Privacy policy
Privacy Policy
Last updated: October 8, 2026
Zelbourne LLC ("Zelbourne", "we", "us", "our") operates this website and online store. This Privacy Policy explains what personal information we collect, why and how we collect it, who we share it with, how we protect it, and the rights you have. It applies to everyone who uses our website, including customers in Australia and the United States.
We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), other applicable US state privacy laws, and the EU and UK General Data Protection Regulation (GDPR) wherever it applies to you.
1. What Information We Collect
| Type | Examples |
|---|---|
| Contact details | Name, email address, phone number |
| Address details | Billing address, shipping address |
| Order information | Products viewed, added to cart, purchased, returned or exchanged; order history |
| Payment information | Payment method and transaction details (full card numbers are handled by our payment providers, never stored by us) |
| Account information | Login email, password (encrypted), saved preferences |
| Communications | Emails, contact form messages, phone calls and voicemails with our team |
| Device information | IP address, browser type, device type, operating system, language |
| Browsing behaviour | Pages visited, time on site, links clicked, how you arrived at our site, items you viewed |
| Cookie and pixel data | Cookie identifiers, advertising IDs, and interaction data collected by cookies and tracking pixels |
2. How We Collect It
- Forms you fill in: checkout, account sign-up, newsletter sign-up, contact form, and return or exchange requests
- Direct contact: when you email, call or message us
- Cookies: small files stored in your browser that remember your cart, preferences and visits
- Pixels and tags: small pieces of code on our website, including the Meta Pixel and Google tag (Google Analytics and Google Ads), which record how you use our site
- Service providers: Shopify, payment providers and carriers, who send us information needed to complete your order (for example, delivery status)
3. Why We Collect It
| Information | Purpose | Legal basis (GDPR) |
|---|---|---|
| Contact and address details | Process and deliver your order, send order and shipping updates | Performance of a contract |
| Payment information | Take payment, issue refunds, prevent fraud | Performance of a contract; legitimate interests |
| Order information | Fulfil orders, handle returns and exchanges, provide customer support | Performance of a contract |
| Account information | Create and manage your account | Performance of a contract |
| Communications | Respond to your questions and resolve issues | Legitimate interests |
| Email address (marketing) | Send newsletters and offers, only if you subscribe | Consent |
| Device information and IP address | Keep our website secure, prevent fraud, show prices in your currency | Legitimate interests |
| Browsing behaviour | Improve our website and products, understand what customers like | Legitimate interests; consent where required |
| Cookie and pixel data | Measure our advertising and show you personalised ads | Consent where required |
| All of the above, as needed | Meet tax, accounting and legal obligations | Legal obligation |
4. How We Use Your Data for Personalised Advertising
We use advertising platforms, including Google Ads and Meta (Facebook and Instagram), to show you ads for Zelbourne products. With your consent where required, the Google tag and Meta Pixel on our website collect information about the pages you visit and the products you view or buy. Google and Meta use this to:
- Show you Zelbourne ads on their platforms and partner websites (remarketing)
- Find new customers with similar interests (similar or lookalike audiences)
- Measure how well our ads perform
We may also share a hashed (encrypted) version of your email address with Google or Meta to match ads to existing customers. We never share your payment details for advertising.
How to opt out of personalised ads:
- Use our opt-out page: https://zelbourne.com/pages/data-sharing-opt-out
- Turn on Global Privacy Control (GPC) in your browser. We treat it as an opt-out for that browser.
- Google: adjust your settings at https://adssettings.google.com
- Meta: adjust your settings at https://www.facebook.com/adpreferences
- Industry opt-out: https://optout.aboutads.info
5. Who We Share It With
We share personal information only where needed to run our business:
| Recipient | Why |
|---|---|
| Shopify (store platform) | Hosts our website and processes orders. See https://www.shopify.com/legal/privacy |
| Payment providers (including Shopify Payments) | Process payments and refunds securely |
| Carriers (Australia Post, Evri, Speedex, USPS and international tracked carriers) | Deliver your order |
| Our manufacturing partner | Ship orders directly when an item is out of stock at our warehouse |
| Google (Analytics, Ads) | Website analytics and advertising |
| Meta (Facebook, Instagram) | Advertising |
| Email and customer support tools | Send order emails and newsletters, and manage support requests |
| Authorities and professional advisers | Where required by law, or to protect our rights |
We do not sell your personal information for money. Under the CCPA, sharing data with advertising partners for personalised ads may count as "sharing". You can opt out at any time using the links in Section 4.
International transfers: your information may be processed in Australia, the United States and other countries where our service providers operate. Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. How We Keep It Secure
- Our website uses SSL/TLS encryption (https) for all data sent between your browser and our store.
- Payments are processed by PCI-DSS compliant providers. We never see or store your full card number.
- Account passwords are encrypted.
- Access to customer data is limited to team members and service providers who need it to do their job.
No system is completely secure, but we take reasonable steps to protect your information from loss, misuse and unauthorised access.
7. How Long We Keep It
| Information | Retention period |
|---|---|
| Order, payment and transaction records | 7 years, to meet tax and accounting laws |
| Account information | Until you delete your account |
| Marketing email list | Until you unsubscribe |
| Customer support messages | 2 years after your last contact |
| Cookie and analytics data | Up to 2 years, depending on the cookie |
After these periods, we securely delete or anonymise your information.
8. Cookies
| Cookie type | What it does | Can you turn it off? |
|---|---|---|
| Essential | Makes the site work: cart, checkout, login, security | No, the site needs these |
| Preferences | Remembers settings such as currency and region | Yes |
| Analytics | Helps us understand how visitors use our site (Google Analytics, Shopify Analytics) | Yes |
| Advertising | Measures and personalises ads (Meta Pixel, Google Ads) | Yes |
You can manage cookies through our cookie banner (where shown) or your browser settings. Blocking some cookies may affect how our website works.
9. Your Rights and How to Exercise Them
You have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Delete your personal information
- Receive a copy of your data in a portable format
- Opt out of personalised advertising and the "sharing" of your data
- Withdraw consent at any time, where we rely on consent
- Object to or restrict certain processing (GDPR)
- Unsubscribe from marketing emails, using the link in any email
How to make a request, including data deletion:
- Email support@zelbourne.com with the subject line "Privacy Request", or call +61 3 4709 6413 (AU) or +1 504 944 5873 (US).
- Tell us which right you want to use (for example, "delete my data") and the email address linked to your orders or account.
- We'll verify your identity by matching the details you give us to our records.
- We'll confirm your request and complete it within 30 days (GDPR and Australia) or 45 days (CCPA). If we need more time, we'll tell you why.
Some information may need to be kept to meet legal obligations, such as tax records. If so, we'll tell you what we're keeping and why.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, use and share; the right to delete it; the right to correct it; the right to opt out of its sale or sharing; and the right to limit the use of sensitive personal information. We do not sell personal information, and we do not use sensitive personal information to infer characteristics about you. We will never discriminate against you for exercising your rights. You may also use an authorised agent to make a request on your behalf.
EU and UK residents (GDPR): you can lodge a complaint with your local data protection authority.
Australian residents: if you're not satisfied with our response to a privacy complaint, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
10. Children
Our website is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated date.
12. Contact Us About Privacy
The person responsible for handling your personal data is our Privacy Officer.
Zelbourne LLC — Privacy Officer
Email: support@zelbourne.com
Phone: +61 3 4709 6413 (AU) | +1 504 944 5873 (US)
Address: Warehouse C/441-459 Kororoit Creek Rd, Altona VIC 3018, Australia
Registered office (US): 30 N Gould St, Ste 59971, Sheridan, WY 82801, United States