Last updated: 5 September 2026
Nullifier is a small independent clothing label. We collect as little about you as we can get away with, we do not sell it to anyone, and this page explains exactly what happens to what we do collect.
1. Who is responsible
This site is run by the holder of ABN 14 240 869 663, trading as Nullifier, in Australia. For privacy questions, email hello@nullifier.io.
2. What we collect
When you place an order: your name, email address, delivery address, phone number if you give one, and what you bought. We need all of it to print your order and get it to you.
Payment details: handled entirely by PayPal and Stripe. Your card number never reaches our website and we never see or store it. We receive only a confirmation that payment succeeded, plus the last four digits for matching up orders.
If you create an account: your email address, a password we store only as a one-way hash, and your order history. Accounts are optional. You can buy as a guest and we would rather you did if it suits you.
If you join our mailing list: your email address, and whether you opened the emails.
When you browse: basic technical information such as your IP address, browser and pages viewed. This is ordinary web server activity and we use it to keep the site working and secure.
We do not collect anything about your race, health, politics, religion, sexuality or any other sensitive category, and we would ask you not to send it to us.
3. Why we have it
- to take, print and deliver your order
- to email you about that order
- to answer you when you contact us
- to handle returns and faults
- to keep the records the tax office requires
- to protect the site against fraud and abuse
- to send you marketing, but only if you asked for it
If you are in the UK or EU, our lawful bases are performance of a contract for order handling, legal obligation for tax records, consent for marketing, and legitimate interests for security and fraud prevention.
4. Who we share it with
Only the businesses we need to run the shop, and only the parts they need:
- Printful prints and ships your order, so they get your name, delivery address and what you ordered. They are based in the United States and print in facilities in the US, Europe and elsewhere.
- PayPal and Stripe process payments under their own privacy policies.
- Our web host and email provider, who necessarily handle data passing through the site.
- Delivery carriers, who need your address to deliver.
- Our accountant and the ATO, where tax law requires it.
We do not sell your personal information, and we never will. We do not share it with advertisers or data brokers.
5. Information going overseas
Because our printing partner and payment providers operate internationally, your details will be handled outside Australia, most likely in the United States and the European Union. We only use providers who commit to protecting it, but privacy laws elsewhere differ from Australian law. By ordering, you accept that this is necessary to get your item made and delivered.
6. Cookies
The site uses cookies that are strictly necessary to work at all, such as remembering what is in your cart and keeping you logged in. Without these, checkout cannot function.
If we ever add analytics or advertising cookies, we will ask you first and you will be able to say no. We would rather run a site that does not need them.
You can clear or block cookies in your browser settings, though blocking the necessary ones will break the cart.
7. How long we keep things
- Completed orders: seven years, because tax law requires it.
- Failed, cancelled and pending orders: one month.
- Inactive accounts: twelve months, then deleted.
- Mailing list: until you unsubscribe.
- Emails you send us: up to two years, so we have context if you come back.
8. Keeping it safe
The site runs over an encrypted connection, passwords are hashed rather than stored, access to the admin is limited and protected, and we deliberately do not hold card details because the safest data is the data you never have.
No system is perfectly secure. If a breach ever occurred that was likely to cause you serious harm, we would tell you and notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
9. What you can ask us to do
Email hello@nullifier.io and we will act within 30 days. You can ask us to:
- tell you what we hold about you
- send you a copy of it
- correct anything wrong
- delete it, where we are not required to keep it for tax
- stop sending you marketing
There is no charge, and you do not need to give a reason. If you are in the UK or EU you also have the right to object to processing, to restrict it, and to receive your data in a portable format.
10. Marketing emails
We only email you marketing if you asked for it. Every one has an unsubscribe link that works immediately, and we act on unsubscribes within five working days as the Spam Act requires. Order confirmations and delivery updates are not marketing and will still be sent, since you need them.
11. Children
This shop is not aimed at children and we do not knowingly collect information from anyone under 16. If you believe a child has given us their details, email us and we will delete them.
12. Other sites
We link to places like Discord and social platforms. Once you follow a link you are on their site under their policy, not ours.
13. Changes
If we change this policy we will update the date at the top. If a change materially affects you, we will tell you directly.
14. Complaints
Come to us first at hello@nullifier.io and we will try to fix it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the UK or EU, you can complain to your local data protection authority.