Privacy Policy

Last updated: September 5, 2026

Vaeluxe operates this online store and website, including all related information, content, features, tools, products and services (collectively, the "Services").

Vaeluxe is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services to you.

This Privacy Policy explains how we collect, use, disclose, store and otherwise process your personal information when you visit or use our Services, make a purchase or other transaction, communicate with us, or otherwise interact with Vaeluxe.

For the purposes of applicable privacy and data protection laws, Vaeluxe is generally the controller or business responsible for the personal information described in this Privacy Policy, except where another party is independently responsible for particular processing activities.

Nothing in this Privacy Policy is intended to limit any rights you may have under applicable privacy or data protection laws.

Personal Information We Collect

When we use the term "personal information", we mean information that identifies you, relates to you, describes you or can reasonably be linked to you.

Depending on how you interact with the Services and where you live, we may collect or process the following categories of personal information:

• Contact information, including your name, email address, telephone number, billing address and shipping address.
• Order and transaction information, including products viewed, products added to your cart or wishlist, purchases, returns, refunds, cancellations, order history, transaction amounts and delivery information.
• Payment information, including information necessary to process your payment and transaction. Payment card information may be processed directly by Shopify or other payment providers, and we may not receive or store your complete payment card details.
• Account information, including account credentials, preferences, saved information and account settings.
• Communications, including information you provide when contacting us, submitting a support request, providing feedback or otherwise communicating with us.
• Device and technical information, including your IP address, browser type, device type, operating system, network information and other device identifiers.
• Usage information, including information about how you interact with our website, products, advertisements and Services, pages viewed, links clicked, referring pages and browsing activity.
• Marketing and advertising information, including your marketing preferences, interactions with advertisements and information used to measure, personalize or improve advertising.
• Fraud and security information, including information used to detect or prevent fraudulent transactions, abuse, security incidents or other harmful activity.
• Other information you choose to provide to us.

Certain information may be considered sensitive personal information under some privacy laws. Where we process sensitive personal information, we will only do so as reasonably necessary, with your consent where required, or as otherwise permitted by applicable law.

How We Collect Personal Information

We may collect personal information from:

• You directly, such as when you make a purchase, create an account, contact us, subscribe to marketing or otherwise provide information to us.
• Automatically, when you visit or interact with the Services, including through cookies, pixels and similar technologies.
• Shopify and our service providers, including payment processors, website providers, analytics services, customer support providers, fraud prevention providers and technology providers.
• Fulfilment and shipping partners, where necessary to process, fulfil and deliver your order.
• Advertising and marketing partners, subject to applicable privacy laws and your privacy choices.
• Other third parties, where permitted by law.

How We Use Your Personal Information

We may use your personal information for the following purposes:

Providing and Fulfilling the Services

We use personal information to:

• process and fulfil orders;
• process payments;
• arrange shipping and delivery;
• process returns, refunds and exchanges;
• manage customer accounts;
• provide customer service;
• communicate with you about your orders;
• remember preferences;
• provide requested products and Services; and
• maintain our relationship with you.

Improving and Personalizing the Services

We may use personal information to:

• understand how customers use our Services;
• improve our website and customer experience;
• personalize products, recommendations and content;
• measure the effectiveness of our Services; and
• develop or improve features, products and functionality.

Marketing and Advertising

Subject to applicable law and your privacy choices, we may use personal information to:

• send promotional emails or other marketing communications;
• advertise products or Services that may interest you;
• personalize advertisements;
• measure advertising performance;
• create advertising audiences; and
• understand how customers interact with our advertisements.

Where consent is required for marketing or advertising, we will request consent before carrying out the relevant activity.

You may unsubscribe from promotional emails at any time using the unsubscribe link included in our marketing emails.

Security and Fraud Prevention

We may use personal information to:

• authenticate users;
• secure our website and Services;
• detect suspicious or fraudulent transactions;
• investigate security incidents;
• prevent misuse of the Services; and
• protect Vaeluxe, our customers and others.

Legal and Regulatory Purposes

We may use personal information where necessary to:

• comply with applicable laws;
• maintain tax, accounting and business records;
• respond to lawful government or regulatory requests;
• establish, exercise or defend legal claims;
• enforce our agreements and policies; and
• investigate violations of our terms or suspected unlawful activity.

EU and UK Lawful Bases for Processing

If you are located in the European Economic Area (EEA) or United Kingdom, we rely on one or more lawful bases to process your personal information.

These may include:

Performance of a Contract

We process information when necessary to enter into or perform our contract with you, including processing your order, payment, delivery, returns and customer service requests.

Consent

We rely on consent where required, including for certain marketing communications, advertising technologies and non-essential cookies or tracking technologies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your privacy rights.

Our legitimate interests may include:

• operating and improving our business and Services;
• providing customer support;
• preventing fraud and security threats;
• understanding how customers use our Services;
• maintaining our business relationship with customers; and
• conducting certain marketing activities where permitted by law.

Legal Obligations

We may process personal information where necessary to comply with legal obligations, including tax, accounting, regulatory, consumer protection and law enforcement requirements.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage and similar technologies to operate the Services, remember your preferences, understand how the Services are used, prevent fraud, measure performance and provide or measure advertising.

Cookies may include:

• Strictly necessary cookies, required for the website, shopping cart, checkout, security and other essential functions.
• Functional cookies, which remember preferences and improve functionality.
• Analytics cookies, which help us understand how visitors use the Services.
• Advertising cookies and tracking technologies, which may be used to measure advertising or provide personalized advertising.

Where applicable law requires consent, including in the EEA and United Kingdom, we will not use non-essential cookies or similar technologies until you have provided the required consent.

You can manage or withdraw your cookie preferences through the cookie preferences tool available on our website.

Your ability to disable certain cookies through your browser may vary. Disabling strictly necessary cookies may prevent some parts of the Services from operating correctly.

Targeted Advertising and Data Sharing

We may work with Shopify and advertising, analytics or marketing partners to promote our products and understand advertising performance.

This may involve disclosing identifiers, device information, usage information or commercial information to advertising partners.

Under certain U.S. state privacy laws, some of these activities may be considered "selling," "sharing," or processing personal information for "targeted advertising," even where no money is exchanged for your personal information.

Where applicable, you may opt out of these activities through the Your Privacy Choices or Data Sharing Opt-Out link available on our website.

Where required by applicable law, we also recognize supported browser-based opt-out signals, such as the Global Privacy Control (GPC).

We do not knowingly sell personal information in exchange for money.

How We Disclose Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy, including:

Shopify

Our store is hosted by Shopify.

Shopify collects and processes personal information about your access to and use of the Services in order to provide ecommerce functionality and related services.

Service Providers

We may disclose information to vendors that provide services on our behalf, including:

• payment processing;
• website hosting and ecommerce services;
• IT and cloud services;
• customer service;
• analytics;
• fraud prevention;
• email and marketing services;
• fulfilment;
• warehousing;
• shipping and delivery; and
• professional services.

Fulfilment and Shipping Partners

We may provide your name, shipping address, contact information and relevant order information to suppliers, fulfilment providers, couriers or shipping companies where necessary to manufacture, fulfil, process or deliver your order.

Marketing and Advertising Partners

Subject to applicable law and your privacy choices, we may disclose information to advertising, analytics and marketing partners.

Business Transactions

Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, sale of assets, insolvency or similar corporate transaction.

Legal Requirements

We may disclose personal information when reasonably necessary to:

• comply with applicable law;
• respond to lawful legal process;
• respond to government or regulatory authorities;
• protect our legal rights;
• prevent fraud or unlawful activity; or
• protect the rights or safety of our customers or others.

Relationship With Shopify

The Services are hosted by Shopify.

Information you provide through the Services may be transmitted to Shopify and other service providers in countries other than the country where you live.

Shopify may process personal information on our behalf to provide the ecommerce platform and related Services.

Shopify may also process certain information for its own purposes or in connection with enhanced Shopify services, where Shopify determines how such information is processed.

