What we collect, why we collect it, and what we will never do with it.
Effective: 28 October 2026
Version: 1.4
BoneAppetit is run by BoneAppetit Pets Pty Ltd. We take your privacy seriously and we keep this policy short enough to actually read.
We handle personal information in line with the Privacy Act 1988 and the Australian Privacy Principles.
What we collect
When you buy on BoneAppetit we collect your name, email address, delivery address and phone number.
We collect your order details and payment confirmation. We do not store your full card number. Your card details go straight to our payment provider.
If you sign in with Google or Facebook, we receive basic account details from them, such as your name and email address.
If you claim a partner offer, we may ask you for proof that you are eligible.
If you contact support, we keep that conversation so we can help you and pick up where we left off.
We also collect basic information about how the site is used, such as which pages are visited and which products are viewed.
If you leave a product review, we collect what you write and the name you choose to display.
How we use it
We use your information to take your order, get it delivered, and keep you updated on it.
We use it to answer your questions and handle returns.
We use it to keep the marketplace safe, including detecting fraud.
We use it to improve the site.
We send you marketing email only if you have asked us to.
Cookies and similar technology
Our storefront uses cookies. Some are essential. They keep you signed in and keep your basket working.
Others help us understand which pages people find useful, and power our email marketing through Klaviyo where you have opted in.
You can block cookies in your browser settings. Some parts of the site will not work properly if you do.
Who we share it with
We share your delivery details with the seller of your product, so they can pack it and send it to you. We share what the courier needs to deliver it.
We share what is needed with the providers who run parts of our business. Our storefront runs on BigCommerce. Payments are handled by Stripe. Our marketplace and order routing run on Marketplacer. Our email is sent through Klaviyo.
We give the brands we work with reporting on how their products are selling. That reporting is grouped and de-identified. It never contains your name or your contact details.
If you claim an offer we run with a partner organisation, we tell that partner how many people claimed it and how much was spent, grouped so it never identifies you.
We disclose information where the law requires it.
Browsing without giving us your details
You can browse the marketplace without telling us who you are.
We need your details once you place an order, because the product has to reach you. If you would rather not create an account, you can check out as a guest.
What we will not do
We will not sell your personal information.
We will not hand your details to brands for their own marketing.
We will not sign you up to marketing with a pre-ticked box.
Overseas storage
Some of our providers store information outside Australia.
Our storefront, payment and email providers store information in the United States. Our marketplace provider stores information in Australia.
Before we disclose your information overseas, we take reasonable steps to make sure the provider handles it in a way that is consistent with the Australian Privacy Principles.
Keeping it safe
Security matters to us. We encrypt information in transit, limit who can access it internally, and choose providers who meet recognised security standards.
No system is completely secure and we cannot promise perfect security.
If a data breach happens that is likely to cause you serious harm, we will tell you and we will notify the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
How long we keep it
We keep your information only for as long as we need it for the purposes described in this policy, or for as long as the law requires us to keep it.
When we no longer need it, we delete it or remove the details that identify you.
Marketing and unsubscribing
Marketing email is opt in. The box is never ticked for you.
Every marketing email has an unsubscribe link. We action unsubscribe requests within five business days.
You will still get emails about orders you have placed. Those are not marketing.
Your rights: access and correction
You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it.
Email support@boneappetit.com.au and we will respond within 30 days. There is no charge in the ordinary case.
Complaints
If you think we have mishandled your personal information, email support@boneappetit.com.au and tell us what happened. We will acknowledge it within two business days, look into it, and come back to you.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Contact us
BoneAppetit Pets Pty Ltd, ABN 72 674 664 576
Level 23, 68 Pitt Street, Sydney NSW 2000
Email: support@boneappetit.com.au
Changes to this policy
We may update this policy. The current version is always the one published on this page.