Privacy policy

Last updated: 8 April 2026

JOYCE AU (“we”, “us”, “our”) operates this online store and website, including all related information, content, features, tools, products and services (the “Services”). Our store is hosted by Shopify, which provides the e-commerce platform that enables us to sell our products and services to you.

We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

This Privacy Policy explains how we collect, use, disclose and store your personal information, and how you may access or correct it or make a complaint.

By accessing or using our Services, you agree to the terms of this Privacy Policy.

 

 

What is “Personal Information”?

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

It does not include information that has been de-identified or anonymised.

 

 

What Personal Information We Collect

We may collect the following types of personal information:

Contact Details

  • Full name

  • Billing and shipping address

  • Email address

  • Phone number

Financial Information

  • Payment card details (processed securely via our payment providers)

  • Transaction details

  • Billing information

Note: We do not store full credit card numbers. Payment details are processed securely via Shopify and its integrated payment providers.

Account Information

  • Username and password

  • Account preferences

  • Purchase history

Transaction Information

  • Items viewed, added to cart or wishlist

  • Purchases, returns, exchanges and cancellations

Communications & User-Generated Content

  • Information you provide when contacting customer support

  • Reviews, testimonials or feedback you submit

  • Images, videos, comments or tags you post on social media that relate to JOYCE AU or tag our brand

Device & Usage Information

  • IP address

  • Browser type

  • Device identifiers

  • Cookies and similar tracking technologies

  • Pages visited and interaction data

 

 

Social Media, User-Generated Content & Influencer Content

If you tag JOYCE AU, use our branded hashtags, respond to a repost request, participate in a competition, or otherwise mention or interact with us on social media platforms (including Instagram, Facebook or TikTok), we may collect and use content you make publicly available.

This may include:

  • Your social media handle or username

  • Images, videos or other media featuring our products

  • Captions, comments, hashtags and location tags

  • Any other content you publicly associate with JOYCE AU

Reposting & Commercial Use

Where we request permission to repost your content and you provide consent (including by replying affirmatively to our request), you grant JOYCE AU a non-exclusive, royalty-free, worldwide licence to use, reproduce, publish, display and share that content for marketing and promotional purposes.

This may include use on:

  • Our website

  • Our social media accounts

  • Email marketing campaigns

  • Paid advertisements

  • Other digital or print promotional materials

You acknowledge that your content may be edited for formatting, layout or branding purposes, but we will not materially alter the original representation of our products.

Influencer & Collaborator Content

If you engage with us as an influencer, ambassador, collaborator or content creator, we may collect, use and disclose your personal information in accordance with any separate agreement entered into with you, as well as this Privacy Policy.

Withdrawal of Consent

You may request removal of reposted content at any time by contacting us at hello@heldbyjoyce.com.au. We will take reasonable steps to remove the content from future use, noting that it may not be possible to remove content already published in paid campaigns or third-party platforms.

Third-Party Platforms

Please note that content posted on social media platforms is also subject to the privacy policies and terms of those platforms. We are not responsible for how those platforms collect, use or disclose your information.

 

 

How We Collect Personal Information

We collect personal information:

  • Directly from you – when you create an account, place an order, subscribe to marketing, post a review, tag us on social media, or contact us.

  • Automatically – via cookies and similar technologies when you use our website.

  • From third parties – including payment processors, delivery partners and Shopify.

 

 

Why We Collect and Use Your Personal Information

We collect and use personal information for the following purposes:

(a) To Provide Our Services

  • Process orders and payments

  • Deliver products

  • Manage returns and exchanges

  • Provide customer support

  • Maintain your account

(b) Marketing and Promotions

  • Send promotional emails (if you opt in)

  • Provide personalised advertising

  • Recommend products based on browsing or purchase history

  • Share customer reviews or user-generated content (where permitted)

You may opt out of marketing communications at any time using the unsubscribe link in our emails.

(c) Security and Fraud Prevention

  • Verify identity

  • Prevent fraudulent transactions

  • Protect our website and customers

(d) Legal Compliance

  • Comply with Australian laws

  • Respond to lawful requests from regulators or law enforcement

  • Resolve disputes

 

 

Disclosure of Personal Information

We may disclose your personal information to:

  • Shopify (our e-commerce platform provider)

  • Payment processors

  • Shipping and logistics providers

  • IT service providers and cloud hosting providers

  • Marketing and analytics partners

  • Professional advisers (accountants, lawyers)

  • Government authorities where required by law

We only disclose personal information where reasonably necessary for our business functions or as required by law.

 

 

Overseas Disclosure

Some of our service providers (including Shopify and certain cloud or technology providers) may store or process personal information outside Australia, including in countries such as Canada and the United States.

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles your information in accordance with the Australian Privacy Principles.

 

 

Cookies and Online Tracking

We use cookies and similar technologies to:

  • Enable website functionality

  • Analyse website traffic

  • Personalise your shopping experience

  • Deliver targeted advertising

You can control or disable cookies through your browser settings. However, doing so may affect website functionality.

 

 

Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

However, no method of transmission over the internet is completely secure. You provide information at your own risk.

 

 

Data Retention

We retain personal information only for as long as necessary to:

  • Provide our Services

  • Comply with legal obligations (e.g., tax and accounting laws)

  • Resolve disputes

  • Enforce agreements

When no longer required, personal information is securely destroyed or de-identified.

 

 

Access and Correction

Under Australian privacy law, you have the right to:

  • Request access to the personal information we hold about you

  • Request correction of inaccurate, incomplete or outdated information

To request access or correction, please contact us using the details below. We may need to verify your identity before processing your request.

We will respond within a reasonable period and may charge a reasonable administrative fee where permitted by law.

 

 

Complaints

If you believe we have breached the Australian Privacy Principles, you may contact us using the details below.

We will:

  1. Acknowledge your complaint within a reasonable time; and

  2. Investigate and respond in writing.

If you are not satisfied with our response, you may lodge a complaint with the:

Office of the Australian Information Commissioner
Website: https://www.oaic.gov.au

 

 

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We recommend reviewing their privacy policies before providing personal information.

 

 

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal or operational requirements. The updated version will be published on our website with a revised “Last updated” date.

 

 

Contact Us

If you have questions about this Privacy Policy or wish to make a request or complaint, please contact:

JOYCE AU
Email: hello@heldbyjoyce.com.au