This Privacy Policy describes how Shopolyst (the “Site”, “we”, “us” or “our”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

01Who we are and how to contact us

Shopolyst is an online retailer based in Victoria, Australia, selling jewellery, fragrance, home decor and related products worldwide.

If you have questions about this policy, want more information about our privacy practices, or would like to make a complaint, contact us by e-mail at contact@shopolyst.com or through our contact page. You can also write to us at 118 Station Street, Pakenham, Victoria 3810, Australia.

02Collecting Personal Information

When you visit the Site we collect certain information about your device, your interaction with the Site, and the information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy we refer to any information about an identifiable individual as “Personal Information”.

Device and usage information

• Why we collect it: to load the Site correctly for you, to keep it secure, and to understand how the Site is used so we can improve it.
• How we collect it: automatically when you access the Site, through cookies, server log files and similar technologies.
• Who it is shared with: our hosting provider, Hostinger International Ltd, which operates the servers this Site runs on.
• What is collected: browser type and version, IP address, time zone, cookie information, which pages and products you view, search terms you enter, and how you interact with the Site.

Order information

• Why we collect it: to supply the products you order, to take payment, to arrange shipping, to send you invoices and order confirmations, to communicate with you about your order, to screen orders for fraud, and — where you have asked us to — to send you information about our products.
• How we collect it: from you, when you place an order or create an account.
• Who it is shared with: our payment provider, PayPal, which processes your payment; the carriers and fulfilment partners who deliver your order; and our hosting provider, Hostinger, which stores the order record.
• What is collected: your name, billing address, shipping address, e-mail address, phone number, and the contents and value of your order.

We do not receive or store your full card details. Payment is completed by PayPal on their own systems. We receive only a confirmation that payment succeeded, along with the transaction reference.

Account information

• Why we collect it: so you can sign in, see your order history and reuse your saved addresses.
• How we collect it: from you, if you choose to create an account. You can order as a guest instead.
• What is collected: your name, e-mail address, a password stored only in encrypted form, and the addresses you save.

Customer support information

• Why we collect it: to answer your question and resolve your issue.
• How we collect it: from you, when you use our contact form or e-mail us.
• What is collected: your name, e-mail address, any order number you give us, and the content of your message. Messages sent through our contact form are stored on the Site so that we can answer them.

Marketing information

• Why we collect it: to send you e-mails about new products and offers, if you have asked us to.
• How we collect it: from you, when you subscribe or tick the marketing box at checkout.
• What is collected: your e-mail address and whether you have consented.
• You can unsubscribe at any time using the link in any marketing e-mail, or by contacting us.

Minors

The Site is not intended for individuals under the age of 16. We do not knowingly collect Personal Information from children. If you are a parent or guardian and believe your child has given us Personal Information, contact us at the address above and we will delete it.

03Sharing Personal Information

We share your Personal Information only with the service providers we need to run the Site and fulfil our contract with you, and where the law requires it. Those providers are:

• Hostinger International Ltd — hosting and infrastructure. The Site, its database and its order records are stored on Hostinger’s servers. Hostinger’s privacy policy.
• PayPal — payment processing. When you pay, your payment details are handled by PayPal under their own privacy terms. PayPal’s privacy statement.
• Shipping carriers and fulfilment partners — we pass your name, delivery address and contact details to the carrier handling your parcel so it can be delivered and tracked.
• E-mail delivery providers — used to send order confirmations, shipping notices and, where you have consented, marketing e-mails.

We may also disclose your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request, or to establish or defend our legal rights.

We do not sell your Personal Information.

04Where your information is stored

The Site and its database are hosted on servers operated by Hostinger. Your Personal Information may therefore be stored and processed outside Australia, including in the European Economic Area, the United Kingdom, the United States and Singapore, depending on the data centre serving the Site. Our payment provider and e-mail providers may also process information outside your country of residence. We take reasonable steps to ensure any overseas recipient handles your information consistently with this policy.

05Advertising and analytics

We do not currently run third-party advertising pixels or analytics trackers on this Site. If that changes, we will update this section and, where required, ask for your consent first.

If you would like to limit interest-based advertising generally, you can do so through the following controls:

• Meta (Facebook and Instagram) — https://www.facebook.com/settings/?tab=ads
• Google — https://adssettings.google.com/
• Microsoft Bing — https://account.microsoft.com/privacy/ad-settings
• Digital Advertising Alliance opt-out portal — https://optout.aboutads.info/

06Using Personal Information

We use your Personal Information to provide our services to you: offering products for sale, taking payment, shipping and fulfilling your order, answering your questions, and — where you have consented — telling you about new products and offers.

