Privacy policy

SHEVOKE PRIVACY POLICY

Last updated: 02 June 2026

 

1. Introduction

Shevoke Pty Ltd (ABN 75 619 304 675) ("Shevoke", "we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, hold, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Policy applies to all personal information we collect through our website (shevoke.com), and through any other interactions you have with us, including in-store where applicable.

If you are located in the European Union or United Kingdom, please also read Section 10, which sets out your additional rights under the GDPR and UK GDPR.

 

2. What Personal Information We Collect

We may collect the following types of personal information:

• Name, email address, phone number, and delivery and billing address
• Payment information (processed securely via third-party payment providers - we do not store full card or account details)
• Account login credentials
• Order history and purchase preferences
• Mobile number, where you have opted in to SMS communications
• Communications you send us, including customer service enquiries
• Device and browsing information collected via cookies and tracking technologies (see Section 7)
• Information you provide when entering competitions, attending events, or participating in promotions

We only collect information that is reasonably necessary for our functions and activities.

 

3. How We Collect Personal Information

We collect personal information:

• Directly from you when you place an order, create an account, subscribe to marketing communications, or contact us
• Automatically through your use of our website via cookies, pixels, and similar technologies
• From third parties such as payment processors, logistics partners, and social media platforms where you interact with our content

 

4. Why We Collect and Use Your Personal Information

We use your personal information to:

• Process and fulfil your orders, including shipping and returns
• Manage your customer account
• Send transactional communications such as order confirmations and shipping updates
• Send marketing communications by email and SMS, where you have opted in or where permitted by law
• Improve our website, products, and services
• Serve relevant advertising on third-party platforms
• Comply with legal obligations
• Prevent fraud and protect the security of our business and customers

We will not use your personal information for a purpose other than those listed above without your consent or as required by law.

 

5. Marketing Communications

If you subscribe to our newsletter, opt in at checkout, or provide your mobile number for SMS updates, we may send you marketing communications about new products, collections, events, and offers.

You can unsubscribe at any time by:

• Clicking the unsubscribe link in any marketing email
• Replying STOP to any marketing SMS
• Contacting us at info@shevoke.com

We will process your request promptly and in accordance with the Spam Act 2003 (Cth) and any other applicable law.

 

6. Disclosure of Personal Information

We do not sell your personal information to third parties.

We may share your personal information with:

• Payment processors - Shopify Payments, PayPal, Afterpay, and Zip, for the purpose of processing transactions. Each operates under its own privacy policy and security standards.
• Logistics and fulfilment providers - to facilitate delivery of your orders
• Marketing and analytics platforms - including Klaviyo (email and SMS), Meta, Google, and TikTok, for the purpose of marketing communications, advertising, and website analytics. See Section 7 for more detail.
• Shopify - our ecommerce platform, which hosts our store and processes order data
• Professional advisors - such as lawyers and accountants, where required
• Law enforcement or regulators - where we are required to do so by law

Where we share personal information with overseas recipients - including platforms and service providers based in the United States and other countries - we take reasonable steps to ensure those parties handle your information in a manner consistent with Australian privacy law. Please note that overseas recipients may be subject to the laws of their own jurisdiction, which may differ from Australian law.

 

7. Cookies and Tracking Technologies

Our website uses cookies, pixels, and similar technologies operated by us and third parties, including:

• Google Analytics 4 and Google Ads - for website analytics and advertising performance measurement
• Meta Pixel - for advertising measurement and retargeting on Facebook and Instagram
• TikTok Pixel - for advertising measurement and retargeting on TikTok
• Klaviyo - for email and SMS marketing tracking

These technologies may collect information about your device, browsing behaviour, and interactions with our website. Some of this data may be transmitted to and stored on servers located overseas, including in the United States.

[Lawyer action item: TikTok data routing practices have attracted regulatory scrutiny in the EU and other jurisdictions. Confirm whether additional disclosure is required for EU/UK customers given current regulatory guidance at the time of publication.]

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

 

8. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access. This includes secure HTTPS connections, access controls, and working with reputable third-party service providers.

No data transmission over the internet is completely secure. If you have concerns about the security of your information, please contact us at info@shevoke.com.

 

9. Access and Correction

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, incomplete, or out of date.

To make a request, contact us at info@shevoke.com. We will respond within 30 days. In some circumstances we may decline to provide access - for example where doing so would unreasonably affect the privacy of another individual - and will explain our reasons in writing.

 

10. European Union and United Kingdom Customers

If you are located in the EU or UK, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal information.

Legal basis for processing

We process your personal information on the following legal bases:

• Contract - to fulfil orders you have placed with us
• Legitimate interests - for fraud prevention, website improvement, and direct marketing to existing customers where permitted
• Consent - for email and SMS marketing where you have opted in, and for non-essential cookies and tracking
• Legal obligation - where required by applicable law

Your rights

Under the GDPR and UK GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your personal information in certain circumstances
• Object to processing based on legitimate interests
• Request restriction of processing in certain circumstances
• Data portability, where processing is based on consent or contract and carried out by automated means
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at info@shevoke.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority - in the EU this is your national data protection authority, and in the UK this is the Information Commissioner's Office (ICO) at ico.org.uk.

[Lawyer action item: Confirm whether Shevoke requires a formal EU/UK representative under Article 27 GDPR given the volume of EU/UK customers. This is a common requirement for non-EU businesses with EU customers and carries a compliance obligation.]

 

11. Data Retention

[Lawyer action item: Shevoke does not currently have a defined retention policy. Platform defaults apply across Shopify and Klaviyo. Your lawyer should advise on a defensible retention period appropriate for an ecommerce business - typically aligned with tax record-keeping obligations (generally 5-7 years in Australia) - and confirm whether active deletion of inactive customer data is required under GDPR for EU/UK customers.]

 

12. Complaints

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint by contacting us at info@shevoke.com. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

EU and UK customers should refer to Section 10 for complaint options in their jurisdiction.

 

13. Changes to This Policy

We may update this Policy from time to time. The current version will always be published on our website with the date it was last updated. We encourage you to review this Policy periodically.

 

14. Contact

For any privacy-related questions or requests:

Shevoke Pty Ltd
ABN 75 619 304 675
info@shevoke.com, or orders@shevoke.com for order and customer care enquiries