Last updated 14/01/2026
We are Krakr Creative (‘Company‘, ‘we‘, ‘us‘, or ‘our‘), a company registered in Brisbane, Queensland 4103 Australia.
We operate the website http://www.krakrart.com (the ‘Site‘), as well as any other related products and services that refer or link to this entity.
Krakr creates premade and customised art in the forms of printed media, jewellery, decor (clay/resin/recycled) and fabric products.
You can contact us by email at info@krakrart.com or contacting our legal representatives Qld Law Group at 07 3155 2043.
Your Acknowledgment of This Policy
You are not legally required to provide us with any personal data. This means that if you provide us with data, you are doing so out of your own volition and consent; we cannot force you to provide any personal data, but without your personal data we cannot provide you with the services. If you do not agree with our policies, please do not use our services.
You have the right to withdraw from this consent at any time, and in such a case request that we either cease processing your personal data, or that we delete whatever personal data is no longer required to retain under law. Such removal of data may also prevent you from receiving updates and support.
Which Personal Data Do We Collect About You?
We collect personal data on different types of users.
Contacts
We collect the individual’s signup data, which includes their name, address, email, phone number and/or social media account. These details must be given voluntarily to facilitate contact with us, or to receive a purchased item.
Payment details
We may collect and retain contact details, purchase history and order history, payment processors, transactions made, methods of payment. This information is only retained for the initial 3 months after purchase, unless the individual chooses to be a regular customer. An individual’s email address and order history will be kept for legal and accounting purposes.
Affiliates
We may collect data relating to our affiliates, which include both the payment data, payout data and contact details.
What Types of Data Do We Collect?
Personally Identifiable Data. The type of data we collect is individually identifiable data. To put it simply, this data identifies an individual or is of a private and/or sensitive nature, such as your contact information, including: (i) Personal Data that is provided by you voluntarily, such as your username, email address, profile picture, social accounts and other data you filled when contacting or engaging our services; and (ii) Personal Data we learn from your use of the services; including your payment type, address for receiving purchases, and similar information.
How Do We Collect Personal Data?
Personal data is collected from your use of the services and by your contact with us. We collect data through the forms and submissions made through the services. This is stored by us only to ensure we send the right purchase to the correct purchaser, and is deleted 3 months after interacting with us if not required by our legal or accounting teams. Please get in contact if you wish for more clarification on these matters.
What Are the Purposes of the Collection and Processing of Data?
The purposes of collecting and processing the data are to provide you with the services, which means we use your data to provide you with the services and provide you with support.
Moreover, we may use the personal data to improve the services. This means, for example, we monitor geographical locations of customers in order to determine if additional international delivery procedures are necessary for us to engage with. Nothing but a customer’s country of purchase will be kept for this purpose (name, contact and other details will be deleted after 3 months as stated previously).
When we say “our services” we mean our website, our shop and our affiliated services.
How Can We Contact You?
If you contacted us or purchased an item from us, we will contact you using the details given to us (whether email, social media or mobile).
If you wish to cease communications with us, just let us know. We will remove all details that we have for you (as long as there is no legal concerns).
Your Personal Data Rights
Right of Access and Rectification
You have the right to know what personal data we collect about you and to ensure that such data is accurate and relevant for the purposes for which we collected it. You can receive a copy of your personal data, and to rectify such personal data if it is not accurate, complete, or updated. However, we may first ask you to provide us with certain credentials to permit us to identify you before rectifying, deleting, or reviewing.
Right To Delete Personal Data or Restrict Processing
Right To Withdraw Consent
You have the right to withdraw your consent to the processing of your personal data. Exercising this right will not affect the lawfulness of processing your personal data based on your consent before its withdrawal. Please note that in most cases, withdrawal of your consent would most likely cause us to delete your personal data rather than cease processing.
You have the right to delete your personal data or restrict its processing. We may postpone or deny your request if your personal data is in current use for the purposes for which it was collected or for other legitimate purposes such as compliance with legal obligations.
The Right to Lodge a Complaint
You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
Your International Rights
We do not give your data to any marketing entities. If you have any concerns or any suspected mistreatment of data subjective to your local laws, please contact us at info@krakrart.com or through our website and social media. We are happy to discuss any issues with you, and will refer to our legal representation to ensure compliance with international laws.
Exercising Your Rights
We acknowledge you have the right to access and change the Personal Data we collect and process. If you wish to access or to correct, amend, or delete Personal Data, please send us an email to info@krakrart.com. We will respond within a reasonable timeframe, but in any event, no later than permitted by applicable law.
Additionally, please note that in order to ensure you have as much control over your Personal Data and other information as possible, you may modify certain parts of your information by yourself in the service.
Sharing Personal Data With Third Parties
We respect your privacy and will not disclose, share, rent, or sell your Personal Data to any third party that is not involved in the purchase of products.
