Privacy policy

Creature Stickers - Privacy Policy

Last updated: September, 2026. 

1. About this policy

This Privacy Policy explains how Courtney Liddle (ABN 78 429 277 042) trading as Creature Stickers ("Creature Stickers", "we", "us", "our") collects, uses, discloses, stores, and protects your personal information when you use our website at www.creaturestickers.com (the "Site"), upload images, or buy our products.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. By using the Site or uploading content, you agree to this policy. It should be read together with our Terms & Conditions.

2. What we collect

We may collect the following personal information:

• Identity and contact details — your name, email address, phone number, and billing/delivery address.
• Order information — the products you buy, order history, and the design reference codes linked to your creations.
• Uploaded images ("Your Content") — the images you upload so we can create your products, which may include children's drawings and photographs of objects, toys and pets. These uploads are often created by children (for example, their drawings); see clause 6. Our tool is not for photos of people. We take steps to remove metadata (including any location/EXIF data) from uploaded images on upload, and in most cases this is successful. However, for some formats — including HEIC images, which many Apple devices produce by default — and occasionally where processing an image does not complete, metadata may not be removed. If you are concerned about location or other metadata, we recommend uploading a JPG or PNG, or removing the metadata yourself before uploading.
• Personalisation details — any name or other text you ask us to print on a product (for example, "B is for Bonnie"). This may include a child's first name, which you provide on their behalf; see clause 6.
• Payment information — collected and processed by our e-commerce and payment providers (we do not store your full card details).
• Account information — if you create an account, your login details and preferences.
• Usage and device data — IP address, browser type, device information, and how you interact with the Site, including via cookies and analytics (see clause 9).
• Communications — messages you send us and our correspondence with you.

We do not seek to collect sensitive information (as defined in the Privacy Act, such as health or biometric information). Please do not upload images that contain sensitive information. If you do, you consent to us handling it for the purpose of fulfilling your order.

3. How we collect it

We collect personal information directly from you — when you browse the Site, create or upload a design, place an order, create an account, or contact us — and automatically through cookies and analytics tools. We may also receive information from our service providers (for example, order and payment confirmations from our e-commerce provider).

4. Why we use it

We use your personal information to:

• create, process, and print your products, including removing backgrounds from and applying optional automated (AI) effects to Your Content;
• print any personalisation text you provide on your product;
• check uploaded images against our acceptable-use rules (automated content moderation);
• process orders and payments, and arrange delivery;
• provide customer service and respond to your enquiries;
• send you transactional messages such as order confirmations and shipping updates;
• send you marketing communications only where you have opted in (see clause 8);
• detect, prevent, and respond to fraud, misuse, or prohibited content;
• improve and secure our Site and services; and
• comply with our legal obligations.

Uploaded images are sent to third-party AI services (through Base44) only to perform the automated moderation check and to generate the styled version you request. These services process your image transiently for that single request and, as we have been advised, do not retain it or use it to train AI models. We do not use your uploaded images to train AI models.

We will only use Your Content for marketing or public display (for example, on social media or our Site) if you have given separate, express consent, which you may withdraw at any time.

5. Who we share it with

We share personal information with trusted third parties only as needed to run our business. These include:

• E-commerce and checkout provider — Shopify. Our store, checkout, and order management run on Shopify, which processes personal information (including engaging payment processors) to provide and improve the service. Shopify handles that information under its own privacy policy, available at https://www.shopify.com/legal/privacy — we recommend you read it for details of Shopify's own practices.
• Design tool and image-processing provider — Base44. Our "Design Your Creature" tool is built on Base44, which hosts and processes the images you upload, screens them against our acceptable-use rules, applies background removal and optional automated (AI) effects, and stores the files. To do this, Base44 uses third-party AI services to check the image and to generate the styled version; those services process the image transiently for that request only and (as we have been advised) do not retain it or use it to train AI models. Base44 (and its service providers) may store and process this information overseas, including in the United States (see clause 7). Base44 handles information under its own terms and privacy practices.
• Payment processors — PCI-compliant providers that handle card payments (engaged via Shopify and/or PayPal).
• Shipping and fulfilment partners — to deliver your products.
• Communications and analytics providers — to send emails and understand Site usage.
• Professional advisers and authorities — where reasonably required, or where required or authorised by law.

