Skip to content

Privacy Policy

Inicio Albums Pty Ltd trading as Your Story by
ACN 131 690 330
Last updated: 24 September 2026

  1. About this policy

Inicio Albums Pty Ltd trading as Your Story by (referred to as Your Story by, we, us or our) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains the kinds of personal information we collect, how we collect and use it, when we may disclose it, how we protect it, and how you can contact us about your information.

Although Your Story by may qualify for the small business exemption under the Australian Privacy Act 1988 (Cth), we aim to follow recognised privacy principles and good privacy practices. Where another privacy law applies to a particular customer or transaction, we will handle personal information in accordance with that law.

  1. Personal information we may collect

Depending on how you interact with us, we may collect:

  • your name, email address, telephone number and postal or delivery address;
  • billing information and records of purchases and payments;
  • information about the products or services you order;
  • messages, enquiries, feedback and other correspondence;
  • your newsletter preferences and records of consent;
  • photographs, names, wording and other material you choose to provide for customised album covers, printed pages or other bespoke work;
  • information required to arrange delivery, returns or customer support; and
  • technical information relating to your use of our website, such as your IP address, browser type, device information, pages visited, referring website and cookie or analytics data.

We ask that you do not send complete payment-card details by email, contact form or online chat.

  1. Payment information

Online payments are processed by third-party payment providers. We do not retain your complete credit or debit card details. Payment providers may collect and process your payment information under their own privacy policies and security arrangements.

If payment information is inadvertently sent directly to us, we will use it only as necessary to resolve the matter and will securely delete it when it is no longer required.

  1. How we collect personal information

We may collect personal information:

  • directly from you when you make a purchase, submit a form, contact us, join our mailing list or request a customised service;
  • during email, telephone, video-call or other communications with you;
  • through our website, online store, cookies and analytics tools;
  • from payment, delivery or service providers where necessary to complete a transaction or resolve an issue; and
  • from another person acting with your authority.

Where practical, you may browse our website without identifying yourself. However, we need certain information to process an order, deliver a product, respond to an enquiry or provide a customised service.

  1. Why we collect and use personal information

We may collect, hold and use personal information to:

  • process payments, orders, deliveries, returns and refunds;
  • provide albums, books, customised designs, printed pages and related services;
  • communicate with you about an order, enquiry or requested service;
  • provide customer support and resolve complaints;
  • maintain business, taxation, accounting and transaction records;
  • improve our website, products, services and customer experience;
  • prevent fraud, misuse or security incidents;
  • comply with legal obligations and protect our lawful interests; and
  • send newsletters, blog updates, album ideas, helpful resources or product news where you have consented to receive them.

Where European data-protection law applies, our legal basis for processing will generally be that the processing is necessary to perform a contract with you, comply with a legal obligation, pursue a legitimate business interest that is not overridden by your rights, or act with your consent.

  1. When we disclose personal information

We do not sell or rent customer information or mailing lists.

We may disclose relevant personal information to service providers that help us operate the business or provide your order, including:

  • website hosting, ecommerce and technical-support providers;
  • payment processors and financial-service providers;
  • email and mailing-list providers;
  • cloud storage, email and business-software providers;
  • printers, designers or production providers involved in customised work;
  • Australia Post, couriers and other delivery providers;
  • analytics, security and fraud-prevention providers; and
  • professional advisers where reasonably necessary.

We provide these parties only with information reasonably required for their role. Their handling of information may also be governed by their own privacy policies.

We may also disclose information where you have authorised us to do so, where disclosure is required or permitted by law, where reasonably necessary to investigate suspected fraud or unlawful activity, or as part of a sale or restructuring of the business subject to appropriate confidentiality arrangements.

  1. Overseas storage and processing

Some of our service providers may store or process information outside Australia, including in the United States, the United Kingdom, countries in the European Economic Area, or other locations in which their systems or subcontractors operate.

The countries involved may change when service providers change their infrastructure. Where privacy law requires it, we will take reasonable steps to ensure that an overseas recipient handles personal information in accordance with applicable privacy requirements.

  1. Photographs, family information and children’s privacy

You may choose to provide family photographs, names or personal wording when requesting customised work. We use that material only to communicate with you, prepare the requested design or product, provide related services, and maintain appropriate business records.