Lawful basis

If you are a resident of the European Economic Area or the United Kingdom, we process your Personal Information under the following lawful bases:

• the performance of the contract between you and the Site, when we process and deliver your order;
• your consent, when we send you marketing e-mails or set non-essential cookies;
• compliance with our legal obligations, such as keeping tax and transaction records;
• our legitimate interests in operating, securing and improving the Site, where those interests do not override your fundamental rights and freedoms.

Retention

We keep order records for as long as we are required to for tax and accounting purposes — in Australia, five years from the date of the transaction. Account information is kept until you ask us to delete your account. Contact-form messages are kept while we deal with your enquiry and for a reasonable period afterwards. Marketing consent records are kept until you unsubscribe. You can ask us to erase information we are not legally required to keep — see “Your rights” below.

Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal effects or otherwise significantly affect you. Our payment provider, PayPal, applies its own automated fraud and risk screening to transactions; you can read about that in their privacy statement.

07Your rights

Wherever you live, you can ask us to give you a copy of the Personal Information we hold about you, to correct it if it is wrong, to delete it, or to stop using it for marketing. To do any of that, contact us using the details under “Who we are and how to contact us” above. We will respond within a reasonable period, and normally within 30 days.

Australia

We handle Personal Information in line with the Australian Privacy Principles. If you are not satisfied with how we have handled your information or your complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Europe and the United Kingdom

If you are a resident of the EEA or the UK, you have the right to access the Personal Information we hold about you, to have it corrected or erased, to restrict or object to our processing of it, and to receive it in a portable form. You also have the right to withdraw consent at any time where we rely on consent. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

California

If you are a resident of California, you have the right to know what Personal Information we hold about you, to request that it be deleted or corrected, and to receive it in a portable form. We do not sell or share your Personal Information for cross-context behavioural advertising. You may designate an authorised agent to make a request on your behalf by contacting us at the address above. We will not discriminate against you for exercising any of these rights.

08Cookies

A cookie is a small amount of information stored on your computer or device when you visit our Site. Cookies let the Site remember your actions and preferences — such as what is in your cart, or that you are signed in — so you do not have to enter the same information on every page.

The cookies this Site uses are listed below. All of them are necessary for the shop to work; we do not currently set advertising or analytics cookies.

Cookies necessary for the shop to function

Name	Function	Duration
woocommerce_cart_hash	Tells the Site when your cart contents change.	session
woocommerce_items_in_cart	Tells the Site when your cart contents change.	session
wp_woocommerce_session_*	Holds a unique code for you so the Site can find your cart in the database.	2 days
woocommerce_recently_viewed	Powers the “recently viewed products” list.	session
wordpress_test_cookie	Checks whether your browser accepts cookies.	session
PHPSESSID	Keeps your session state while you browse.	session
_lscache_vary	Used by our caching layer to serve the correct version of a page to signed-in and signed-out visitors.	session

Cookies set when you sign in to an account

Name	Function	Duration
wordpress_logged_in_*	Identifies you to the Site once you have signed in.	session, or 14 days if you choose “remember me”
wordpress_sec_*	Secures your signed-in session.	session, or 14 days if you choose “remember me”
wp-settings-*	Remembers display preferences for your account.	1 year

When you pay, PayPal sets its own cookies on its own domain. Those are governed by PayPal’s privacy statement, not this one.

Most browsers accept cookies automatically, but you can choose whether to accept them through your browser’s settings, usually under “Privacy” or “Preferences”. Guidance for each browser can be found at allaboutcookies.org. Blocking the cookies listed above will stop the cart and sign-in from working.

Do Not Track

There is no consistent industry standard for responding to “Do Not Track” browser signals, so we do not alter our data collection practices when we receive one. As noted above, we do not currently run tracking or advertising technologies on this Site.

09Security

The Site is served over an encrypted connection (HTTPS). Passwords are stored only in hashed form and cannot be read by us. Access to order and customer records is limited to the people who need it to run the shop. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information and to notify you and the relevant authority if a data breach is likely to cause you serious harm.

10Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. The date this policy was last updated is shown alongside it.

11Complaints

If you would like to make a complaint, contact us by e-mail or post using the details under “Who we are and how to contact us” above. If you are not satisfied with our response, you can lodge a complaint with the data protection authority for your country — in Australia, the Office of the Australian Information Commissioner at oaic.gov.au.