Privacy Policy

Last updated: July 4, 2026

Welcome to Velanto (www.velanto-boutique.com). Your privacy is of fundamental importance to our boutique operations. This Privacy Policy outlines how we collect, use, process, disclose, and safeguard your personal information when you browse our collections, complete a purchase, or communicate with our style concierge desk.

Our data management practices are strictly structured to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), alongside the Australian Spam Act 2003 regarding electronic marketing communications.

1. Personal Information We Collect

In order to provide you with a tailored boutique shopping experience, we collect the following categories of personal information:

• Identity & Contact Details: Your full name, shipping/delivery address, billing address, telephone number, and email address.
• Commercial Purchase History: Details regarding the apparel, sizes, transaction summaries, and items saved to your cart or lookbook.
• Financial Data: Secure payment transaction information (processed via external, encrypted PCI-compliant payment gateways; Velanto never views, intercepts, or retains your raw financial credentials).
• Technical & Network Activity: IP addresses, unique device identifiers, browser specifications, cookie data, and analytical site navigation paths collected automatically via Shopify, Meta Pixels, and Google analytics.

2. How We Use Your Personal Information

We collect and use your personal information strictly for primary business functions under the APPs, specifically to:

• Process, finalize, track, and arrange cross-border shipment for your fashion orders.
• Manage authorized consumer returns, sizing exchanges, or provide responsive customer care.
• Audit boutique metrics, evaluate stock demands, and protect our platform against fraudulent transactions.
• Send marketing emails, SMS notifications, and tailored style advertisements in strict alignment with the Spam Act 2003. Every promotional communication includes a prominent, functional "Unsubscribe" mechanism.

3. Cross-Border Data Disclosure (APP 8)

Velanto does not sell, trade, or rent consumer data to unassociated third parties. To execute commercial retail sales, we securely share minimal data elements with essential cross-border service vendors:

• Shopify Inc.: Our core e-commerce infrastructure provider, hosting store databases under stringent global encryption protocols.
• International Fulfillment Centers: Global logistics nodes and postal carriers who receive delivery parameters solely to pack and route your items.

Because our boutique logistics utilize international manufacturing partners, your information will be disclosed to overseas recipients located in fulfillment hubs. In compliance with APP 8, Velanto takes reasonable steps to ensure that these overseas partners protect your data privacy to an equivalent standard required under Australian law.

4. Cookies and Targeted Advertising

Our platform implements technical cookies to preserve shopping cart integrity, remember regional preferences, and analyze advertising metrics. You can manage or disable cookies through your personal web browser settings, although turning off essential cookies may impact your user experience and checkout functionality on our platform.

5. Your Rights as an Australian Resident

Under the Australian Privacy Principles, you hold defined legal rights concerning your personal data, including the:

• Right to Access: The right to request an official copy of all personal details we hold about you.
• Right to Correction: The right to demand correction of inaccurate, incomplete, or out-of-date records.

All data access or correction inquiries must be routed directly to our privacy desk at info@velanto-boutique.com. We will process your written request free of charge within 30 calendar days.

6. Regulatory Oversight and Complaints

If you believe Velanto has breached our privacy obligations under the APPs and you are unsatisfied with our internal resolution, you have an unrestricted right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC). The OAIC can be contacted via their official website at www.oaic.gov.au.