Rivercity House & Home Co
Operated by Hedger Enterprises Pty Ltd
Last updated: 5 August 2026
Rivercity House & Home Co, operated by Hedger Enterprises Pty Ltd, respects your privacy and is committed to protecting the personal information of our customers, website visitors and other individuals who interact with us.
In this Privacy Policy, “Rivercity”, “we”, “us” and “our” refer to Rivercity House & Home Co and Hedger Enterprises Pty Ltd.
This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you:
visit or use our website at www.rivercityhouseandhome.com.au;
create an account;
place or attempt to place an order;
subscribe to email or SMS marketing;
communicate with our customer service team;
interact with our advertisements, social media pages or promotions;
submit a review, complaint, warranty request, return request or other enquiry; or
otherwise interact with us.
We manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable Australian laws.
“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true or recorded in a material form.
The personal information we collect depends on how you interact with us.
We may collect:
your name;
email address;
telephone or mobile number;
billing address;
delivery address;
business name and business contact details;
account username or customer account details; and
the name and contact details of an authorised representative or delivery recipient.
We may collect:
products viewed, placed in your cart or purchased;
order numbers and order history;
product preferences;
billing and delivery information;
delivery instructions;
payment method type;
payment, refund and transaction status;
discount or promotional codes used;
returns, exchanges, credits and refunds;
warranty claims;
courier tracking and delivery information;
communications relating to an order;
chargeback, payment dispute and fraud-prevention information; and
records required for accounting, taxation, audit or legal purposes.
We generally do not directly receive or store complete payment card numbers. Payments are processed by Shopify and the payment provider you select. We may receive limited payment information, such as the payment method, transaction identifier, payment status and the last digits of a card.
When you contact us, we may collect:
copies of emails, SMS messages, online chats and social media messages;
details of your enquiry, complaint or feedback;
photographs or videos you provide;
delivery or product issues;
warranty and return information;
records of resolutions, refunds, replacements or store credits; and
information needed to verify your identity or investigate an issue.
We may collect:
your email and SMS subscription status;
when, where and how you subscribed;
the wording or form through which consent was provided;
your communication preferences;
whether you opened, clicked or interacted with a marketing message;
products, categories or promotions that may interest you;
whether you unsubscribed or replied STOP;
campaign and attribution information; and
records maintained to ensure we respect your marketing choices.
When you use our website, we and our service providers may automatically collect:
IP address;
browser type and version;
device type;
operating system;
device and advertising identifiers;
approximate location derived from your IP address;
pages and products viewed;
searches performed;
referring website or advertisement;
date and time of visits;
links and buttons selected;
cart, checkout and purchase activity;
session information;
cookie and similar technology identifiers; and
website performance, diagnostic and security information.
Some of this information may be personal information where it identifies you or can reasonably be linked with you.
We may collect or receive information relating to:
advertisements you viewed or interacted with;
marketing campaigns that referred you to us;
conversion events;
audience membership;
website and advertising attribution;
campaign performance;
interaction with our Facebook, Instagram or Google advertising;
information associated with cookies, pixels, tags and similar technologies; and
hashed or otherwise protected identifiers used for advertising measurement or audience matching, where enabled.
If you interact with us through Facebook, Instagram, Google, a review website or another public platform, we may collect:
your social media username or profile name;
public comments, reviews or posts;
private messages sent to us;
photographs or other content you submit;
competition or promotion entries; and
information the platform makes available to us under your settings and its terms.
Information you publish in a public review or social media post may be visible to other people.
You may provide information about another person, such as a delivery recipient, family member, authorised representative or gift recipient.
You must only provide another person’s personal information where you are authorised to do so and have informed them that their information may be handled in accordance with this Privacy Policy.
We do not ordinarily seek to collect sensitive information, such as health information, racial or ethnic origin, religious beliefs, political opinions or biometric information.
We may incidentally receive sensitive information if you voluntarily provide it, for example information about accessibility or health requirements relevant to a delivery or customer service matter. We will only collect and use such information where reasonably necessary and with your consent or as otherwise permitted by law.
Please do not provide sensitive information unless it is necessary for us to assist you.
We may collect personal information:
This includes when you:
browse our website;
create or update an account;
place an order;
begin or abandon a checkout;
enter your details into a form, popup or checkout field;
subscribe to email or SMS marketing;
contact customer service;
request a return, replacement, refund or warranty remedy;
participate in a survey, promotion or competition;
submit a review;
communicate through social media; or
otherwise provide information to us.
Information entered during checkout may be stored before the checkout is completed. This allows us to preserve your cart, provide customer service, prevent fraud and, where we have the appropriate consent or are otherwise permitted by law, send checkout reminder communications.
We may collect information automatically through:
cookies;
pixels;
web beacons;
local storage;
server logs;
analytics tools;
advertising tags;
application programming interfaces;
Shopify integrations; and
similar technologies.
We may receive personal information from:
Shopify;
payment and buy now, pay later providers;
suppliers, warehouses and fulfilment partners;
courier and freight companies;
customer service providers;
fraud prevention and payment security providers;
Meta, including Facebook and Instagram;
Google;
Omnisend;
review and social media platforms;
advertising and analytics providers;
professional advisers;
publicly available sources; and
other third-party applications connected to our store.
For example, a courier may provide delivery tracking information, a payment provider may confirm whether a payment was successful, and an advertising platform may tell us that an advertisement resulted in a visit or purchase.
If we receive personal information that we did not request, we will determine whether we could have lawfully collected it. Where we are not required or permitted to retain it, we will take reasonable steps to destroy or de-identify it.
We may use personal information to:
This includes:
processing and confirming orders;
arranging payment;
providing order updates;
supplying products;
arranging dispatch and delivery;
providing tracking information;
managing delivery instructions;
processing returns, exchanges, refunds and replacements;
administering warranties;
issuing invoices, receipts, vouchers and store credits; and
communicating about an order.
This includes:
responding to enquiries;
verifying your identity;
investigating delivery or product issues;
resolving complaints;
maintaining records of customer communications;
providing product information;
assisting with account access;
preventing duplicate or conflicting requests; and
improving customer service processes.
This includes:
confirming payment status;
managing refunds and credits;
detecting suspected fraud;
verifying transactions;
responding to payment disputes or chargebacks;
protecting customers and our business;
enforcing our terms;
recovering unpaid amounts; and
complying with payment provider requirements.
This includes:
maintaining our Shopify store;
remembering carts and preferences;
analysing website traffic;
understanding how customers use our website;
testing website features;
improving products, pricing and customer experiences;
forecasting demand;
measuring business and advertising performance;
generating aggregated or de-identified reports;
maintaining records;
conducting audits; and
managing our suppliers, contractors and service providers.
We may use your information to send:
order confirmations;
payment confirmations;
delivery and tracking updates;
customer service responses;
security or account notifications;
recall or safety notices;
changes to orders, policies or services; and
other transactional or service-related communications.
These communications are not necessarily marketing communications and may continue even where you have unsubscribed from marketing.
Where permitted by law, we may use personal information to send or personalise:
welcome emails;
newsletters;
promotional emails;
SMS promotions;
abandoned cart or checkout reminders;
browse-abandonment reminders;
product recommendations;
back-in-stock notices;
price-drop notifications;
review requests;
post-purchase communications;
sale announcements;
voucher and discount offers; and
other communications about products and promotions.
We may use purchase history, website activity, communication engagement and product preferences to decide which communications are likely to be most relevant to you.
We may use information to:
display advertisements on Facebook, Instagram, Google and other services;
retarget people who have visited our website or interacted with our products;
create advertising audiences;
create audiences with similar characteristics;
exclude existing purchasers from particular advertising campaigns;
measure whether advertisements resulted in visits, checkouts or purchases;
attribute sales to particular campaigns;
improve advertising performance; and
prevent advertising fraud or invalid activity.
We may use or disclose information to:
comply with laws, regulations and court or tribunal orders;
respond to lawful requests from government, regulators or law enforcement;
obtain legal, accounting, insurance or other professional advice;
establish, exercise or defend legal claims;
protect our legal rights, property, customers, personnel and systems;
investigate suspected unlawful conduct;
manage a proposed or completed sale, restructure, merger or transfer of our business or assets; and
perform other activities authorised or required by law.
You may browse some areas of our website without identifying yourself.
However, if you do not provide information that is reasonably necessary, we may not be able to:
process or deliver an order;
contact you about a delivery;
process a payment, refund or warranty request;
create or maintain your account;
investigate a complaint;
provide customer service;
send a requested notification; or
provide certain website features.
You are not required to subscribe to marketing to make a purchase.
We use marketing and customer communication platforms, including Omnisend and Shopify marketing tools, to manage email and SMS communications and automated customer journeys.
Depending on your interactions and marketing choices, these systems may process:
your name, email address and phone number;
subscription and consent records;
cart and checkout activity;
website browsing activity;
order history;
campaign engagement;
product interests;
customer segments;
discount or voucher information; and
unsubscribe or suppression records.
Automated journeys may include welcome messages, abandoned cart reminders, abandoned checkout reminders, product recommendations, post-purchase messages, review requests, back-in-stock notices and sale communications.
We will only send commercial electronic messages where we have consent or are otherwise permitted to do so under applicable law.
Marketing emails will identify Rivercity House & Home Co as the sender and include an unsubscribe facility.
You may unsubscribe using the link included in a marketing email or by contacting us.
Where you opt in to SMS marketing:
message frequency may vary;
consent is not a condition of purchase;
standard message or data charges imposed by your telecommunications provider may apply;
you can reply STOP to unsubscribe; and
you may reply HELP or contact our customer service team for assistance.
You may receive a final message confirming that your unsubscribe request has been processed.
We will process unsubscribe and opt-out requests within the period required by law.
We may retain limited information on a suppression list so we can ensure that we do not send further marketing communications to an address or telephone number that has opted out.
Unsubscribing from marketing does not prevent us from sending necessary order, account, delivery, safety, legal or customer service communications.
Cookies are small data files stored on your browser or device. We use cookies and similar technologies to operate our store, remember preferences, understand website use, improve performance, prevent fraud and measure or personalise advertising.
These technologies support functions such as:
website security;
customer sessions;
account login;
shopping carts;
checkout;
payment processing;
fraud prevention;
load balancing; and
remembering privacy choices.
Disabling these technologies may prevent parts of the website from functioning.
These technologies may remember:
your region;
account preferences;
recently viewed products;
saved cart information;
customer service settings; and
other choices that improve your experience.
We may use Shopify analytics, Google Analytics and other analytics services to understand:
visitor numbers;
traffic sources;
website navigation;
product and page performance;
checkout behaviour;
conversion rates;
website errors; and
aggregated customer trends.
We may use advertising technologies provided by Meta, Google and other advertising partners to:
measure advertisements;
understand campaign performance;
attribute sales;
retarget website visitors;
create advertising audiences; and
personalise advertisements.
These technologies may include browser cookies, pixels, tags, APIs and server-side integrations.
Omnisend and Shopify marketing tools may use cookies or tracking technologies to connect website activity with a customer or subscriber profile, where permitted. This may allow us to trigger relevant communications and measure whether a communication resulted in a website visit or purchase.
You may manage cookies using:
the cookie banner or privacy controls available on our website;
your browser or device settings;
advertising controls provided by Meta, Google and other platforms; and
available industry opt-out tools.
Blocking cookies may affect the operation and availability of some website features.
Because the technologies used by Shopify and third-party applications may change, the cookies and technologies active on our website may also change. Our cookie banner or consent management tool may provide more current details about particular technologies where available.
There is currently no consistent industry standard for responding to browser “Do Not Track” signals. We do not necessarily alter our practices when a browser sends a Do Not Track signal.
Where our website provides a cookie preference or data-sharing control, you should use that control to record your preference.
We use Meta advertising services in connection with Facebook and Instagram.
Depending on our configuration, Meta Business Tools may include the Meta Pixel, Conversions API, advertising audiences and conversion measurement tools.
These tools may collect or receive:
IP address;
browser and device information;
cookie or advertising identifiers;
pages and products viewed;
searches;
add-to-cart activity;
checkout activity;
purchase events;
order value and currency;
campaign and referral information; and
protected or hashed contact identifiers, where enabled.
Meta may use this information to provide advertising, measurement, reporting, security and audience services in accordance with its terms and privacy policy.
We do not intentionally provide Meta with sensitive information for advertising purposes.
You may manage advertising preferences through your Facebook or Instagram account settings and through the privacy controls available on our website.
We use Google Analytics and Google advertising services to understand website use, measure advertising performance and display relevant advertisements.
Google technologies may collect or receive:
IP address;
browser and device information;
cookie and advertising identifiers;
approximate location;
page and product activity;
campaign information;
checkout and purchase events; and
other analytics or conversion information.
Where Google Customer Match, user-provided data or enhanced conversion features are enabled, customer information such as an email address, telephone number, name or address may be transformed or hashed before being transmitted to Google for matching, conversion measurement or advertising audience purposes.
Google processes information in accordance with its terms and privacy policies. You may manage personalised advertising through your Google account advertising settings and manage cookies using our website privacy controls or your browser.
Our online store is hosted and powered by Shopify.
Shopify processes personal information when you visit our store, create an account, begin or complete checkout, make a purchase or otherwise interact with Shopify-powered features.
