• Calling us at +61 468 069 835

Verification and Processing

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law.

In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

We will respond to your request in a timely manner as required under applicable law, typically within 30 days.

Australian Privacy Act Compliance

We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Your Rights Under Australian Privacy Law

Under Australian privacy law, you have the right to:

• Know how we handle your personal information: This Privacy Policy explains our practices
• Access your personal information: You can request access to the personal information we hold about you
• Correct your personal information: You can request correction of inaccurate or incomplete information
• Make a complaint: You can complain if you believe we have breached the APPs

Cross-Border Disclosure

Your personal information may be disclosed to overseas recipients, including:

• Our service providers and cloud storage facilities (which may be located in the United States or other countries)
• Payment processors for transaction processing
• Third-party platforms and service providers we use to operate our business

We take reasonable steps to ensure that any overseas recipients handle your personal information in accordance with the APPs. By using our Services, you consent to this cross-border disclosure.

APP Entity Details

APP Entity Name: SPACE FRAMER PTY LTD
ABN: 92 695 731 956
Contact: See Contact Information section below

International Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.

For Australian Residents

If your personal information is collected in Australia, we may disclose it to overseas recipients as described in the "Australian Privacy Act Compliance" section above. We take reasonable steps to ensure that any cross-border disclosure of your personal information complies with our obligations under the Australian Privacy Principles.

For European Residents

If you are in the European Economic Area (EEA) or the United Kingdom (UK), and your personal information is transferred outside of the EEA or UK, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Safeguards for International Transfers

When transferring personal information internationally, we implement appropriate safeguards, including:

• Using standard contractual clauses approved by relevant authorities
• Ensuring recipients are certified under approved frameworks
• Obtaining your consent where required
• Implementing technical and organizational security measures

Complaints

If you have complaints about how we process your personal information, we want to hear from you.

How to Make a Complaint

Step 1: Contact Us

Please contact us first using the contact details provided below. We will investigate your complaint and respond to you within a reasonable time.

Step 2: Our Response

We will:

• Acknowledge receipt of your complaint within 1 business day
• Investigate the matter thoroughly
• Respond with our findings and proposed resolution within 30 days
• Work with you to resolve the issue

External Complaints

If you are not satisfied with our response, depending on where you live, you may have the right to:

For Australian Residents:

Lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au
• Mail: GPO Box 5218, Sydney NSW 2001

For European Residents:

Lodge a complaint with your local data protection authority. You can find your local authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en

Right to Appeal:

Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons.

We will post the revised Privacy Policy on this website and update the "Last Updated" date at the top of this page. If we make material changes to this Privacy Policy, we will provide notice as required by applicable law, such as by:

• Posting a notice on our website
• Sending you an email notification
• Displaying a prominent notice when you visit our website

Your continued use of the Services after the effective date of the updated Privacy Policy will constitute your acceptance of the changes. If you do not agree to the updated Privacy Policy, you should stop using the Services.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

CaGu MoDu

Company Name: SPACE FRAMER PTY LTD
ABN: 92 695 731 956

Address:
Unit C, Building 6
161 Manchester Road
Auburn, NSW 2144
Australia

Email: support@cagumodu.com
Phone: +61 468 069 835

Business Hours:
Monday - Friday: 10:00 AM - 6:00 PM AEST
Saturday - Sunday: Closed

Response Time:
We aim to respond to all privacy inquiries within 24 hours (business days).

Privacy-Related Inquiries

For privacy-related inquiries, please include "Privacy Inquiry" in your email subject line and provide:

• Your full name
• Your contact information
• A detailed description of your inquiry or request
• Any relevant account information (if applicable)

We will verify your identity before processing requests to access, correct, or delete your personal information.