YEVÉ
Melbourne · Natural Skincare
YEVÉ
Melbourne · Natural Skincare
Your privacy matters to us. This policy explains what personal information YEVÉ Skincare collects, how we use it, and the choices you have regarding your data.
Last updated: May 2026
YEVÉ Skincare ("we", "us", or "our") is committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website (yeve.com.au) or purchase our products. By using our website, you agree to the practices described in this policy. This policy was last updated in May 2026.
We collect personal information that you provide directly to us, including your name, email address, shipping address, phone number, and order details when you place an order or create an account. We also automatically collect certain technical data when you visit our site, such as your IP address, browser type, pages visited, and time spent on the site. This is collected via cookies and analytics tools (see Section 6). You may visit our website without identifying yourself; however, some features such as checkout will require you to provide personal information.
We use your personal information to: process and fulfil your orders; send order confirmations, shipping updates, and refund notifications; respond to your enquiries and provide customer support; improve our website and product offerings; and comply with legal and regulatory obligations. We may use your email address to send you marketing communications about new products or promotions, but only with your explicit consent. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. We will not use your personal information for any purpose that is not related to the reason it was collected without your consent.
All payment transactions are processed securely through Stripe, Inc. (United States). We do not store your credit card or payment details on our servers. Stripe is a PCI-DSS Level 1 compliant payment processor and handles all financial data in accordance with industry-standard security practices. By completing a purchase, you also agree to Stripe's Privacy Policy, available at stripe.com/privacy.
To fulfil your orders, we share your name and shipping address with Australia Post. This information is used solely for the purpose of delivering your parcel and is not retained by us beyond what is necessary for that purpose. We do not sell, rent, or share your personal information with any third party for marketing or advertising purposes. We may disclose your information if required to do so by law, a court order, or in response to a valid request from a regulatory authority.
Some of the third-party service providers we use are based outside Australia and may store or process your personal information overseas. These include: Stripe, Inc. (United States) — payment processing; Vercel, Inc. (United States) — website hosting and infrastructure; Cloudinary Ltd (United States) — image hosting; Resend, Inc. (United States) — transactional email delivery; Google LLC (United States) — analytics (Google Analytics 4); Meta Platforms, Inc. (United States) — advertising analytics (Meta Pixel); MongoDB, Inc. (United States) — cloud database infrastructure. By providing us with your personal information, you consent to its disclosure to these overseas recipients. We take reasonable steps to ensure that overseas recipients handle your data in a manner consistent with the APPs, however we note that overseas privacy laws may differ from Australian law and we cannot guarantee the same level of protection in all circumstances. Where required, we rely on appropriate contractual protections with these providers.
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations. Order records are typically retained for seven years in accordance with Australian tax law. Account data is retained for as long as your account is active. You may request deletion of your personal data at any time, subject to any legal retention obligations that prevent us from complying immediately.
Under the Australian Privacy Act 1988 and the APPs, you have the right to: access the personal information we hold about you (APP 12); request correction of inaccurate, incomplete, or out-of-date information (APP 13); withdraw consent to marketing communications at any time; request deletion of your personal information where legally permissible; and make a complaint if you believe we have breached the APPs. To exercise any of these rights, please contact us using the details in Section 11. We will acknowledge your request within 5 business days and respond fully within 30 days.
We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. Our website uses HTTPS (TLS) encryption for all data transmitted between your browser and our servers. Access to personal data within our systems is restricted to authorised personnel only. We store data using industry-standard cloud infrastructure with appropriate access controls. In the event of a data breach that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this policy. We encourage you to review this policy periodically. If you continue to use our website after changes are posted, you accept the updated policy.
If you have a concern or complaint about how we have handled your personal information, please contact us first using the details below. We will investigate your complaint and respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
For any questions, concerns, access requests, or complaints regarding this Privacy Policy or our handling of your personal information, please contact us at: info@yeve.com.au. We aim to respond to all privacy-related enquiries within 2 business days.