1. WHAT IS PERSONAL INFORMATION?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

The type of personal information we collect depends on how you interact with us.

2. PERSONAL INFORMATION WE COLLECT

We may collect the following types of personal information:

2.1 IDENTITY AND CONTACT INFORMATION

• your name;
• email address;
• telephone or mobile number;
• billing address;
• delivery address;
• country or region;
• account username or login details; and
• other contact information you provide to us.

2.2 ORDER AND TRANSACTION INFORMATION

• products ordered, returned, exchanged or reviewed;
• order numbers and transaction history;
• amounts paid, refunded or issued as store credit;
• gift card and discount-code usage;
• delivery and tracking information;
• returns and refund information;
• communications relating to an order or return; and
• fraud, chargeback or payment-dispute information.

2.3 PAYMENT INFORMATION

Payments are processed through Shopify and other third-party payment providers made available at checkout.

Depending on the payment method selected, these providers may collect information such as:

• payment card details;
• billing information;
• payment-account details;
• transaction identifiers;
• payment-authorisation results; and
• fraud or risk indicators.

We generally do not receive or store your complete payment-card number. Payment providers process that information in accordance with their own terms and privacy policies.

2.4 CUSTOMER-SERVICE INFORMATION

When you contact us, we may collect:

• the content of your enquiry;
• order numbers supplied with your enquiry;
• email and message correspondence;
• photographs or videos you provide;
• information about product faults or delivery issues;
• carrier enquiry or investigation information;
• records of how an enquiry was handled; and
• other information reasonably required to assist you.

2.5 MARKETING AND PREFERENCE INFORMATION

Where you subscribe to marketing or interact with our campaigns, we may collect:

• your email address or mobile number;
• your marketing subscription and consent status;
• the date, time and method of subscription or confirmation;
• your marketing preferences;
• whether an email or SMS was delivered, opened or clicked;
• products or categories you appear to be interested in;
• abandoned cart or browsing information;
• competition, survey or promotion entries; and
• unsubscribe or opt-out requests.

2.6 WEBSITE AND DEVICE INFORMATION

When you use our website, we and our technology providers may automatically collect:

• your IP address;
• browser type and version;
• device type and operating system;
• device identifiers;
• approximate location based on your IP address;
• pages viewed and links selected;
• products viewed, searched for or added to your cart;
• referring website or advertising campaign;
• session information;
• website interaction and performance data;
• cookie and tracking identifiers; and
• fraud, security and risk signals.

Further information about cookies, pixels and similar technologies is available in our Cookies Policy.

2.7 SOCIAL MEDIA AND USER CONTENT

If you interact with us through social media, tag us, send us content or participate in a social-media promotion, we may collect:

• your social-media username;
• public profile information;
• comments, messages and interactions;
• photographs or videos you send to us;
• content in which you tag or mention Amaroso Boutique; and
• information provided by the relevant social-media platform.

2.8 INFORMATION ABOUT OTHER PEOPLE

You may provide information about another person, such as where you:

• send an order or gift to another person;
• nominate another person to receive a delivery;
• provide another person’s details in a customer-service enquiry; or
• submit content containing another person.

You must only provide another person’s personal information where you are authorised to do so and it is reasonable for us to receive that information.

2.9 SENSITIVE INFORMATION

We do not generally seek to collect sensitive information, such as information about health, ethnicity, religion, political opinions or sexual orientation.

Please do not provide sensitive information unless it is reasonably necessary for us to assist you. Where we collect sensitive information, we will do so with your consent or where otherwise permitted by law.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information directly from you when you:

• visit or browse our website;
• create or update a customer account;
• place or pay for an order;
• lodge or send a return;
• request a refund or store credit;
• use our Contact Form;
• communicate with us by email, SMS or social media;
• subscribe to email or SMS marketing;
• confirm a marketing subscription;
• enter a competition, promotion or survey;
• submit a review;
• send us photographs, videos or other content; or
• otherwise provide information to us.

We may also collect personal information from third parties, including:

• Shopify and Shopify applications;
• payment providers;
• fraud-prevention and payment-risk providers;
• delivery and logistics providers;
• returns and refund providers;
• our email and SMS marketing service providers;
• advertising and analytics providers;
• social-media platforms;
• review platforms;
• customer-service and technology providers;
• banks and financial institutions;
• publicly available sources; and
• other people authorised to deal with us on your behalf.

We may collect information automatically through cookies, pixels, tags, software development kits, server logs and similar technologies.

4. WHY WE COLLECT AND USE PERSONAL INFORMATION

We collect, hold, use and disclose personal information where reasonably necessary to operate Amaroso Boutique and provide products and services to our customers.