We may share your information if we believe that it is necessary to comply with any court order, law, legal obligation, or legal process, including to respond to any government or regulatory request. This is unlikely and we will contact you in this regard if it becomes relevant.
In order to operate the service, we need to share your data with our hosting companies, payment providers, and postal/delivery workers. Your data will never be shared for marketing, analytics or advertising purposes.
Our subprocessors are:
- Stripe, PayPal, NAB for payment services;
- Hostinger, SureCart and WordPress for monitoring the services and providing commerce, crash reports and error logging;
- Hostinger for email contact;
- Postal or Delivery services for dispatch and acquisition of your purchase.
Location of Your Data
The personal data collected from you, as detailed in this Privacy Policy, may be transferred to, and stored at, servers that may be located in countries outside of your jurisdiction.
It may also be processed by us and our suppliers, service providers or partners’ staff operating outside your country.
We are committed to protecting your Personal Data and will take appropriate steps to ensure that your Personal Data is processed and stored securely and in accordance with applicable privacy laws, as detailed in this Privacy Policy. Such steps include putting in place data transfer agreements or ensuring our third-party service providers comply with our data transfer protection measures.
We will ensure the confidentiality, integrity and availability of your Personal Data by Transferring your personal data only to (i) countries approved by the European Commission as having adequate data protection laws; and (ii) entities that executed standard contracts that have been approved by the European Commission and which provide an adequate level of high-quality protection, with the recipients of your Personal Data.
By submitting your personal data through the service, you acknowledge, and agree, in a jurisdiction where such consent is required, to such transfer, storing and/or processing of personal data.
Minors / Children
The service is intended for users over the age of sixteen, or children who obtained parental consent.
Therefore, we do not intend and do not knowingly collect Personal Data from children under the age of sixteen (16) and do not wish to do so. We recommend for young viewers to have a trusted adult make a purchase on your behalf.
We reserve the right to request proof of age at any stage to ensure the verification of individual’s age and legitimacy.
If we learn that we collected Personal Data from minors, we will delete that data as quickly as possible.
If you have reasons to suspect that we collected Personal Data from minors under the age of sixteen (16), please notify us at info@krakrart.com, and we will delete that personal data as quickly as possible.
Security
We take appropriate measures to maintain the security and integrity of our service and prevent unauthorized access to it or use thereof through generally accepted industry standard technologies and internal procedures.
Please note, however, that there are inherent risks in transmission of information over the Internet or other methods of electronic storage, and we cannot guarantee that unauthorized access or use will never occur.
We will comply with applicable law in the event of any breach of the security, confidentiality, or integrity of your Personal Data and will inform you of such breach if required by applicable law.
To the extent that we implement the required security measures under applicable law, we shall not be responsible or liable for unauthorized access, hacking, or other security intrusions or failure to store or the theft, deletion, corruption, destruction, damage, or loss of any data or information included in the personal data.
Data Retention
We will retain the Personal Data for as long as we believe that it is necessary to, which for most users will be for 3 months after purchase. This is for the purposes of accounting, and in case of damages to a purchase. Personal Data that is no longer required for the purpose for which it was initially collected will be deleted unless we have a valid justification to retain it that is permitted under applicable law, such as to resolve disputes or comply with our legal obligations.
Data Breach Notification
We comply with local authorities in data breach notifications. In any case where a severe data breach occurred, we will also notify data subjects after such breach, and cooperate with the legal authorities to reduce the exposure of personal data.
EU-US Data Privacy Framework
We comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), and the UK Extension to the EU-U.S. DPF (the UK Extension) as set forth by the U.S. Department of Commerce. The Federal Trade Commission has jurisdiction over our compliance with the EU-U.S. DPF, the Swiss-U.S. DPF, and the UK Extension.
We have certified to the U.S. Department of Commerce that we adhere to: (1) the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF; 2) the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF; and (3) the UK Extension with regard to the processing of personal data received from the UK in reliance on the UK Extension. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Swiss-U.S. DPF Principles or the UK Extension, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/
In cases of onward transfer of personal information to third parties of data of EU, Swiss and UK individuals received pursuant to the EU-U.S. DPF, the Swiss-U.S DPF and the UK Extension, and in a manner inconsistent with the DPF Principals, SureCart Inc. will remain liable.
Complaints and Arbitration
If you feel or believe that your personal data rights were harmed in any way, you may contact our legal team at Qld Law Group and/or Krakr Creative directly and lodge a complaint. Such complaints shall include how and why you believe your personal data rights were harmed, and the required evidence. We will respond to most complaints within 14 days and shall offer the required remedies.
We will resolve all complaints according to applicable regulations. We also agree to resolve all complaints and deal with disputes with the local data protection authorities.
In the Event of Company Closure
We may, in the future, close our business or merge with another. If this occurs, all held data will be deleted.
Updates to the Privacy Policy
We reserve the right to amend this Privacy Policy at any time; we will provide you with updates on any change, and such updates shall not have a retroactive effect.