Depending on our Shopify settings and the services enabled, Shopify may process information to:
host and operate our store;
provide checkout and payment functionality;
secure accounts and transactions;
detect fraud;
provide analytics;
improve Shopify services;
provide personalised commerce features; and
provide services based on interactions with Shopify, our store and, in some cases, other Shopify merchants.
Shopify and its service providers may process personal information in countries outside Australia.
Further information about Shopify’s handling of customer information is available in Shopify’s Consumer Privacy Policy.
We use Omnisend to provide email and SMS marketing, customer segmentation, automation, forms, campaign reporting and related services.
Omnisend may process customer contact information, consent status, order information, cart or website activity and communication engagement on our behalf.
Omnisend and its subprocessors may process personal information outside Australia. We use Omnisend subject to its contractual terms and data-processing arrangements.
Payments may be processed by third-party payment providers.
Depending on the payment method selected, these providers may include:
Shopify Payments;
PayPal;
Afterpay;
Zip;
Klarna;
card networks;
banks; and
payment security or fraud-prevention providers.
These providers may collect information directly from you and may make independent decisions about transaction approval, identity verification, credit eligibility, fraud or payment risk.
Their handling of personal information is governed by their own privacy policies and terms.
We may exchange information with payment providers to process payments, issue refunds, investigate fraud, respond to chargebacks, verify transactions and comply with legal or contractual requirements.
We may disclose personal information to:
Shopify and Shopify service providers;
Omnisend;
payment and buy now, pay later providers;
suppliers, manufacturers and distributors;
warehouses and fulfilment partners;
courier, postal and freight companies;
customer service contractors;
website hosting, IT, cloud storage and security providers;
fraud prevention, payment security and chargeback providers;
Meta, Google and advertising or analytics providers;
marketing, email and SMS providers;
review, survey and customer feedback platforms;
accountants, lawyers, insurers, auditors and other professional advisers;
banks and financial institutions;
government departments, regulators, courts and law enforcement agencies;
potential purchasers, investors or advisers involved in a business sale, merger, restructure or transfer; and
other third-party applications or service providers used to operate our ecommerce business.
We provide service providers with the information reasonably necessary to perform their services.
For example, we may provide a supplier, warehouse or courier with your name, delivery address, telephone number, email address, products ordered and delivery instructions so the order can be supplied and delivered.
We do not sell personal information to third parties in exchange for money.
We may install or use third-party applications that connect with Shopify, Omnisend, advertising platforms, payment providers or other business systems.
These applications may support:
product sourcing;
inventory management;
order processing;
delivery and tracking;
customer service;
email and SMS marketing;
reviews;
analytics;
fraud prevention;
accounting;
payments;
refunds;
website functionality; and
advertising.
An application may access personal information where necessary for its function and according to the permissions granted to it.
We review our applications and service providers from time to time, but their services, ownership, subprocessors and data locations may change.
Some of our service providers, contractors and technology platforms are located outside Australia or store, access or process information outside Australia.
Countries in which recipients or service providers are likely to be located may include:
the United States;
Canada;
the Philippines;
Singapore;
the United Kingdom;
Lithuania;
other countries in the European Economic Area; and
other countries in which Shopify, Omnisend, Meta, Google, payment providers or their subprocessors operate.
The countries involved may change when a provider changes its infrastructure, personnel or subprocessors.
Before disclosing personal information to an overseas recipient, we take reasonable steps in the circumstances to ensure that the information will be handled consistently with applicable Australian privacy requirements, unless an exception under the Privacy Act applies.
We may use automated tools to:
segment customers and subscribers;
select marketing communications;
personalise website content or product recommendations;
measure advertising;
identify potentially fraudulent activity;
prioritise customer service tasks;
calculate marketing attribution; and
determine which promotions or advertisements may be relevant.
These processes may use website activity, order history, communication engagement, marketing preferences, location, device information and transaction information.
These processes do not ordinarily make decisions that significantly affect your legal rights or interests without appropriate review.
Where we introduce automated decision-making that could reasonably be expected to significantly affect an individual’s rights or interests, we will update this Privacy Policy and provide any information required by applicable law.
We take reasonable administrative, technical and physical measures to protect personal information from:
misuse;
interference;
loss;
unauthorised access;
unauthorised modification; and
unauthorised disclosure.
These measures may include access restrictions, account security controls, secure technology providers, staff and contractor confidentiality requirements, system monitoring, backups and security procedures appropriate to the information and risks involved.
No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps to protect the personal information we hold.
You are responsible for keeping your account password and login information confidential and for notifying us if you suspect unauthorised access to your account.
