Privacy policy

Privacy Policy

Effective Date: 26 August 2026
Website: https://ellabyronbay.com
Contact: info@ellabyronbay.com

Ella Byron Bay respects your privacy and handles your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This privacy policy explains how we collect, use, disclose and protect your personal information when you visit our website, place an order or get in touch with us.

By using our website you accept the terms set out below.

1. Information We Collect

We collect the personal information we need in order to run our business and provide our services.

Information you provide yourself:

  • Full name
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment details (processed securely through third party providers)
  • Correspondence with customer care

Information collected automatically:

  • IP address
  • Device type
  • Browser type
  • Data about how you use the website
  • Cookie identifiers

Information from third parties. We may receive information from:

  • Payment providers (for example Shopify Payments, PayPal)
  • Delivery and logistics partners
  • Fraud prevention services
  • Analytics and advertising platforms

2. Why We Process Your Information

We collect and use your personal information because it is reasonably necessary for our business, on the following grounds:

  • To perform our contract with you, to handle and deliver your order
  • To meet legal obligations, including tax and accounting requirements
  • For our legitimate business interests, to prevent fraud and improve our services
  • With your consent, for marketing

You can withdraw your consent to marketing at any time. Every marketing email we send contains an unsubscribe link, as required by the Spam Act 2003 (Cth).

3. How We Use Your Information

  • To handle and fulfil orders
  • To deliver products
  • To communicate with you about your purchase
  • To provide customer support
  • To prevent fraud and unauthorised transactions
  • To improve website performance
  • To send newsletters and offers (only with consent)

We do not sell, rent or trade your personal information.

4. Retention

We keep personal information only for as long as it is needed:

  • To fulfil orders
  • To comply with legal requirements (tax and accounting law)
  • To handle disputes
  • To prevent fraud

When the information is no longer needed it is securely deleted or de-identified.

5. Sharing of Information

We share your information only where it is necessary, with trusted providers such as:

  • Payment processors
  • Shipping carriers
  • Fraud prevention services
  • IT and hosting providers
  • Marketing and analytics platforms

All third parties are required to protect your information and process it lawfully.

6. Overseas Disclosure

Some of the providers listed above process information outside Australia, including our fulfilment and returns partners, our hosting providers and our analytics and advertising platforms. Where we disclose personal information overseas we take reasonable steps, as required by Australian Privacy Principle 8, to make sure the recipient handles it consistently with the Australian Privacy Principles. Those steps include:

  • Written data processing agreements
  • Standard contractual clauses
  • Assessment of the recipient's own security and privacy commitments

7. Security

We use appropriate technical and organisational security measures, including:

  • SSL encryption
  • Secure hosting infrastructure
  • PCI compliant payment systems
  • Restricted access to customer information

No system can guarantee complete security, but we take reasonable steps to protect your information from misuse, interference, loss and unauthorised access.

8. Cookies

We use cookies to:

  • Make the website work
  • Remember your preferences
  • Analyse traffic
  • Make marketing more relevant

You can manage or disable cookies in your browser. Some features may stop working without necessary cookies.

9. Your Rights

Under the Australian Privacy Principles you have the right to:

  • Ask for access to the personal information we hold about you (APP 12)
  • Ask us to correct information that is inaccurate, out of date or incomplete (APP 13)
  • Ask us to delete information we no longer need
  • Withdraw your consent to marketing
  • Deal with us anonymously or under a pseudonym where that is lawful and practicable
  • Make a complaint about how we have handled your personal information

To exercise any of these rights, contact us at info@ellabyronbay.com. We will respond within a reasonable period, normally within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at https://www.oaic.gov.au

10. Children's Privacy

Our website is not directed at anyone under the age of 13. We do not knowingly collect personal information from children. If such information comes to light it is deleted without delay.

11. Pinterest API and Pinterest Data

Ella Byron Bay uses the Pinterest API. We use it solely to manage our own Pinterest business account: to publish and manage pins and product content, to create and monitor advertising, and to read statistics about that account's own ads and content.

No affiliation with Pinterest: Ella Byron Bay is an independent company. Our website and the app integration we use with the Pinterest API are not endorsed by, recommended by, sponsored by or affiliated with Pinterest, Inc. in any way. Pinterest is a trademark of Pinterest, Inc.

Our website does not ask you to connect your own Pinterest account to us, and we do not retrieve personal data about Pinterest users through the Pinterest API. The data we access relates only to our own account: business account details, our own pins and boards, our own ad campaigns, and aggregated statistics such as impressions, clicks and conversions.

Storage and deletion of Pinterest data: we do not store any information obtained through the Pinterest API other than campaign analytics relating to our own account. If the connected Pinterest account is disconnected from our app integration, or access is revoked in Pinterest's settings, all data retrieval stops immediately and any stored Pinterest-derived data is permanently deleted from our systems within 30 days. The same applies if you contact us at info@ellabyronbay.com and ask us to delete it. The only exception is data we are required by law to retain, such as accounting and tax records; that data is kept only for as long as the law requires and is not used for any other purpose.

No resale or redistribution: we do not sell, rent, license, republish or otherwise share Pinterest content or Pinterest-derived data with any third party, and we do not use it to target advertising off Pinterest. Processors acting on our behalf — for example hosting providers or a marketing agency managing the account for us — may process the data only on our instructions and never for their own purposes. This does not constitute selling or redistribution.

Pinterest's own handling of personal data is described in Pinterest's privacy policy: https://policy.pinterest.com/en/privacy-policy

12. Changes to This Policy

We may update this privacy policy. Updates are published on this page with a new effective date.

13. Contact

Ella Byron Bay, Privacy Officer
Email: info@ellabyronbay.com
Website: https://ellabyronbay.com