Privacy Policy

Last updated: August 9, 2026

Elevana Group LLC (trading as Sophie & Grace Melbourne) operates Sophie & Grace Melbourne (sophie-gracemelbourne.com), including all related information, features, products and services (the "Services"). This Privacy Policy describes how we collect, use and disclose your personal information when you use the Services or communicate with us. Sophie & Grace Melbourne is powered by Shopify.

Personal information we collect

Contact details — name, address, billing/shipping address, phone number and email address.

Financial information — payment card details, transactions and payment method. Payment information is processed using secure payment systems and card data is encrypted.

Account information — username, password, preferences and settings, where applicable.

Transaction information — items viewed, added to your cart, purchased, returned or cancelled.

Communications — information you provide when contacting customer service or communicating with us.

Device & usage data — device type, browser, IP address and information about how you interact with the Services.

How we use your information

Provide & improve the Services — to fulfil orders, process payments, manage your account, organise shipments, facilitate returns, provide customer support and improve or personalise your experience.

Marketing — to send promotional messages via email, SMS or other permitted channels, and to provide online advertising based on your activity, where permitted by applicable law. You can unsubscribe from marketing communications at any time.

Security & fraud prevention — to verify accounts, protect our Services and detect, prevent or investigate fraud, abuse or other unlawful activity.

Communication & legal reasons — to communicate with you about your orders or enquiries and to comply with applicable laws, regulations, legal processes and lawful requests.

Disclosure & Shopify

We may share personal information with Shopify, suppliers and service providers that assist us with IT, payment processing, analytics, customer support, data storage, order processing and shipping.

We may also share information with marketing and advertising partners where permitted by applicable law, and where disclosure is required or authorised by law.

The Services are hosted and supported by Shopify, which processes personal information to provide and improve its services. You can review Shopify's Privacy Policy at Shopify Privacy Policy.

Your rights

Depending on where you live and which privacy laws apply to you, you may have the right to:

  • access personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal information where applicable;

  • request access to or transfer of certain information where applicable;

  • opt out of direct marketing communications; and

  • make a complaint about how we handle your personal information.

We will not unlawfully discriminate against you for exercising any privacy rights available to you and may take reasonable steps to verify your identity before processing certain requests.

You can exercise your applicable rights by contacting us using the details below.

Children's data

The Services are not intended for children who are below the applicable age of consent or majority in their jurisdiction.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

Security

We take reasonable steps to protect personal information against misuse, interference, loss, unauthorised access, modification or disclosure.

However, no method of transmission or electronic storage is completely secure, and we cannot guarantee that security measures will prevent every possible security incident.

International transfers

Because we operate through service providers and suppliers located in different countries, your personal information may be processed or disclosed outside Australia or New Zealand, including in countries where our service providers operate.

Where required by applicable privacy law, we take reasonable steps to ensure that overseas recipients handle personal information in accordance with applicable privacy requirements.

For customers in New Zealand, overseas disclosures are handled in accordance with the applicable requirements of the Privacy Act 2020, including Information Privacy Principle 12 where applicable.

For customers in Australia, where the Privacy Act 1988 and Australian Privacy Principles apply, we take reasonable steps in relation to overseas disclosures as required by applicable law.

Complaints & contact

If you have questions, concerns or complaints about how we collect, use or handle your personal information, please contact us at:

info@sophie-gracemelbourne.com

We will review and respond to privacy complaints in accordance with applicable privacy laws.

You may also contact the relevant privacy regulator in your jurisdiction if you are not satisfied with our response.