We retain personal information for as long as reasonably necessary to:
fulfil the purposes described in this Privacy Policy;
provide products and customer service;
administer warranties, returns and refunds;
maintain tax, accounting and transaction records;
resolve complaints and disputes;
manage chargebacks and fraud;
enforce agreements;
comply with laws and court or tribunal orders; and
establish, exercise or defend legal claims.
Different types of information may be retained for different periods.
We may retain marketing suppression records after you unsubscribe so we can continue to honour your preference.
Where personal information is no longer required for a permitted purpose and we are not legally required to retain it, we will take reasonable steps to destroy it or ensure that it is de-identified.
Some information may remain temporarily in secure backups until those backups are deleted or overwritten through our ordinary processes.
You may request access to personal information that we hold about you by contacting us using the details below.
To protect your privacy, we may ask for reasonable information to verify:
your identity;
the information requested; and
the authority of any person acting on your behalf.
We will respond within a reasonable period, generally within 30 calendar days.
There is no charge for making an access request. In limited circumstances, we may charge a reasonable and non-excessive amount for providing access. We will explain any proposed charge before providing access.
We may refuse access where permitted or required by law. If we refuse a request, we will generally provide written reasons and information about available complaint options, except where it would be unreasonable or unlawful to do so.
You may ask us to correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.
There is no charge for requesting or making a correction.
We will respond within a reasonable period, generally within 30 calendar days.
Where we refuse to make a requested correction, we will generally provide written reasons and explain available complaint options. You may also ask us to associate a statement with the information indicating that you consider it to be incorrect.
You may also update certain account or contact information through your customer account, where that functionality is available.
You may ask us to delete personal information.
Australian privacy law does not provide an unrestricted right to require deletion in every circumstance. We will consider deletion requests and take reasonable steps to delete or de-identify information where it is no longer required and we are not legally or reasonably required to retain it.
We may retain information required for orders, taxation, accounting, warranties, disputes, fraud prevention, chargebacks, legal claims or compliance obligations.
Where we rely on your consent, you may withdraw that consent by contacting us or using the relevant unsubscribe or privacy control.
Withdrawing consent does not affect handling that occurred before the withdrawal and may not prevent handling that is required or otherwise permitted by law.
Where practicable, you may interact with us anonymously or using a pseudonym, such as when browsing our website or making a general enquiry.
We will need your correct identifying and contact information where it is impracticable to provide a service anonymously, including when processing payment, delivering an order, issuing a refund, handling a warranty request or verifying account ownership.
We maintain procedures for responding to suspected or actual data breaches.
If a data breach is likely to result in serious harm and notification is required under the Notifiable Data Breaches scheme or another applicable law, we will notify the Office of the Australian Information Commissioner and affected individuals as required.
Notifications may include information about the breach, the types of information involved and recommended steps individuals can take.
Our products and purchasing services are intended for adults.
We do not knowingly collect personal information directly from individuals under 18 for the purpose of creating customer accounts, processing orders or sending marketing communications without appropriate involvement from a parent or guardian.
If you are a parent or guardian and believe a minor has provided personal information to us without appropriate authorisation, please contact us so we can investigate and take appropriate action.
Our website and communications may contain links to websites, social media platforms, payment providers or services operated by third parties.
We do not control those third parties and are not responsible for their privacy practices. You should review the privacy policy of any third-party website or service before providing personal information.
A link does not necessarily represent our endorsement of that website or its privacy practices.
If you believe we have mishandled your personal information or breached an applicable privacy obligation, please contact us in writing.
Please include:
your name and contact details;
a description of your concern;
relevant dates, order numbers or communications; and
the outcome you are seeking.
We will acknowledge and investigate your complaint and aim to provide a response within 30 calendar days. If additional time is reasonably required, we will contact you and explain the expected timeframe.
We encourage you to contact us first so we have an opportunity to resolve the matter.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.
For privacy questions, access requests, correction requests, deletion requests or complaints, contact:
Privacy Officer
Rivercity House & Home Co
Operated by Hedger Enterprises Pty Ltd
Level 23, 727 Collins Street
Melbourne VIC 3008
Australia
Email: support@rivercityhouseandhome.com.au
Website: www.rivercityhouseandhome.com.au
This address is a mailing and head office address and is not a retail showroom.
We may update this Privacy Policy when:
our business practices change;
we introduce or remove services or applications;
our advertising or analytics technologies change;
our service providers change;
applicable laws or regulatory guidance change; or
an update is otherwise reasonably necessary.
The updated version will be published on our website with a revised “Last updated” date.
Where a change is material, we may also provide notice through our website, customer accounts, email or another appropriate method.
We encourage you to review this Privacy Policy periodically.
