Privacy policy
Last updated: 1 September 2026
VELÉA operates this store and website, including all related information, content, features, tools, products and services, to provide you with a curated shopping experience (the "Services"). VELÉA is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase using the Services, or otherwise communicate with us. If there's a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.
By using the Services, you acknowledge that you've read this Privacy Policy and understand how your information is collected, used and disclosed as described here.
Personal information we collect
When we say "personal information" we mean information that identifies, or can reasonably be linked to, you or another person. It doesn't include information collected anonymously or de-identified so that it can't reasonably be linked back to you. Depending on how you use the Services and where you live, we may collect or process:
- Contact details — name, billing and shipping address, phone number, email address
- Financial information — payment card details, transaction details, form of payment, payment confirmation
- Account information — username, password, preferences and settings
- Transaction information — items you view, add to cart, purchase, return, exchange or cancel, and your past orders
- Communications — anything you send us, for example a customer support enquiry
- Device information — device, browser, network connection, IP address and other identifiers
- Usage information — how and when you interact with and navigate the Services
We may also draw inferences from the information above.
Where we get it
Directly from you (creating an account, placing an order, contacting us); automatically through your use of the site, including cookies and similar technologies; from our service providers, who help operate the Services on our behalf; and from our partners or other third parties.
How we use it
- To provide and improve the Services — process payments, fulfil and ship orders, manage your account, handle returns and exchanges, remember your preferences, and tailor your experience
- Marketing and advertising — send you marketing and promotional communications where you've opted in, and show you relevant advertising on the Services and elsewhere
- Security and fraud prevention — authenticate accounts, secure payments, and detect, investigate or act on fraudulent, unsafe or malicious activity
- Customer support — respond to you and maintain our relationship with you
- Legal compliance — comply with applicable law, respond to valid legal process, and enforce our terms and policies
How we disclose it
We may share your information with Shopify and other vendors who perform services on our behalf (payment processing, data analytics, customer support, fulfilment and shipping); with marketing and advertising partners, who use it in accordance with their own privacy notices; when you direct or consent to it, such as to ship you an order; within our corporate group; in connection with a business transaction such as a merger; and where required to comply with the law, enforce our policies, or protect the Services, our rights, or the rights of our users.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify, and potentially with third parties located outside Australia, in order to provide the Services. We also use certain Shopify enhanced features that make use of information about your interactions with our store, with other merchants, and with Shopify. In those circumstances Shopify is responsible for processing your personal information, including for responding to requests you make about it. To learn more, see the Shopify Consumer Privacy Policy, and depending on where you live you may exercise certain rights through the Shopify Privacy Portal.
Third-party links
The Services may link to websites or platforms we don't control. We're not responsible for the privacy or security practices of those sites — please review their own policies before engaging with them. Information you share on public or semi-public venues, including third-party social platforms, may be viewable by others.
Children's data
The Services aren't intended for children, and we don't knowingly collect personal information from children under the age of majority in their jurisdiction. If you're the parent or guardian of a child who's provided us with their information, contact us to request it be deleted. As at the date of this policy, we don't have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) the personal information of individuals under 16 years of age.
Security and retention
No security measures are perfect, and information you send us may not be secure while in transit. We recommend you don't use unsecured channels to send us sensitive or confidential information. We retain your personal information only as long as needed to provide the Services, meet our legal obligations, resolve disputes, or enforce our agreements and policies.
Your rights and choices
Depending on where you live, you may have some or all of the rights below. These rights aren't absolute, may apply only in certain circumstances, and in some cases we may decline a request as permitted by law.
- Access — request access to the personal information we hold about you
- Correction — request that we correct inaccurate information
- Deletion — request that we delete information we hold about you
- Portability — receive a copy of your information and ask us to transfer it to a third party, in certain circumstances
- Opt out of sale, sharing or targeted advertising — depending on where you live, you may direct us not to "sell" or "share" your personal information or use it for targeted advertising. You can do this on our Your Privacy Choices page.
- Communication preferences — you can unsubscribe from marketing email at any time using the link in any message we send. We may still send non-promotional messages about your account or your orders.
If you visit our website with the Global Privacy Control opt-out preference signal enabled, and you're in a place where it applies, we'll automatically treat that as an opt-out request for the browser and device you're using. We don't respond to other "Do Not Track" signals.
We won't discriminate against you for exercising any of these rights. We may need to verify your identity before acting on a request, as permitted or required by law. You may appoint an authorised agent to make a request on your behalf; before we accept it, we'll need proof you've authorised them, and we may need to verify your identity with you directly.
If you're in the UK or European Economic Area
Subject to the exceptions and limitations in your local law, you may also have the right to object to or ask us to restrict our processing of your personal information for certain purposes, and to withdraw your consent where we rely on it. Withdrawing consent doesn't affect the lawfulness of processing carried out before you withdrew it.
International transfers
We may transfer, store and process your personal information outside the country you live in. Where we transfer personal information out of the UK or the European Economic Area, we rely on a recognised transfer mechanism — such as the European Commission's Standard Contractual Clauses or the UK equivalent — unless the destination has been determined to provide an adequate level of protection.
Complaints
If you have a concern about how we handle your personal information, please contact us first using the details below. If you're in Australia and you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC). If you're elsewhere, you may be able to lodge a complaint with your local data protection authority.
Changes to this policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. We'll post the revised policy on this page and update the "Last updated" date above.
Contact
For any question about this policy or our privacy practices, or to exercise any of the rights above, email us at admin@velea.au. VELÉA is based in Melbourne, Australia, and is the data controller of your personal information. We'll respond within 1–2 business days.