Please provide photographs or personal information about another person only if you have their permission or are otherwise authorised to do so. A parent or guardian should provide or approve material relating to a child.

We will not publish a customer’s photographs, customised cover or printed pages in a gallery, testimonial, social-media post or other promotional material without separate permission. You may withdraw permission for future use by contacting us, although material already printed or lawfully published may not always be capable of complete removal from cached, archived or third-party copies.

Our products are designed to be used by families, but purchases, accounts and direct submissions to us are intended to be made by adults. If we become aware that a child has submitted personal information without appropriate adult involvement, we will take reasonable steps to delete it.

  1. Marketing communications

We send marketing emails only where we have your consent or are otherwise permitted by law. Each marketing email will identify the sender and provide a way to unsubscribe.

You may withdraw your consent at any time by using the unsubscribe facility in an email or by contacting us. We may retain a limited suppression record so that we can respect your request not to receive further marketing.

Messages needed to complete an order, provide a service, issue a receipt or respond to an enquiry are service communications rather than marketing communications.

  1. Cookies and website analytics

Our website may use cookies and similar technologies to operate the online store, remember preferences, maintain security, understand website use and improve performance. Third-party services used for payments, embedded content or analytics may also place cookies or collect technical information.

You can adjust your browser settings to reject or delete cookies, although parts of the website or checkout may not function correctly as a result. Where applicable law requires consent for non-essential cookies, we will request that consent before using them.

  1. Storage, security and retention

We take reasonable administrative, technical and physical steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. However, no internet transmission or storage system is completely secure.

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, to provide ongoing customer service, to assist with future work you request, and to meet legal, taxation, accounting, dispute-resolution and record-keeping requirements.

Photographs and design material supplied for bespoke work may be retained to enable revisions, reprints or future additions unless you ask us to delete them. Subject to legal record-keeping obligations and any continuing need to complete an order or resolve a dispute, you may ask us to delete that material.

When personal information is no longer reasonably required, we will take reasonable steps to delete it or de-identify it.

  1. Access, correction and deletion requests

You may contact us to:

  • ask what personal information we hold about you;
  • request access to that information;
  • ask us to correct information that is inaccurate, incomplete or out of date;
  • withdraw a consent you have previously given; or
  • request deletion or restriction of information where applicable.

We may need to verify your identity before acting on a request. In some circumstances we may be unable to provide access or delete particular information, including where retention is required by law, needed to complete a transaction or resolve a dispute, or necessary to protect another person’s rights. If so, we will explain the reason where reasonably possible and legally permitted.

  1. Additional rights for people in the EEA and United Kingdom

If the European Union General Data Protection Regulation, the United Kingdom GDPR or related data-protection law applies to our handling of your information, you may have additional rights, including rights to:

  • access and correct your personal data;
  • request erasure or restriction of processing;
  • object to processing based on legitimate interests or for direct marketing;
  • withdraw consent at any time without affecting earlier lawful processing;
  • receive certain personal data in a structured, commonly used and machine-readable format; and
  • lodge a complaint with the data-protection authority in the country where you live or work.

We do not use personal information to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Where required, we will use appropriate safeguards for transfers of personal data outside the EEA or United Kingdom. These rights are subject to applicable exceptions and legal requirements.

  1. Data breaches

If we become aware of a suspected data breach, we will investigate it and take reasonable steps to contain and address it. Where notification is required by applicable law, we will notify affected individuals and the relevant regulator.

  1. Privacy questions and complaints

If you have a privacy question, request or complaint, please contact us using the details below. Please describe the issue and provide enough information for us to investigate it. We will acknowledge and respond within a reasonable period.

If an Australian privacy law applies and you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner. If European or United Kingdom data-protection law applies, you may also contact the relevant supervisory authority.

  1. Third-party websites

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices, content or security. You should review the privacy policy of any third-party service you use.

  1. Changes to this policy

We may update this Privacy Policy when our practices, service providers or legal obligations change. The current version will be published on our website with its most recent revision date.

  1. Contact us

Inicio Albums Pty Ltd trading as Your Story by
ACN: 131 690 330
Email: joanne@yourstoryby.com.au
Website: https://yourstoryby.com.au