Privacy policy.

We may collect contact and account details, order and Corporate Program information, delivery addresses, support correspondence, consent records, and information you choose to provide in a corporate program. Pregnancy-related details are optional and treated as sensitive personal information.

• Account information such as name, email address, sign-in method, and profile details.
• Order, payment status, delivery, refund, and tracking information. We do not store full payment card numbers.
• Corporate invitation, membership, consent, and approved shared-field information.
• Technical information such as browser, device, approximate location, and pages visited when analytics are enabled.

We use information to create and secure accounts, fulfil orders and Corporate Program arrangements, calculate delivery, provide support, send transactional notifications, manage corporate invitations, prevent fraud and duplicate actions, improve the site, and meet legal obligations. We do not use pregnancy-related information for advertising or place it in email subject lines.

The Maman Box uses secure storefront, cart, checkout, customer, Corporate Program, and order services. We may use Google authentication when you choose it, Australia Post or another configured carrier for delivery rates and tracking, payment providers for secure payment processing, Resend or another configured email provider for transactional messages, and Redis-compatible durable storage for short-lived security, consent, invitation, and checkout records. Each provider receives only the information needed for its service.

Redis-compatible storage is used for operational records such as rate limits, invitation tokens, consent choices, audit events, and temporary checkout details. Invitation and security records have expiry periods. We retain other information only for as long as needed for the purpose collected, customer support, accounting, dispute handling, security, or legal requirements, then delete or de-identify it where reasonably possible.

We may use essential cookies and analytics tools to keep the site working, understand aggregate usage, and improve the customer experience. You can control non-essential cookies through your browser or any consent controls shown on the site.

You may ask us to access, correct, delete, or explain the use of your personal information, withdraw a consent where the processing depends on it, or close your account. Some records may need to be retained to complete an order, meet legal obligations, or protect against fraud. Contact us through the Contact Us page and we may need to verify your identity before responding.

We use server-side secrets, authenticated access, company-scoped authorisation, time-limited single-use invitations, rate limiting, and least-privilege service access. No online service can guarantee absolute security. If we become aware of a privacy incident that requires notification, we will follow applicable Australian requirements.