Privacy Policy

1.1 Information you provide directly: name, email address, and password when you register; profile photo and bio; location (suburb and postcode); preferred payment method and connected payment details; age verification confirmation; family information including number of children, their ages and genders, expected due dates, and parenting role (provided optionally to personalise your experience); preferred children's brands; how you heard about LilTots; listing information including photos, descriptions, prices, and item details; messages sent through the in-app messaging system; reviews and ratings; dispute information; baby shower wishlist information; Find It For Me requests; and search alert preferences.

1.2 Information collected automatically: device information (device type, operating system, unique device identifiers); IP address and approximate location; browsing and search behaviour within the Platform; categories and listings you view, save, or purchase; order history; time and frequency of Platform use; most browsed categories and price ranges; whether you engage with Lucky Dip Bags or sustainability features; and push notification interaction data.

1.3 Information from third parties: payment information processed by Stripe or PayPal (we do not store full card or bank details); if you register using Google or Apple sign-in, we receive your name and email from those services; and AusPost tracking information for shipped orders.

We use your personal information to: create and manage your account; enable you to list, buy, and sell items; process payments and manage the escrow system; send order status notifications, receipts, and transaction-related communications; personalise your home feed and search results; send alerts when new listings match your saved searches; communicate with you about your account, orders, disputes, and support requests; send marketing communications (you may opt out at any time); detect and prevent fraud, scams, and prohibited conduct; improve and develop the Platform; comply with our legal obligations; and enforce our Terms and Conditions.

2.1 Use of family and demographic data for marketing: With your consent, we may use aggregated and anonymised data derived from your family profile for internal marketing purposes, including personalising promotional communications to you; creating targeted advertising audiences on platforms such as Meta (Facebook and Instagram) and Google using anonymised data or matched email lists; and building lookalike audiences to find new users similar to our existing community. We do not sell your personal data to third parties.

We do not sell your personal information.

3.1 Other users: your public profile information (display name, suburb, profile photo, bio, star rating, and listings) is visible to other users; your suburb (not full address) is shown on listings; your baby shower wishlist may be shared publicly via a link you choose to share.

3.2 Service providers: Stripe and PayPal for payment processing; AusPost for shipping and tracking; cloud hosting and infrastructure providers; email delivery providers; and analytics providers (using anonymised or aggregated data).

3.3 Advertising platforms: Meta (Facebook/Instagram) and Google for the purpose of targeted advertising and lookalike audience creation, using anonymised or hashed data only.

3.4 Legal and regulatory: law enforcement, government agencies, or courts where required by law; or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of LilTots, our users, or the public.

The LilTots website uses cookies and similar tracking technologies to: maintain your login session; analyse website traffic and usage patterns; and improve the functionality of the Platform.

You can control cookie settings through your browser. Disabling cookies may affect some functionality of the Platform.

5.1 Your personal information is stored on secure servers. We implement industry-standard security measures to protect your information from unauthorised access, disclosure, alteration, or destruction.

5.2 Your data is stored in Australia. Where we use third-party service providers who may process data overseas, we take reasonable steps to ensure those providers comply with the Australian Privacy Principles.

5.3 No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

5.4 In the event of a data breach that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

6.1 We retain your personal information for as long as your account is active or as necessary to provide our services.

6.2 If you delete your account, we will permanently delete your personal data within 30 days, except where: retention is required for the resolution of pending disputes or transactions; retention is required by law (financial records may be retained for 7 years); or retention is necessary to prevent fraud or enforce a ban on a prohibited user.

Under the Australian Privacy Principles, you have the right to: access the personal information we hold about you; request correction of inaccurate, incomplete, or out-of-date information; request deletion of your personal information (subject to our retention obligations); opt out of marketing communications at any time via the unsubscribe link in emails or through Notification Preferences in the app; and make a complaint about our handling of your personal information.

To exercise any of these rights, contact us at privacy@liltotsapp.com.

8.1 LilTots is intended for use by adults aged 18 and over only. We do not knowingly collect personal information from children under the age of 18.

8.2 While users may provide information about their children (such as ages and genders) to personalise their experience, we do not collect personal information directly from children.

8.3 If you believe a child under 18 has created an account or provided personal information through our Platform without parental consent, please contact us at privacy@liltotsapp.com and we will promptly delete that information.

The Platform may contain links to third-party websites or services (including AusPost and payment providers). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use.

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification and email. Your continued use of the Platform after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

11.1 If you have a complaint about how we have handled your personal information, please contact us first at privacy@liltotsapp.com. We will respond within 30 days.

11.2 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): Website: www.oaic.gov.au · Phone: 1300 363 992 · Post: GPO Box 5218, Sydney NSW 2001.

The LilTots mobile app may request access to the following device permissions to enable key features. You can manage or revoke these permissions at any time through your device settings.

12.1 Camera — used to photograph items for listings and scan QR codes for pickup confirmation.

12.2 Location — used to show nearby listings and calculate shipping costs.

12.3 Photo Library — used to upload photos of items for sale.

12.4 Notifications — used to send alerts about messages, sales, and order updates.

LilTots Pty Ltd — Privacy Officer

Email: privacy@liltotsapp.com

Website: https://liltotsapp.com