Privacy policy

PRIVACY POLICY

Last updated: 30 August 2026

Poveda Olea respects your privacy. This policy explains how we collect, use, disclose and protect personal information in connection with our website and online store, in accordance with applicable Australian privacy laws and, where applicable, the Australian Privacy Principles (APPs).

1. Who we are

This policy applies to povedaolea.com.au and our online store, operated by Poveda Olea, a trading name of Iberify Pty Ltd (ABN 33 701 438 422), based in Brisbane, Queensland, Australia.

You can contact us at any time using the form.

2. Information we collect

Information you give us

Depending on how you interact with us, we may collect:

your name;
email address;
shipping and billing address;
phone number;
order and transaction details;
account credentials, where you create an account;
product reviews, photographs or other content you submit; and
the content of messages or enquiries you send to us.

Information collected automatically

When you visit or use our website, we may collect information such as:

device type;
browser type;
IP address;
pages viewed;
referring website; and
information about how you interact with our store.

This information may be collected using cookies and similar technologies.

Payment information

Payments are processed through our payment providers.

We do not generally receive or store your full payment card number.

Sensitive information

We do not intentionally collect sensitive information as defined under applicable privacy laws unless there is a lawful reason to do so.

Please do not send sensitive personal information to us unless it is necessary for your enquiry or transaction.

Where lawful and practicable, you may deal with us anonymously or using a pseudonym, for example when making a general enquiry.

However, we cannot fulfil an order without information necessary to process and deliver that order.

3. Why we use your information

We may collect, use and disclose personal information for purposes including:

processing, fulfilling and delivering your orders;
handling returns, refunds and customer enquiries;
providing customer support;
communicating with you about your orders and account;
sending marketing communications where you have consented or where otherwise permitted by law;
understanding how our store is used and improving our products, website and services;
detecting and preventing fraud, abuse and unauthorised activity;
maintaining the security and functionality of our website and systems; and
complying with our legal, tax, accounting and record-keeping obligations.

We may also use information for purposes reasonably related to these purposes where permitted by applicable law.

4. Who we share your information with

We may share personal information with service providers that help us operate our business, including:

Shopify — e-commerce platform, hosting, checkout and order management;
payment providers — to process payments and prevent fraudulent transactions;
Australia Post and other delivery carriers — to deliver orders and provide tracking;
Klaviyo — email marketing and customer communications where applicable;
Judge.me — product reviews where you choose to submit a review; and
analytics and technology providers — to help us understand and improve how our store is used.

We may also disclose personal information:

where required or authorised by law;
to professional advisers, where reasonably necessary and subject to appropriate confidentiality obligations; or
where reasonably necessary to protect our business, customers, systems or legal rights.

We do not sell your personal information.

5. Shopify

Our online store is powered by Shopify.

Shopify processes personal information on our behalf where necessary to provide e-commerce and related services to us.

Shopify may also collect and process certain information about your use of our store for its own purposes, including to provide, maintain, secure and improve its services.

Shopify is responsible for its own processing of personal information. You can review Shopify's privacy information and exercise applicable rights directly with Shopify through its privacy resources.

Where Shopify processes information on our behalf, we remain responsible for that processing in accordance with applicable law.

6. Overseas disclosure

Some of our service providers may store or process personal information outside Australia.

Depending on the services used and the location of our customers, overseas processing may include the United States, Canada, Ireland and other countries where our service providers or their service providers operate.

Before disclosing personal information overseas, we take steps that are reasonable in the circumstances to ensure that the overseas recipient handles the information consistently with the Australian Privacy Principles where required by applicable law.

Some overseas recipients may also be subject to privacy laws in their own jurisdictions.

7. Marketing and your choices

We send marketing communications only where you have opted in or where otherwise permitted by applicable law.

Marketing emails identify us and include an unsubscribe option.

You can opt out of marketing communications at any time by using the unsubscribe link in the relevant communication or by contacting us using the form.

If you opt out of marketing, we may still send you communications necessary to provide our services, such as order confirmations, shipping notifications, account-related messages or information relating to an existing transaction.

We comply with applicable requirements under the Spam Act 2003 (Cth).

8. Cookies and similar technologies

We use cookies and similar technologies to operate and improve our website.

These may include:

Essential cookies, which are required for functions such as the shopping cart and checkout;
Analytics cookies, which help us understand how visitors use our website; and
Marketing cookies, where applicable, which may help us measure and improve advertising and marketing activities.

Depending on your location and applicable law, you may be able to manage your cookie preferences through our website or your browser settings.

Disabling essential cookies may affect the functionality of our website, including shopping cart and checkout features.

Where consent is required by applicable law, we will seek consent before placing or using non-essential cookies or similar technologies.

9. Security and retention

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

However, no method of transmission or electronic storage is completely secure.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, or as required or permitted by law.

We retain financial, tax and transaction records for the periods required by applicable tax, accounting and corporate record-keeping laws. Certain company financial records may be required to be retained for seven years.

Marketing subscriber information is generally retained until you unsubscribe or it is no longer reasonably required for the relevant purpose.

When personal information is no longer required and there is no legal or other reason to retain it, we take reasonable steps to destroy or de-identify it.

10. Accessing and correcting your information

You may request access to personal information we hold about you.

You may also request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Please contact us by filling the form.

We will respond within a reasonable period and generally aim to respond within 30 days.

We may need to verify your identity before providing access or making a correction.

If we refuse access or correction where permitted by law, we will provide reasons for our decision.

11. Privacy complaints

If you believe that we have mishandled your personal information or breached an applicable privacy requirement, please contact us first at:

hello@povedaolea.com.au

We will acknowledge your complaint and aim to provide a response within 30 days.

If you are not satisfied with our response, or if your complaint remains unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).

You can contact the OAIC through its website or by phone on 1300 363 992.

You may also write to:

GPO Box 5218
Sydney NSW 2001
Australia

12. Data breaches

If we become aware of a data breach involving personal information, we will assess the incident and take the steps required by applicable law.

Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by Part IIIC of the Privacy Act 1988 (Cth).

We will also take reasonable steps to contain, investigate and remediate data breaches.

13. If you are in the European Union or the United Kingdom

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal information, you may have additional rights under applicable law.

Depending on the circumstances, these may include rights to:

access your personal information;
request correction;
request deletion;
request restriction of processing;
object to certain processing;
request data portability; and
withdraw consent where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Depending on the circumstances, our lawful bases for processing may include:

performing a contract with you;
complying with legal obligations;
your consent, including for certain marketing activities; and
our legitimate interests in operating, securing and improving our business and services.

Where applicable, you may lodge a complaint with the relevant data protection or supervisory authority in your country.

For UK residents, you may also contact the Information Commissioner's Office (ICO).

14. If you are in California

Where the California Consumer Privacy Act (CCPA), as amended, applies to our processing of your personal information, you may have additional rights under California law.

Depending on the circumstances, these may include the right to:

know what categories of personal information we collect, use and disclose;
request access to personal information;
request deletion of personal information;
request correction of personal information; and
opt out of the sale or sharing of personal information where applicable.

We do not sell personal information.

We will not discriminate against you for exercising privacy rights available to you under applicable California law.

15. Children

Our Services are not directed to children.

We do not knowingly collect personal information from children under 13.

If you believe that a child has provided us with personal information, please contact us filling the form.

We will take reasonable steps to investigate and delete the information where appropriate and where required by applicable law.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal requirements.

The current version will be published on our website.

When we make material changes, we will update the Last updated date at the top of this policy and provide any additional notice required by applicable law.