For more information regarding Shopify's privacy practices and your rights relating to information processed by Shopify, please refer to Shopify's Consumer Privacy Policy and Shopify Privacy Portal.

International Transfers of Personal Information

Vaeluxe is based in Australia and operates internationally.

As a result, your personal information may be transferred, stored or processed outside your country of residence, including in Australia and in countries where Shopify, our payment providers, technology providers, fulfilment providers, shipping companies and other service providers operate.

Depending on the services used to fulfil your order, recipients may be located in North America, Europe, the United Kingdom, the Asia-Pacific region or other countries.

Different countries may have different privacy and data protection laws.

Where required by applicable law, we take appropriate steps designed to ensure that international transfers of personal information are subject to appropriate privacy safeguards.

For transfers of personal information from the EEA, we may rely on an adequacy decision, the European Commission's Standard Contractual Clauses or another legally recognized transfer mechanism.

For transfers governed by UK data protection law, we may rely on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission Standard Contractual Clauses or another legally recognized safeguard.

Where the Australian Privacy Principles apply, we will handle overseas disclosures in accordance with applicable requirements concerning cross-border disclosure.

Where the New Zealand Privacy Act applies, cross-border disclosures will be handled in accordance with applicable requirements concerning protection of information disclosed outside New Zealand.

Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information against loss, misuse, unauthorized access, alteration or disclosure.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

Please do not send passwords, complete payment card details or other highly sensitive information to us through unsecured communication channels.

You are responsible for maintaining the confidentiality of your account credentials.

Data Retention

We retain personal information for only as long as reasonably necessary for the purposes for which it was collected, including to:

• provide the Services;
• maintain your account;
• complete transactions;
• fulfil orders;
• comply with tax, accounting and legal obligations;
• prevent fraud;
• resolve disputes; and
• enforce our agreements.

The retention period may vary depending on the category of information, our relationship with you, legal requirements and whether information is required to establish or defend legal claims.

When personal information is no longer reasonably required, we may delete, anonymize or otherwise securely dispose of it, subject to applicable law.

Your Privacy Rights

Depending on where you live and subject to applicable law, you may have some or all of the following rights:

• Access / Right to Know: Request information about the personal information we hold about you and how it is used or disclosed.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion / Erasure: Request deletion of personal information in certain circumstances.
• Data Portability: Request a portable copy of certain personal information.
• Restriction: Request that certain processing of your personal information be restricted.
• Objection: Object to certain processing, including direct marketing or processing based on legitimate interests where applicable.
• Withdraw Consent: Withdraw consent where our processing is based on consent.
• Opt Out of Targeted Advertising: Opt out of certain processing for targeted or cross-context behavioural advertising where applicable.
• Opt Out of Sale or Sharing: Opt out of activities considered a sale or sharing of personal information under applicable privacy law.
• Limit Certain Sensitive Information Uses: Request limitations on certain uses or disclosures of sensitive personal information where applicable.
• Appeal: Appeal a decision we make regarding a privacy rights request where applicable law provides this right.
• Non-Discrimination: Exercise applicable privacy rights without unlawful discrimination or retaliation.

These rights are not absolute and may be subject to legal exceptions.

We may need to verify your identity before completing certain requests.

Where permitted by law, you may also appoint an authorized agent to make a request on your behalf. We may require evidence that the agent has authority to act for you.

European Economic Area Privacy Rights

If the GDPR applies to the processing of your personal information, you may have rights including:

• access;
• rectification;
• erasure;
• restriction of processing;
• data portability;
• objection to processing;
• withdrawal of consent; and
• the right to lodge a complaint with a competent data protection supervisory authority.

You have the right to object at any time to processing of your personal information for direct marketing purposes.

United Kingdom Privacy Rights

If UK data protection law applies to the processing of your personal information, you may have rights including:

• access;
• rectification;
• erasure;
• restriction;
• data portability;
• objection;
• withdrawal of consent; and
• the right to lodge a complaint with the United Kingdom Information Commissioner's Office.

United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law.

These may include rights to:

• know or access personal information;
• correct personal information;
• delete personal information;
• obtain a portable copy of personal information;
• opt out of the sale or sharing of personal information;
• opt out of targeted advertising;
• opt out of certain profiling activities;
• limit certain uses of sensitive personal information;
• appeal a denied request; and
• exercise privacy rights without discrimination.

Where applicable, you may exercise sale, sharing or targeted-advertising opt-out rights using the Your Privacy Choices link available on our website.

We will honor recognized opt-out preference signals, including Global Privacy Control, where required by applicable law.

Canada

If Canadian privacy legislation applies to our processing of your personal information, including PIPEDA or applicable provincial privacy laws, you may have rights to:

• request access to personal information held about you;
• request correction of inaccurate information;
• withdraw consent, subject to legal or contractual restrictions;
• ask how your information has been used or disclosed; and
• challenge our compliance with applicable privacy laws.

Vaeluxe's Privacy Officer is responsible for receiving privacy inquiries and complaints.

Additional rights may apply depending on your province or territory.

Australia

Where the Australian Privacy Act 1988 and Australian Privacy Principles apply, you may have rights to:

• request access to personal information we hold about you;
• request correction of inaccurate, incomplete or outdated personal information; and
• make a complaint about how your personal information has been handled.

If you are not satisfied with our handling of a privacy complaint, you may have the right to contact the Office of the Australian Information Commissioner.

New Zealand

Where the New Zealand Privacy Act 2020 applies, you may have rights including:

• requesting access to personal information held about you;
• requesting correction of personal information; and
• making a complaint regarding the handling of your personal information.

You may also have the right to complain to the New Zealand Office of the Privacy Commissioner.

Marketing Communications

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link contained in the email.

You may also contact us to update your marketing preferences.

Even if you opt out of promotional communications, we may continue to send transactional or service-related communications, including order confirmations, delivery updates, security notices and customer service communications.

Automated Processing

We may use automated systems to assist with fraud detection, security, personalization, advertising and operation of the Services.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on you unless permitted by applicable law.

Where applicable law gives you rights relating to significant automated decision-making, we will honour those rights.

Children's Privacy

The Services are not directed to children under 16 years of age, and we do not knowingly collect personal information from children where parental or guardian consent is legally required.

If you believe that a child has provided us with personal information contrary to applicable law, please contact us so that we can investigate and take appropriate action.

We do not knowingly sell or share, as those terms are defined under applicable law, personal information belonging to individuals under 16 where doing so is prohibited by law.

Third-Party Websites

The Services may contain links to websites, social media platforms or other online services operated by third parties.

Their privacy practices are governed by their own policies.

We are not responsible for the privacy, security, accuracy or practices of third-party websites or services that we do not control.

We recommend reviewing the privacy policies of those third parties before providing personal information to them.

Exercising Your Rights

To exercise applicable privacy rights, contact us at:

info@vaeluxe.com

You may also use privacy tools provided through our website, including our cookie preference controls or Your Privacy Choices page where available.

We will respond within the time required by applicable law.

We may request reasonable information to verify your identity or authority to make a request before processing it.

Privacy Complaints

If you have concerns about how we collect, use, disclose or otherwise process your personal information, please contact our Privacy Officer:

Privacy Officer – Vaeluxe
Email: info@vaeluxe.com

We will review privacy complaints and respond within a reasonable period and within any timeframe required by applicable law.

Depending on where you live, you may also have the right to lodge a complaint with your local privacy or data protection regulator.

EU and UK Representatives

Where applicable law requires Vaeluxe to appoint a representative in the European Economic Area or United Kingdom, the representative's contact information will be made available in this Privacy Policy and/or at the point at which personal information is collected.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, service providers or legal and regulatory requirements.

When we update this Privacy Policy, we will update the "Last updated" date at the top of this page.

Where required by law, we will provide additional notice of material changes.

Contact Us

If you have questions about this Privacy Policy, our privacy practices or your privacy rights, please contact:

Vaeluxe
Email: info@vaeluxe.com