Privacy policy

Privacy Policy

This Privacy Policy describes how Eucalyra (24 Bourke Street, Maitland NSW 2320, Australia) collects, processes and protects your personal information when you visit our website eucalyra.shop or shop with us.

1. Information We Collect

Contact details: name, e-mail address, phone number, delivery address
Order data: order history, encrypted payment information
Device data: IP address, browser type, operating system
Usage data: pages visited, click behaviour, referrer URLs
Cookies (see section 4)

2. Why We Process Your Information

Processing and delivering orders
Customer communication and support
Fraud prevention and security
Improving our website and services
Marketing communication (only with your express consent)

3. Sharing with Third Parties

Data is shared only with the following categories of recipients, to the extent required to fulfil your order:

Payment processing: our certified payment provider Stripe, processing Visa, Mastercard, American Express, Apple Pay and Google Pay transactions
Shipping carriers: Australia Post, Sendle and partner courier services
Hosting services: Shopify Inc. (platform and data storage)
Analytics services: Google Analytics (anonymised, IP anonymisation active)

All third parties are contractually required to comply with applicable data-protection laws.

4. Cookies and Consent

We use cookies. Where consent is required, you can give or refuse it per category, and you can adjust or withdraw your consent at any time — via your browser's cookie settings or by contacting us at contact@eucalyra.shop.

We use cookies in the following four categories:

Strictly necessary cookies: required for the shop to work correctly (cart, session, security). These cookies cannot be disabled — no consent required.
Functional cookies: enable enhanced functionality and personalisation (for example saved language preferences). Only with your consent.
Performance cookies: anonymous usage statistics used to improve our website (for example Google Analytics with IP anonymisation enabled, Microsoft Clarity). Only with your consent.
Targeting cookies: set by advertising partners to show personalised advertising on other websites. Only with your consent.

A detailed cookie statement listing all cookies in use and their purposes is available on our Cookie Policy page.

5. Data Retention

We retain personal information only for as long as necessary or as required by law (generally 7 years for transaction and accounting records under Australian tax and corporations law).

6. Your Rights under Australian Privacy Law

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your data (where no legal retention obligations apply)
Request that we restrict certain processing
Receive your data in a common electronic format
Object to certain processing activities, including direct marketing
Make a complaint about how we handle your personal information

Supervisory authority (Australia): Office of the Australian Information Commissioner (OAIC), GPO Box 5288, Sydney NSW 2001 — www.oaic.gov.au

7. Your Rights under the EU General Data Protection Regulation (GDPR)

If you are located in a member state of the European Union, you additionally have the rights set out in the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679):

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure ("right to be forgotten", Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint with a data-protection authority (Art. 77 GDPR) — the authority of your EU member state is responsible

Legal bases for processing (Art. 6 GDPR):

Art. 6(1)(b) – performance of a contract (order processing)
Art. 6(1)(f) – legitimate interest (fraud prevention, security)
Art. 6(1)(a) – consent (marketing cookies, promotional e-mails)

International data transfers: For transfers of personal data to the USA (for example Shopify, Google Analytics), we rely on the Standard Contractual Clauses approved by the European Commission (SCC, Art. 46 GDPR) and on the EU-U.S. Data Privacy Framework.

8. Data Security

Our website uses SSL/TLS encryption for all data transmissions (HTTPS protocol). We carry out regular security reviews and apply industry-standard protective measures.

9. Contact for Privacy Requests

To exercise your rights or if you have questions about privacy, please contact:

Store name: Eucalyra
ABN: 83 327 332 991
Address: 24 Bourke Street, Maitland NSW 2320, Australia
E-mail: contact@eucalyra.shop
Phone: +61411328274

Customer service hours (AEST)
Monday to Friday: 09:00 – 18:00
Saturday and Sunday: 10:00 – 16:00

We respond to privacy requests within 30 days.