Privacy Policy

Ethereal Charm (ABN 77 564 307 579) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We operate the website at www.theetherealcharm.com. For any privacy-related enquiries, please contact us at info@theetherealcharm.com.

We may collect the following types of personal information:

• Identity information — your name, as provided at checkout.
• Contact information — your email address and delivery address.
• Transaction information — details of products you purchase and order confirmation. We do not store payment card details — all card processing is handled by Stripe.
• Marketing preferences — your email address if you voluntarily subscribe to our mailing list.
• Technical information — IP address, browser type, device type, and pages visited, collected automatically via cookies and analytics tools.

We only collect personal information that is reasonably necessary for our business functions. You may choose not to provide certain information, but this may limit our ability to process your order or respond to your enquiry.

We collect personal information:

• Directly from you when you place an order, create an account, contact us, or subscribe to our mailing list.
• Automatically through cookies and analytics when you browse our website.
• From third-party payment processors (Stripe) in connection with your purchase.

We use your personal information to:

• Process and fulfil your orders, including sending order confirmations and shipping updates.
• Send marketing communications if you have opted in — you may unsubscribe at any time.
• Respond to your enquiries and provide customer support.
• Improve our website and understand how visitors use it.
• Comply with our legal obligations.

We will not use or disclose your personal information for purposes other than those described in this policy without your consent, unless required or authorised by law.

We may disclose your personal information to the following third-party service providers who assist us in operating our business:

• Stripe — secure payment processing. Stripe does not share your card details with us and is PCI-DSS compliant.
• Brevo (Sendinblue) — email marketing and transactional emails.
• Vercel — website hosting and infrastructure.

These providers are authorised to use your information only as necessary to provide services to us. We do not sell your personal information to any third party.

Some of our service providers are located outside Australia (including the United States and Europe). By using our website and providing your information, you consent to your information being stored and processed in these countries, which may have different privacy protections than Australia.

Our website uses cookies — small text files stored on your device — to provide a functional and improved experience. We use:

• Essential cookies — required for the site to function correctly (e.g., shopping cart).
• Analytics cookies — to understand how visitors use the site and improve it. Data is anonymised where possible.

You can disable cookies via your browser settings, though this may affect site functionality.

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. All transactions are encrypted via SSL. Payment data is handled exclusively by Stripe and never stored on our servers.

While we take all reasonable precautions, no data transmission over the internet can be guaranteed as fully secure. You provide your information at your own risk.

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order and transaction data is retained for 7 years to comply with applicable tax and accounting obligations. Marketing data is retained until you unsubscribe or request deletion.

Under the Australian Privacy Act 1988, you have the right to:

• Access — request access to the personal information we hold about you.
• Correction — request that we correct any personal information that is inaccurate, out of date, incomplete, or misleading.
• Complaint — make a complaint if you believe we have breached the Australian Privacy Principles.

To make a request or enquiry about your personal information, contact us at info@theetherealcharm.com. We will respond within a reasonable time (generally within 30 days).

If you believe we have not handled your personal information in accordance with the Australian Privacy Principles, please contact us first at info@theetherealcharm.com so we can attempt to resolve the matter.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically to stay informed about how we protect your information.