1. Privacy Policy Overview
Carveoza is committed to protecting your personal information and maintaining transparency in how we handle data. This Privacy Policy explains what information we collect when you use our website, how we use and store that information, and the choices you have in relation to your personal data.
By accessing or using our website, creating an account, browsing products, adding items to your cart, or completing a purchase, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of our website and services.
This Privacy Policy is designed to align with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent that they apply to our operations.
2. Information We Collect
We collect information that enables us to provide a seamless, secure, and personalised shopping experience. The specific information we collect depends on how you interact with Carveoza and the features you choose to use.
2.1 Information you provide directly
When you actively engage with our website or services, you may provide us with the following types of personal information:
- Account and profile details – such as your name, email address, password, phone number, and any preferences you set in your profile.
- Order and shipping details – including billing address, shipping address, contact details, and any delivery instructions you choose to provide.
- Payment-related information – such as payment method details and transaction identifiers. Full card details are typically processed securely by our payment gateway providers and are not stored in a readable format by Carveoza.
- Customer support communications – including enquiries submitted via our Contact Us page, email correspondence, or other messages you send to our support team.
- Reviews and feedback – such as product reviews, ratings, survey responses, or feedback about your shopping experience.
2.2 Information collected automatically
When you visit or interact with our website, we may automatically collect certain technical and usage information to help us understand how our platform is used and to maintain performance and security. This may include:
- Device and browser information – such as IP address, browser type and version, operating system, device identifiers, language settings, and approximate location based on IP.
- Usage and interaction data – including pages viewed, products browsed, search queries, time spent on the website, navigation paths, clickstream data, and interaction with features like filters and recommendations.
- Log information – such as access times, error logs, performance data, and diagnostic information to help monitor the stability and security of our services.
2.3 Information from cookies and similar technologies
We use cookies and similar technologies to remember your preferences, keep your cart updated, and analyse how visitors use our site. These technologies may capture data such as your browsing activity, device identifiers, and referral sources. For more detail, please review our dedicated Cookie Policy.
2.4 Information from third parties
In some cases, we may receive information about you from third parties, such as:
- Payment service providers – who confirm if a payment was successful or declined, and provide transaction references.
- Delivery and logistics partners – who provide updated delivery statuses or confirm successful deliveries.
- Marketing and analytics partners – who may provide aggregated or de-identified information to help us understand audience trends and campaign performance.
3. How We Use Your Information
We use the information we collect for purposes that are necessary to run our e-commerce operations and to enhance your experience with Carveoza. These purposes include:
3.1 Processing and fulfilling orders
- To create and manage your customer account.
- To process payments, verify transactions, and send order confirmations.
- To arrange shipping, deliveries, returns, and exchanges with our logistics partners.
- To provide order updates, shipping notifications, and related customer service communications.
3.2 Providing and improving our services
- To operate, maintain, and optimise the performance of our website and digital services.
- To troubleshoot issues, monitor system performance, and improve site reliability and responsiveness.
- To analyse how customers navigate and interact with our product categories, search features, and filters.
3.3 Personalising your shopping experience
- To display relevant products, categories, and recommendations based on your browsing or purchase history.
- To remember your preferences, such as saved items, recently viewed products, and selected filters.
- To tailor content, promotions, and offers to align with your interests where permitted by law.
3.4 Communicating with you
- To respond to enquiries submitted via the Contact Us page or through other communication channels.
- To send transactional messages, such as order confirmations, shipping alerts, and account notifications.
- To send marketing communications, special offers, and updates about new products or collections where you have provided consent or where permitted by law. You can opt out of marketing at any time.
3.5 Legal, security, and compliance purposes
- To detect, investigate, and help prevent fraud, unauthorised access, or other unlawful activity.
- To protect the rights, property, and safety of Carveoza, our customers, and the public.
- To comply with legal obligations, regulatory requirements, and lawful requests from authorities.
5. Third-Party Services
To provide a complete and reliable e-commerce experience, we work with carefully selected third-party partners. These providers may access or process certain personal information solely to perform services on our behalf and in accordance with this Privacy Policy and applicable laws.