We require our service providers to protect your information and to use it only for the purposes we engage them for. We do not sell your personal information. We do not reproduce our providers' own privacy practices in this policy; where we name a provider above, please refer to that provider's own privacy policy for how it handles your information.

6. Children's content and information

Our products are commonly made from drawings created by children, and from photos of objects, toys, and pets, but our Site and accounts are intended for use by adults (18+) only. We rely on the purchasing adult — a parent or guardian, or someone with their authority and consent — to upload content and to provide consent for it to be processed and reproduced, as set out in our Terms & Conditions.

Our tool is not for photographs of people, including children. We do not knowingly accept images that show a person. We screen uploads automatically and reject those that appear to contain a person at the point of upload, before any order is created; if such an image is not caught automatically, we will cancel and refund any resulting order and will not produce it. We do not knowingly create accounts for, or collect personal information directly from, children under 18.

Personalised products. Some of our products can be personalised with a name that you provide, which may be a child's first name. We collect this from you, the purchasing adult — not from the child — and we use it only to print and fulfil your order, holding it as part of your order record. Please provide a first name only; there is no need to give us any other details about your child.

We treat children's content with care, use it only to check and fulfil the order, and do not use it for marketing without the separate, express consent of the responsible adult. If you believe a child's personal information has been provided to us without the appropriate consent, please contact us and we will take reasonable steps to address it, including passing a deletion request to our provider — though please see clause 10 regarding current limitations on our ability to delete stored images.

7. Overseas disclosure

Some of our service providers store or process personal information outside Australia, including in the United States and other countries where they or their sub-processors operate. In particular, the images you upload are processed and stored by Base44 (our design-tool provider), which may hold or process that information in the United States.

Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. By uploading content and placing an order, you acknowledge and consent to this overseas disclosure. Note that overseas recipients may be subject to different laws than those in Australia, and we do not control their independent practices beyond the purposes for which we engage them.

8. Direct marketing

We will only send you marketing communications, and only use Your Content for promotion, where you have opted in. Every marketing email includes an unsubscribe link, and you can opt out at any time by using it or contacting us. Opting out of marketing does not stop transactional messages about your orders.

9. Cookies and analytics

The Site uses cookies and similar technologies — including those set by our e-commerce provider and analytics tools — to operate the store, remember your cart and preferences, and understand how the Site is used. You can manage or disable cookies through your browser settings, though some features may not work properly without them.

10. Data retention

We keep personal information only as long as we need it for the purposes described in this policy or to meet legal, tax, and accounting obligations.

• Order and transaction records are retained as required by law. This includes any personalisation text you provide, which is held as part of your order record.
• Uploaded images. To perform our content check, images are uploaded to Base44's managed storage (hosted in the United States) before the check runs. As a result, this storage includes images that are later rejected or never purchased. We use uploaded images only to perform the content check and (where accepted) to fulfil your order — never for marketing, training, or any other purpose. The Base44 platform does not currently provide a way for us to delete stored image files, which means we are presently unable to fully action image-deletion requests (we can remove associated order records, but the underlying image file may remain in Base44's storage). We are actively working to change this. If you have any concerns about an image you've uploaded, please contact us at hello@creaturestickers.com.

11. How we protect it

We take reasonable steps to protect your personal information, including encryption of data in transit and at rest, access controls, and use of reputable providers with recognised security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, or incomplete. Contact us using the details in clause 14. We will respond within a reasonable time and may need to verify your identity first. There is generally no charge, though we may recover reasonable costs for some access requests as permitted by law.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us (clause 14) and we will investigate and respond. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992.

14. Contact us

Privacy enquiries Courtney Liddle trading as Creature Stickers (ABN 78 429 277 042) Email: hello@creaturestickers.com

15. Changes to this policy

We may update this policy from time to time by posting the revised version on the Site and updating the "Last updated" date above. Significant changes will be notified where required. Please review this page periodically.