Privacy Policy

Effective date: 17 August 2026

This Privacy Policy explains how Lorien Ravello collects, holds, uses, discloses and protects personal information when you visit our website, create an account, place an order or otherwise communicate with us.

Applicable Privacy Requirements

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Notifiable Data Breaches scheme.

We aim to apply the privacy standards described in this Policy even where a statutory exemption or business-turnover threshold means that a particular requirement does not apply.

Personal Information We Collect

Depending on your interactions with us, we may collect:

• Your name, billing address, delivery address, email address and telephone number;

• Account details and communication preferences;

• Order, product, return, refund and purchase-history information;

• Payment status, payment method and limited transaction identifiers received from payment providers;

• Customer-service messages, reviews, survey responses and complaints;

• Marketing consent and unsubscribe records;

• IP address, browser, device, cookie, referral and website-interaction data; and

• Fraud-prevention, verification and security information.

We do not ordinarily receive or store complete payment-card information. Payments are processed by third-party payment providers under their own terms and security practices.

How We Collect Information

Information may be collected directly from you, automatically through our website, or from providers supporting ecommerce hosting, payments, delivery, analytics, advertising, customer service and fraud prevention.

Purposes of Collection and Use

We may use personal information to:

• Process payments, fulfil orders and arrange delivery;

• Administer accounts, returns, refunds and exchanges;

• Provide customer service and respond to enquiries;

• Detect fraud, secure accounts and protect our systems;

• Operate, analyse and improve our website and products;

• Maintain accounting, tax and transaction records;

• Personalise content and measure marketing performance;

• Send marketing communications where permitted; and

• Comply with legal obligations and resolve disputes.

Consent

We obtain consent where required. Consent may be express or implied depending on the nature and sensitivity of the information and the reasonable expectations of the individual.

You may withdraw consent on reasonable notice, subject to legal or contractual restrictions. Withdrawal may prevent us from providing a requested product or service.

Direct Marketing

We may send promotional communications where you have consented or where otherwise permitted under the Spam Act 2003 (Cth). Commercial electronic messages will identify the sender and include a functional unsubscribe method.

You may unsubscribe at any time. We may continue sending transactional or service communications relating to an order, account, security matter or legal notice.

Cookies and Similar Technologies

We may use essential cookies for checkout, account functions and security. Preference, analytics and advertising technologies may also be used in accordance with applicable consent requirements.

You may manage cookies through your browser or website consent controls, but blocking essential cookies may affect store functionality.

Disclosure of Personal Information

We may disclose personal information to providers assisting with ecommerce hosting, payment processing, delivery, accounting, analytics, customer service, marketing, fraud prevention and information security.

We may also disclose information where required or authorised by law, to investigate unlawful conduct, protect legal rights or safety, or facilitate a proposed business sale, merger or reorganisation. We do not sell personal information for monetary consideration.

Overseas Disclosure

Some providers may store or process information outside Australia, including in the United States, Canada, the United Kingdom, the European Economic Area and other locations used by our ecommerce and technology providers.

Where Australian Privacy Principle 8 applies, we will take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements, subject to lawful exceptions.

Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature and sensitivity of the information. These may include restricted access, authentication controls, encrypted connections, security monitoring and provider due diligence.

No online transmission or storage system is completely secure. Customers should use unique passwords and notify us promptly of suspected unauthorised account activity.

Data Breaches

We will investigate suspected data breaches and take reasonable containment and remediation measures. If the Notifiable Data Breaches scheme applies and a breach is likely to cause serious harm that cannot be prevented through remedial action, we will notify affected individuals and the Office of the Australian Information Commissioner as required.

Retention and Destruction

We retain personal information only for as long as reasonably required for fulfilment, customer service, legal, tax, accounting, warranty, fraud-prevention and dispute-resolution purposes.

When no longer required, information will be securely destroyed or de-identified where reasonably practicable.

Access and Correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may verify your identity before responding.

We will respond within a reasonable period. If access or correction is refused under a lawful exception, we will ordinarily provide written reasons and information about available complaint mechanisms.

Privacy Complaints

Send privacy complaints to our Privacy Officer. We will acknowledge and investigate the complaint within a reasonable time. If you are dissatisfied with our response, you may be entitled to complain to the Office of the Australian Information Commissioner.

Children

Our store is not directed to children under 13. We do not knowingly collect personal information from a child without appropriate parent or guardian involvement.

Changes to This Policy

We may update this Policy to reflect legal, technical or operational developments. The revised version will be published with an updated effective date.

Privacy Contact

Privacy Officer — Lorien Ravello
16 Stacey Street, Fairfield West NSW 2165, Australia
Email: support@lorienravello.com
Telephone: +61 2 9725 6841
Hours: Monday–Friday, 9:00 am–5:00 pm Sydney time, excluding New South Wales public holidays