Privacy policy

Privacy Policy

At EVVRÀ, we care about what you trust us with — including your personal information. This policy explains what we collect, why, and how we keep it safe.

This policy applies to EVVRÀ [PTY LTD / business entity TBC] and the website at evvra.com.au. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

What we collect

When you visit, browse, or buy from us, we may collect:

  • Identity & contact details — your name, email, phone number, and shipping/billing address
  • Order information — what you've bought, when, and how often
  • Payment information — payment is processed by our payment providers (e.g. Shopify Payments, Afterpay). We don't store full card details ourselves.
  • Reviews & communications — anything you share with us in product reviews, contact forms, or emails. Some reviews may reference health, skin, or wellness experiences, which we treat as sensitive information.
  • Technical & usage data — your IP address, browser type, device, pages visited, and how you arrived at our site. This is collected via cookies and similar tools.

How we collect it

Mostly directly from you — through checkout, contact forms, newsletter sign-ups, account creation, and reviews. Some technical data is collected automatically when you use the site.

Why we collect it

We use your information to:

  • Process and ship your orders
  • Communicate with you about orders, returns, and customer service
  • Send marketing emails — only if you've opted in
  • Improve our website, products, and service
  • Detect and prevent fraud
  • Meet our legal and tax obligations

Who we share it with

We share your information only with the providers we need to run our business. These include:

  • Shopify — our e-commerce platform
  • Payment processors — Shopify Payments, [Afterpay / PayPal / Zip — confirm which are used]
  • Shipping carriers — Australia Post and any couriers we use
  • Email marketing platform — [Klaviyo / Shopify Email — TBC]
  • Reviews platform — Judge.me
  • Analytics services — Google Analytics [and Meta Pixel, if installed]

We do not sell your personal information to anyone. Ever.

International transfers

Some of our service providers, including Shopify, store and process data outside Australia (primarily in the United States and Canada). By using our site, you consent to this transfer. We choose providers that meet appropriate data protection standards.

Cookies & tracking

We use cookies for three reasons:

  1. Essential cookies — to make the site work (e.g. your cart, login)
  2. Analytics cookies — to understand how visitors use our site, anonymously
  3. Marketing cookies — to show relevant content and measure campaign performance

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect site functionality.

Marketing communications

We only send marketing emails to people who've subscribed. Every email includes an unsubscribe link, and you can opt out anytime — no hard feelings.

Sensitive information

Reviews and customer feedback may include information about your health, skin, or wellness experience. We treat this as sensitive information and only use it for the purposes you provided it — typically to display your review (if you've consented) or to improve our products. We will never share sensitive information with third parties for marketing.

Data security

We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. Our platforms use industry-standard encryption (SSL/TLS) and secure storage. No system is bulletproof, but we choose vendors with strong security practices.

How long we keep your data

We keep your information for as long as you have an account with us, or as long as needed to provide products and services, comply with legal obligations (tax records are kept for 7 years in Australia), and resolve any disputes.

Your rights

You have the right to:

  • Access the personal information we hold about you
  • Correct anything that's wrong or out of date
  • Withdraw consent for marketing at any time
  • Request deletion of your data, subject to our legal record-keeping obligations
  • Make a complaint if you're concerned about how we've handled your information

To exercise any of these rights, email us at hello@evvra.com.au.

Children's privacy

Our products and site aren't designed for anyone under 16. We don't knowingly collect personal information from children. If you believe we have, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time. The current version will always be at evvra.com.au/policies/privacy. We'll let you know about significant changes via email or a notice on the site.

Complaints

If you're not happy with how we've handled your personal information, please contact us first at hello@evvra.com.au. If we can't resolve it together, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact

For any privacy questions, reach us at:

EVVRÀ Mooloolaba, Queensland hello@evvra.com.au