PRIVACY POLICY Thinking... Last updated: 11 September 2026 This policy explains what personal information EdUP Solutions Pty Ltd (ACN 679 333 594), trading as "Thinking..." ("we", "us", "our"), collects through https://www.thinkingcap.shop, and what we do with it. 1. WHO WE ARE EdUP Solutions Pty Ltd (ACN 679 333 594) Contact: nick@edup.com.au 2. WHAT WE COLLECT Browsing the site: - Standard server/request logs (IP address, browser type, pages viewed) generated automatically as part of hosting the site. Placing an order: - Checkout itself happens on Shopify's hosted checkout / Shop Pay, not on this site. We do not receive or store your card details at any point. - Shopify collects, on our behalf, the information needed to fulfil an order: name, email, shipping and billing address, phone number (if given), and order contents. Some of this is shared back with us so we can fulfil and support your order. 3. COOKIES This site and Shopify's checkout use cookies necessary to operate the cart and checkout flow (e.g. keeping track of what's in your cart). We do not currently run advertising or cross-site tracking cookies of our own. Shopify's own use of cookies is described in Shopify's privacy policy: https://www.shopify.com/legal/privacy. 4. HOW WE USE YOUR INFORMATION We use the information above to: - process, fulfil, and ship your order; - communicate with you about your order (confirmations, shipping updates, and responses if you contact us); - meet our legal and tax obligations; and - improve the site (aggregated, non-identifying analysis only). We do not sell your personal information, and we do not use it for marketing unless you separately opt in to hear from us. 5. WHO WE SHARE IT WITH - Shopify Inc. / Shopify Payments — operates our checkout and payment processing. See https://yhygpm-rq.myshopify.com and Shopify's own privacy policy. - Delivery carriers — to deliver your order, we share your name and delivery address with the courier or postal service used for your shipment. - Third-party service providers such as Shopify may store or process data on servers located outside Australia. By placing an order you acknowledge this cross-border disclosure. - We otherwise only disclose personal information where required by law. 6. DATA SECURITY We take reasonable steps to protect personal information we hold from misuse, interference, loss, and unauthorised access. Payment data is handled entirely by Shopify's PCI-compliant checkout and never touches our own systems. 7. ACCESS AND CORRECTION You can ask us for access to, or correction of, the personal information we hold about you by emailing nick@edup.com.au. We will respond within a reasonable time. 8. RETENTION We keep order and correspondence records for as long as needed to fulfil the order, meet tax/accounting record-keeping obligations, and handle any related dispute, then delete or de-identify them. 9. CHILDREN This site is not directed at children and we do not knowingly collect personal information from anyone under 18. 10. COMPLAINTS If you have a concern about how we've handled your personal information, email nick@edup.com.au and we'll try to resolve it. If you're not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au. 11. CHANGES TO THIS POLICY We may update this policy from time to time; the "last updated" date above will change when we do. Continued use of the site after an update means you accept the revised policy. Questions about this policy: nick@edup.com.au