At Studio Emaree, your privacy matters. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, store, and disclose your personal information when you visit our website or use our services. By accessing our site or placing an order, you agree to this Privacy Policy. Please review this document alongside our Terms of Service, Shipping Policy, and Returns Policy.

1) What Information We Collect

We only collect personal information that is reasonably necessary to operate our store and deliver our services.

This includes:

• Contact details: name, email, phone, billing and shipping addresses
• Order and communication history
• Preferences and feedback
• Payment-related data (processed securely via third parties)
• Device data: IP address, browser type, operating system, referring URLs
• Usage behaviour from tools like Google Analytics and Meta Pixel

We do not collect sensitive information unless legally required or you voluntarily provide it.

2) How We Use Your Information

Your information is used to:

• Process orders and provide customer support
• Confirm purchases and manage shipping
• Send service-related notifications and updates
• Personalise your shopping experience
• Operate our website securely and efficiently
• Comply with legal obligations

With your consent, we may also send marketing updates, promotions, or newsletters. You may unsubscribe at any time.

3) Legal Grounds for Processing

We rely on the following legal grounds:

• Consent – when you opt into marketing or accept cookies
• Contract – to fulfil transactions and support your purchases
• Legal obligations – for financial, tax, or consumer rights compliance
• Legitimate interests – including fraud prevention, site analytics, and service improvement

4) Use of Cookies and Tracking Tools

We use cookies and tracking technologies to:

• Enable essential website functionality (e.g. checkout)
• Analyse user behaviour for optimisation (e.g. Google Analytics)
• Deliver personalised advertising (e.g. Meta Pixel, Klaviyo cookies)

When you first visit, a cookie banner will give you control over your preferences. You can also adjust cookie settings in your browser.

5) Disclosure of Information

We only share your information when necessary to run our services.

This includes trusted providers such as:

• Payment gateways (e.g. Shopify Payments)
• Web platforms (Shopify, Smootify)
• Logistics and shipping services
• CRM, marketing, and analytics tools

These partners are subject to data processing agreements or equivalent obligations requiring them to comply with privacy and security standards equal to our own.

We do not sell or rent your data. We may disclose personal information when required by law, such as to regulatory authorities or under a court order.

6) Data Security

We implement technical and organisational measures to protect your data, including:

• SSL encryption across our site
• Secure payment processing via compliant gateways
• Controlled access to personal data
• Regular software and platform security updates

While no system is entirely immune, we take privacy and security seriously and assess our measures regularly.

7) International Transfers

Some of our providers (e.g. analytics, hosting, and email systems) are located outside Australia. Your personal data may be stored or processed overseas, including in the United States or European Union.

Where this occurs, we ensure appropriate safeguards such as:

• Data transfer agreements
• Use of services with strong privacy credentials
• Secure data infrastructure and limited access controls

8) Data Retention

We retain your personal information only as long as required to:

• Complete your transactions
• Comply with accounting or legal obligations
• Resolve disputes or defend legal claims

When data is no longer needed, we securely delete or anonymise it.

9) Data Breaches and Notification

If a data breach occurs that is likely to result in serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme. This includes:

• Promptly assessing the breach
• Notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as required
• Taking steps to minimise harm and prevent recurrence

10) Your Rights

Under Australian privacy law, you have the right to:

• Request access to personal information we hold about you
• Correct inaccuracies or outdated details
• Withdraw consent for marketing or analytics
• Request deletion where appropriate and lawful
• Make a complaint to the OAIC if you believe we have mishandled your data

To make a request or complaint, contact us at privacy@studioemaree.com. We may request identity verification for your protection.

11) Use of Pseudonyms or Anonymous Access

Where lawful and practical, you may interact with us anonymously or using a pseudonym. However, for order fulfilment, support, or legal compliance, we may need to verify your identity.

12) Children's Privacy

Our services are intended for users aged 16 and over. We do not knowingly collect information from children under 16 without parental consent. If we become aware of such data, it will be deleted.

13) Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or business operations. The current version will always be available on our website. Significant changes will be communicated where appropriate.

14) Contact and Business Information

For any questions, requests, or concerns about this Privacy Policy or your personal data, please contact privacy@studioemaree.com. Our ABN is 45 542 605 284 and our mailing address is provided at checkout or available upon request. For more contact options, visit our contact page. If you're not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.