We may use your personal information to:

• create and manage your customer account;
• receive, process and fulfil orders;
• process payments, refunds and store credits;
• send order confirmations, receipts and delivery updates;
• arrange delivery and track parcels;
• process returns and inspect returned products;
• respond to questions, complaints and customer-service enquiries;
• assess faulty, incorrect or misdescribed product claims;
• investigate delayed, missing or disputed deliveries;
• verify orders and prevent fraud or unauthorised transactions;
• respond to chargebacks and payment disputes;
• administer promotions, competitions and surveys;
• manage product reviews and customer content;
• provide back-in-stock and other requested notifications;
• personalise your website and shopping experience;
• understand how customers use our website;
• improve our website, products, services and customer experience;
• measure the performance of marketing and advertising;
• display advertising that may be more relevant to you;
• maintain the security and reliability of our systems;
• maintain business, tax, accounting and transaction records;
• enforce our Website Terms and Conditions;
• establish, exercise or defend legal claims;
• comply with legal and regulatory obligations; and
• carry out other purposes disclosed when the information is collected.

Where required by law, we will obtain your consent before collecting or using personal information for a particular purpose.

5. EMAIL AND SMS MARKETING

We send email and SMS marketing only where we have the consent or other lawful authority required to do so.

Our marketing subscription process may require you to complete a confirmation step before your subscription becomes active.

Marketing communications may include:

• new arrivals;
• sales and promotions;
• product recommendations;
• back-in-stock information;
• abandoned cart reminders;
• competitions and offers; and
• other Amaroso Boutique news.

You do not need to subscribe to marketing to place an order.

You can unsubscribe from marketing emails using the unsubscribe link included in the message.

You can unsubscribe from SMS marketing using the opt-out instructions included in the message, such as replying STOP where that option is available.

We will action valid unsubscribe requests as required by law. After unsubscribing, you may still receive necessary service communications relating to an existing order, delivery, return, account or customer-service enquiry.

We may retain limited information about an unsubscribe request so that we can respect your preference and avoid adding you back to a marketing list without appropriate consent.

6. PERSONALISED ADVERTISING AND ANALYTICS

We use analytics, advertising and tracking technologies to understand how our website is used, measure campaign performance and display advertising.

These technologies may be provided by companies such as Shopify, Google, Meta and our marketing providers.

Depending on your settings and applicable law, information collected through these technologies may be used to:

• measure website traffic and customer behaviour;
• understand which advertisements led to visits or purchases;
• create advertising audiences;
• limit how often an advertisement is displayed;
• show advertisements based on browsing or shopping activity;
• measure advertising performance; and
• improve our website and marketing.

Some advertising providers may combine information collected from our website with information they already hold about you, subject to their own privacy policies and your account or device settings.

You may be able to manage non-essential cookies and tracking technologies through our cookie controls, your browser settings, device settings or the settings offered by the relevant platform.

More information is available in our Cookies Policy.

7. WHEN WE DISCLOSE PERSONAL INFORMATION

We do not sell or rent customer contact lists to third parties for their own direct marketing.

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These third parties may include:

• Shopify and ecommerce service providers;
• payment processors and financial institutions;
• fraud-prevention and identity-verification providers;
• delivery, carrier and logistics providers;
• returns, refunds and store-credit providers;
• our email and SMS marketing service providers;
• website hosting, cloud storage and technology providers;
• analytics and advertising providers, including Google and Meta;
• customer-service and communications providers;
• review and survey platforms;
• professional advisers, including lawyers, accountants and auditors;
• insurers and risk advisers;
• government agencies, regulators, courts and law-enforcement bodies;
• banks, card networks and payment providers handling a dispute;
• potential purchasers or advisers in connection with a proposed sale, merger or restructuring of our business; and
• other parties where you have authorised the disclosure or the disclosure is required or permitted by law.

We seek to disclose only the information reasonably required for the relevant provider to perform its role.

Some providers may independently determine how they handle personal information. Their handling of personal information may also be governed by their own privacy policies.

8. OVERSEAS DISCLOSURE AND STORAGE

Some of our service providers operate, process data or store information outside Australia.

As a result, your personal information may be disclosed to or accessible from overseas locations.

The countries involved may vary depending on the service provider, delivery destination and technology used. They are likely to include:

• Australia;
• Canada;
• the United States;
• the United Kingdom;
• countries within the European Economic Area;
• Singapore; and
• countries through which an international order is processed or delivered.

Where the Australian Privacy Principles apply to an overseas disclosure, we will take reasonable steps in the circumstances to ensure the recipient handles the information consistently with those principles, unless an exception applies.

