Privacy policy

Last Updated: August 10, 2026
This Privacy Policy complies with the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) administered by the Office of the Australian Information Commissioner (OAIC). It outlines how Elvaya collects, stores, uses and discloses your personal information when you browse, register and purchase goods via our official website, as well as your statutory privacy rights under Australian law.
By accessing our website and completing transactions, you acknowledge that you have read, understood and consented to the terms set out in this policy.

1. Data Controller & Business Details

Elvaya is the data controller responsible for all personal information collected on this site, an Australian online fashion retailer based in Darwin, Northern Territory.
  • Website: www.elvaya.shop
  • Support Email: hello@elvaya.shop
  • Phone: +61 488 616 203
  • Registered Address: 47 Ryrie Street, Geelong VIC 3220, Australia
All requests for data access, amendment, deletion and privacy complaints can be sent to our support email.

2. Personal Information We Collect

We only gather information necessary for daily business operations in accordance with Australian privacy rules:
  1. Information you actively provide: Full name, email address, mobile number, Australian billing & delivery address, postcode, order details, customer service messages, return and refund applications.
  2. Transaction data: Order numbers, purchase records and payment verification content. We do not store complete credit card details; payments are processed by ASIC-licensed Australian payment providers complying with PCI DSS security standards.
  3. Automatic technical data: Device model, browser type, IP address, browsing logs and cookie data, applied for website optimisation, fraud prevention and system security maintenance.

3. Purposes of Using Your Personal Data

Your information will only be utilised for legal business needs permitted by Australian regulations:
  • Process, pack and deliver orders to all states and territories across Australia
  • Reply to your enquiries about products, delivery, after-sales and returns
  • Send order confirmations, tracking updates and official policy notifications
  • Prevent fraudulent orders and safeguard website security
  • Deliver promotional emails only when you have given explicit consent
  • Retain financial records to satisfy Australian GST tax filing and legal document retention obligations

4. Disclosure to Third Parties

We will never sell, rent or trade your personal data for commercial gain. We only share essential limited information with compliant Australian service providers, including authorised payment institutions, Australia Post, local couriers, web hosting and analytics suppliers. All third parties are bound by contracts to abide by Australian privacy legislation.

5. Cookies & Online Tracking

Our website employs cookies to optimise browsing experience. You may adjust or disable cookie permissions via your browser settings anytime. All tracking activities conform to Australian online privacy requirements.

6. Your Statutory Privacy Rights

Under the Privacy Act 1988, you hold the following legal entitlements:
  • Request access to the personal data we store about you
  • Correct inaccurate or incomplete personal information
  • Apply for data deletion if no legal retention obligation exists
  • Unsubscribe from direct marketing communications at any time
  • Lodge a formal privacy breach complaint with the OAIC if you believe your privacy has been violated

7. Data Retention Period

We preserve records following Australian tax and corporate compliance requirements:
  • Order and financial records: 7 years
  • Customer service records: 12 months after case closure
  • Marketing contact information: Deleted immediately upon unsubscription

8. Data Security & Mandatory Breach Notification

We adopt SSL end-to-end encryption, secure server deployment and strict internal access limits to protect your personal information. In the event of a notifiable data breach, we will conduct mandatory notifications to OAIC in line with Australian privacy law.

9. Children’s Privacy

Our products and website are not designed for users under 18 years old. We will not intentionally collect personal information from minors. If you discover we hold unauthorised data of children, please contact us promptly for permanent removal.

10. Policy Revision

We reserve the right to update this policy to match amendments to Australian privacy laws. Revised versions will be published on this page with the latest update date clearly marked.

Contact

Elvaya

Address: 47 Ryrie Street, Geelong VIC 3220, Australia

Phone: +61 488 616 203

Email: hello@elvaya.shop

Business Hours: Mon-Sat 9:00–18:00 AEST, closed on Sundays and Australian public holidays