Privacy policy

Last updated: 11 October 2026

Pop & Lala is operated by PDLD Pty Ltd. This policy explains how we handle personal information through www.poplala.com, our interest lists, customer accounts and communications. For privacy enquiries, contact comms@poplala.com.

Our skincare and haircare range is in development. Product images are concepts, and samples and formulations are pending. Interest registrations are not orders, deposits or reservations. We do not currently offer these products for sale or promise a launch date.

Information we collect and why

• Website visits: Shopify and connected services may collect device and browser information, IP address, cookie identifiers, pages viewed, referral information and interactions. This supports website operation, security, troubleshooting, measurement and the Shopify features described below.
• Founder’s List: we collect your email address, optional skincare/haircare interests, marketing choice and submission records to register and manage your interest. Email is required; product interests and marketing consent are optional. We use Shopify Forms and customer records, with Flow and Messaging available to manage eligible communications. Registration does not guarantee an immediate welcome email. See our Founder’s List collection notice.
• Product availability requests: the STOQ service records your email and the product or variant you ask about, together with request and technical records, to manage that product-interest request. Requesting an availability notification is not automatically permission to join the Founder’s List or receive unrelated marketing.
• Other newsletter forms: where a newsletter signup is offered, we use the email and signup/consent records for the updates described at that form. We keep its purpose distinct from product notifications and Founder’s List membership.
• Enquiries: when you contact us by form or email, we receive the details you provide, which may include your name, email, phone number and message, and use them to respond and maintain relevant correspondence. Please do not send health information, payment details, passwords or other sensitive information in an enquiry or public comment.
• Customer accounts: if you use an account or Shopify sign-in feature, Shopify processes identifiers, authentication and account details needed to provide it. Any information you choose to save, and any existing transaction records, may be retained for account support and applicable legal obligations. This does not mean the current concept range is available for purchase.

We receive information directly from you, automatically through your use of the website, and from the providers that operate these features. If you do not supply information needed for a request, we may be unable to complete that request. You can browse without joining an interest list.

Marketing choices

We send marketing only where we have appropriate permission. The Founder’s List marketing checkbox starts unchecked. You may withdraw marketing consent using an unsubscribe link in a marketing email or by contacting comms@poplala.com. We may retain limited consent and suppression records to respect your choice. Necessary replies to your enquiries and account or security messages are separate from marketing.

Service providers and disclosures

We use Shopify to host the website and manage customer information, forms and messaging. STOQ, provided by Artos Software, supports product-interest requests and its connected analytics pixel. Our email hosting provider, Crazy Domains and its service providers, handles correspondence. These providers receive information needed to perform their services. Authorised people supporting Pop & Lala may access relevant information for their work.

Shopify Network Intelligence is currently enabled. Shopify may combine information about interactions with our store with information from other merchants and Shopify to improve services, personalisation and advertising-related features. Shopify has its own responsibilities for this processing. Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for relevant choices and requests. We have not launched a paid advertising campaign through this Founder’s List setup.

We may also disclose information when you direct us to do so, to obtain professional advice where needed, or where required or permitted by law to meet obligations, resolve a dispute, or protect people and services. Following a social-media link takes you to that provider’s service and privacy practices; information posted publicly there may be visible to others.

Cookies and similar technologies

The website uses cookies and similar technology for essential functions and for measurement or personalisation through connected services. Shopify customer-event settings currently include a STOQ analytics pixel. Cookie and data-sharing choices may depend on your location and the controls made available by Shopify. You can also control or delete cookies in your browser, although some website features may stop working. Contact us about store-level choices, and consult Shopify’s privacy portal for processing it controls. This policy does not treat browsing as consent to marketing email.

Overseas processing

Information is not necessarily kept in Australia. Shopify currently identifies the United States as this store’s customer-data hosting location. Shopify and its providers may also process information in other countries, including Canada and Singapore. STOQ’s provider is based in the United States and uses service providers for hosting and communications. Provider locations can change; see Shopify’s subprocessors information and STOQ’s privacy policy. Contact us if you need more information about a particular disclosure.

Retention and security

We keep information for as long as reasonably needed for the purpose collected, account support, consent and unsubscribe records, resolving disputes and applicable legal requirements. We consider requests to delete information, subject to obligations and records needed to respect your choices. We use access controls and provider security features, but no online system can guarantee absolute security. Please protect your account access and avoid sending unnecessary sensitive information.

Your requests and complaints

You can contact comms@poplala.com to ask about information we hold, request access or correction, withdraw marketing consent, request deletion, or make a privacy complaint. Depending on your location and applicable law, you may have additional rights, including portability, objection, restriction or opting out of certain sharing. We may need proportionate information to verify your identity or authority. We will explain any lawful reason we cannot fully meet a request.

For a complaint, tell us what happened and the outcome you seek. We will investigate and aim to respond within 30 days, or explain if more time is needed. If you remain dissatisfied, you can seek advice or make a complaint to the Office of the Australian Information Commissioner where it has jurisdiction, or the relevant privacy regulator in your location.

Children and changes

Our current interest-list campaign is intended for adults. We do not ask for children’s information. A parent or guardian concerned about information submitted by a child can contact us. We will update this policy when our practices change, including before introducing new sales or data uses that require different disclosures, and show the revised date above.