Overseas privacy laws may differ from Australian privacy laws.

9. DATA SECURITY

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Our protective measures may include:

• password and access controls;
• restricted staff access;
• secure third-party ecommerce and payment platforms;
• encryption used by our technology providers;
• system monitoring and security tools;
• staff procedures, access controls and training where appropriate;
• provider due diligence;
• backups and business-continuity measures; and
• secure destruction or de-identification where appropriate.

No method of electronic transmission or storage is completely secure. We cannot guarantee that a data breach or unauthorised access will never occur.

You are responsible for protecting your account password, email account and devices. Please contact us promptly if you believe your Amaroso Boutique account or personal information has been compromised.

9.1 DATA BREACHES

If we become aware of a suspected data breach, we will assess and respond to it in accordance with applicable law.

Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required.

10. HOW LONG WE KEEP PERSONAL INFORMATION

We retain personal information only for as long as it is reasonably required for the purposes for which it was collected, or as required or permitted by law.

Retention periods may depend on:

• the nature of the information;
• whether you continue to hold an account;
• our ongoing relationship with you;
• returns, warranties and consumer-guarantee periods;
• tax, accounting and corporate recordkeeping obligations;
• fraud prevention and security requirements;
• actual or potential disputes or legal claims; and
• other legal and regulatory obligations.

When personal information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless we are required or permitted to retain it.

We may retain de-identified or aggregated information that can no longer reasonably identify you.

11. ACCESSING AND CORRECTING YOUR INFORMATION

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

You can update some account information by logging into your customer account, where that functionality is available.

For other access or correction requests, contact us through our Contact Form.

We may need to verify your identity before providing access or making a correction.

We will respond within a reasonable period. We will not charge you for making a request, although we may charge reasonable costs associated with providing access where permitted by law and disclosed in advance.

In some circumstances, we may be permitted or required to refuse access or correction. If that occurs, we will generally provide written reasons and information about available complaint mechanisms, unless it would be unreasonable or unlawful to do so.

12. ANONYMITY AND PSEUDONYMS

Where practical and lawful, you may interact with us anonymously or using a pseudonym.

We will generally need accurate identifying and contact information to:

• process and deliver an order;
• accept payment;
• manage a return or refund;
• investigate a delivery issue;
• respond to an account-specific enquiry;
• prevent fraud; or
• comply with legal obligations.

13. PRIVACY RIGHTS FOR OVERSEAS CUSTOMERS

Depending on where you live, you may have additional rights under local privacy or data-protection laws.

These rights may include the right to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion in certain circumstances;
• object to or restrict certain processing;
• withdraw consent where processing relies on consent;
• request a portable copy of certain information;
• opt out of direct marketing; and
• complain to a local privacy or data-protection regulator.

These rights are subject to applicable exceptions and may not apply in every circumstance.

To exercise a privacy right, contact us through our Contact Form. We may need to verify your identity and location before actioning the request.

14. CHILDREN’S PRIVACY

Our website and products are not directed specifically at children.

Customers must be legally capable of entering into a purchase contract or use the website with the involvement of a parent or guardian.

We do not knowingly seek to collect personal information directly from children without appropriate consent.

If you believe a child has provided personal information to us without appropriate consent, please contact us so we can assess the situation.

15. THIRD-PARTY WEBSITES AND PLATFORMS

Our website may contain links to third-party websites, applications and platforms.

We do not control the privacy practices of those third parties. Their handling of personal information is governed by their own privacy policies and terms.

We recommend reviewing the relevant privacy policy before providing personal information to a third party.

16. PRIVACY COMPLAINTS

If you believe we have mishandled your personal information or breached an applicable privacy obligation, please contact our Privacy Officer through our Contact Form.

Please include:

• your name and contact details;
• a clear description of your concern;
• any relevant dates, order numbers or communications; and
• the outcome you are seeking.

We will acknowledge and investigate your complaint and respond within a reasonable period.

If you are not satisfied with our response, you may be entitled to complain to the Office of the Australian Information Commissioner or another applicable privacy regulator.

17. CONTACT US

For questions about this Privacy Policy, requests to access or correct personal information, or privacy complaints, please contact:

Privacy Officer

Business: Amaroso Boutique Pty Ltd ATF The Owen Anderson Family Trust

ABN: 57 377 615 957

Contact: Website Contact Form

Email: contact@amaroso.com.au

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers, data-handling practices or legal obligations.

The updated version will be published on this page with a revised “Last updated” date.

Where a change materially affects how we handle personal information, we may take additional reasonable steps to notify affected individuals.