Privacy

Last updated: 13 July 2026

SYLARO operates this website and store to provide you with a curated shopping experience (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit our site, make a purchase, or communicate with us. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using the Services, you acknowledge that you have read this policy and understand how your information is collected, used, and disclosed as described here.

What we collect

"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you interact with the Services, we may collect: contact details (name, email, phone, billing and shipping address); payment information (processed securely by our payment providers — we never see or store full card numbers); account information (username, password, preferences); transaction information (items you view, add to cart, purchase, return, or exchange); communications you send us (such as support enquiries); and device and usage information (IP address, browser, device identifiers, and how you navigate the Services, including through cookies and similar technologies).

Where it comes from

Directly from you (when you order, create an account, subscribe, or contact us); automatically through the Services (cookies and similar technologies when you browse); and from our service providers (such as Shopify, payment processors, and shipping carriers acting on our behalf).

How we use it

To provide the Services: processing payments, fulfilling and shipping orders, managing returns and exchanges, maintaining your account, and remembering your preferences. To communicate with you: order confirmations, shipping updates, and responses to your enquiries. For marketing, only with your consent: if you join our mailing list we'll send occasional emails about releases and early access — every email includes an unsubscribe link, and opting out never affects your orders. For security and fraud prevention: protecting your account, our customers, and the Services. And for legal reasons: complying with Australian law and responding to valid legal processes.

How we disclose it

We disclose personal information only as needed to run the store: to Shopify and service providers who perform services on our behalf (payment processing, shipping and fulfilment, analytics, cloud storage, customer support); to carriers so your orders reach you; when you direct or consent to a disclosure; and where required by law or in connection with a business transaction. We do not sell your personal information.

Overseas disclosure

We are based in Australia, but some of our service providers (including Shopify) store and process information overseas, including in the United States and Canada. Where we disclose personal information overseas, we take reasonable steps consistent with APP 8 to ensure it is handled in accordance with Australian privacy standards. For customers in the UK or European Economic Area, transfers out of those regions rely on recognised mechanisms such as the European Commission's Standard Contractual Clauses or UK equivalents.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about your use of the Services to provide and improve them. Certain enhanced Shopify features use information from your interactions with our store, other merchants, and Shopify itself; for those purposes Shopify is responsible for the processing of your personal information. You can learn more in the Shopify Consumer Privacy Policy or exercise rights over Shopify-processed data at the Shopify Privacy Portal.

Cookies

We use cookies and similar technologies to keep your cart working, remember preferences, understand how the Services are used, and (where you consent) support advertising. You can control cookies through your browser settings; disabling them may affect parts of the Services.

Third-party links

The Services may link to sites we don't operate (such as our social media). Their privacy practices are their own — review their policies before providing information.

Children

The Services are not intended for children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, email info@sylaro.co and we will delete it.

Security and retention

We take reasonable steps under APP 11 to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. No online transmission is completely secure, so please avoid sending sensitive information through insecure channels. We keep personal information only as long as needed to provide the Services, meet legal obligations (such as tax record-keeping), resolve disputes, and enforce agreements — after which it is deleted or de-identified. In the event of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme.

Your rights

Under the Privacy Act, you may request access to the personal information we hold about you (APP 12) and request correction of inaccurate information (APP 13). You may opt out of marketing at any time via the unsubscribe link in any email. We will respond to requests within a reasonable period and will not charge you for making a request.

If you are in the UK or European Economic Area, you may have additional rights under the UK GDPR or GDPR, including erasure, portability, restriction of and objection to processing, and withdrawal of consent. We honour these requests subject to applicable law. Certain US state laws provide similar rights, including opting out of targeted advertising; where our site receives a Global Privacy Control signal, we treat it as an opt-out request for that browser and device.

We will never discriminate against you for exercising your rights, and we may need to verify your identity before actioning a request.

Complaints

If you have concerns about how we've handled your personal information, email info@sylaro.co first and we will respond within a reasonable period. If you're not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992. UK and EEA customers may also contact their local data protection authority.

Changes to this policy

We may update this policy to reflect changes in our practices or the law, including the Privacy Act reforms currently before the Australian Parliament. The revised version will be posted here with an updated date.

Contact

For any privacy question or to exercise your rights, reach us through our Contact page. For the purposes of applicable data protection laws, SYLARO is the controller of your personal information.