5.1 Types of third-party partners
- Payment processors and financial institutions – to securely process payments, prevent fraud, and manage refunds or chargebacks.
- Shipping and logistics partners – to pick, pack, and deliver your orders, handle tracking, and manage returns or exchanges.
- IT, hosting, and infrastructure providers – to host our website, store data securely, and ensure reliable performance.
- Analytics and marketing partners – to analyse site usage, improve customer experience, and, where permitted, assist with campaigns and promotions.
- Customer support tools – to manage communications, support tickets, and customer feedback efficiently.
5.2 How we manage third-party access
We only share personal information with third parties where it is necessary for them to carry out their services, and we require them to handle your information securely and lawfully. Third-party providers are not permitted to use your personal information for their own unrelated purposes.
5.3 International transfers
Some of our service providers may be located outside Australia. Where your information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place so that your personal data remains protected in line with applicable privacy laws.
6. Data Security
Protecting your information is a key priority for Carveoza. We employ a combination of technical, organisational, and physical safeguards designed to keep your data secure and to reduce the risk of unauthorised access, misuse, alteration, or loss.
6.1 Security measures
- Encryption – data transmitted between your browser and our website is protected using encryption protocols (such as HTTPS/TLS) to help safeguard sensitive information during transfer.
- Secure payment gateways – payments are processed using reputable third-party payment providers that comply with relevant security standards. Card details are typically tokenised or processed directly by these providers.
- Access controls – access to personal data is restricted to authorised personnel and service providers who require it for legitimate business purposes.
- Monitoring and logging – we use logging and monitoring tools to help detect suspicious or unauthorised activity on our systems.
6.2 Data retention
We retain personal information only for as long as it is reasonably necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, accounting, or reporting requirements. When information is no longer required, we will take reasonable steps to de-identify or securely destroy it.
6.3 Your responsibility
While we take steps to protect your information, no system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you suspect any unauthorised access to your account.
7. Your Rights and Choices
We believe you should have clear and practical choices about how your personal information is used. Subject to applicable laws and certain exceptions, you may have the following rights and options in relation to your data.
7.1 Access and correction
- You may request access to personal information we hold about you.
- You may request that we correct inaccurate, incomplete, or out-of-date information.
- Where available, you can update certain details directly through your account settings.
7.2 Deletion and restriction
- You may request that we delete certain personal information where it is no longer required for the purposes for which it was collected, subject to legal and operational requirements.
- You may request that we restrict the way we use your personal information in certain circumstances.
7.3 Marketing preferences
- You can opt out of receiving marketing emails by using the unsubscribe link included in those messages or by updating your communication preferences where that option is available.
- Even if you opt out of marketing communications, we may still send you essential transactional or service-related messages, such as order confirmations and important account notices.
7.4 Managing cookies and tracking
You can adjust your browser settings to manage cookies, block certain types of cookies, or receive alerts when cookies are being used. For more information about managing cookies, refer to your browser’s help documentation and our Cookie Policy.
7.5 How to exercise your rights
To make a request regarding your personal information, or to ask a question about your rights, please contact us using the details in the Policy Updates and Contact Information section or via the Contact Us page. We may need to verify your identity before actioning certain requests.
8. Children’s Privacy
Carveoza is designed for adult customers and is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16 years of age.
If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us using the details set out in this Privacy Policy. We will take reasonable steps to investigate and, where appropriate, delete such information.
We encourage parents and guardians to monitor and guide their children’s online activities to help ensure that their personal information is handled safely and responsibly.
9. Policy Updates and Contact Information
9.1 Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the “last updated” date at the bottom of this page. We encourage you to review this Policy periodically to stay informed about how we protect your information.
9.2 How to contact us
If you have any questions, comments, or concerns about this Privacy Policy, or if you would like to exercise your privacy rights, you can reach us using the details provided on our Contact Us page.
When contacting us, please provide enough information for us to identify you and understand your request so that we can respond efficiently.
Last updated: