Privacy policy

Privacy Policy

Last updated: 1 September 2026

This online store is operated by Emma Rose Smith ("Emma Rose Smith", "we", "our", "us"). Together with all related content, products and services, we refer to everything as the "Services".

Our store runs on the e-commerce platform of Shopify Inc., which hosts our website and supports us in providing the Services.

In this Privacy Policy we describe what personal data we collect, why we collect it, how we use and protect it and what rights you have. By visiting our website or placing an order, you confirm that you have read and understood this policy.

1. What information we collect

Depending on how you interact with our store, we may collect:

Identity and contact data: your name, email address, phone number, billing address and shipping address.
Payment data: card details, payment confirmations and transaction records, processed through secure payment providers.
Account data: login details, password, preferences and saved settings.
Purchase data: products you view, add to your cart, buy, return or exchange.
Technical data: IP address, browser type, device and operating system, cookie identifiers and the way you navigate our website.
Support data: the content of emails or messages you send to our customer service team, including any attachments.

This information reaches us in three ways:

Directly from you, for example when you place an order, create an account or contact us.
Automatically, through cookies and similar technologies while you browse our website.
Through third parties that help us run the store, such as Shopify and our payment providers.

2. Why we use your information

We use your personal data for the following purposes:

Running the store: processing payments, shipping your orders and handling returns, exchanges and refunds.
Improving your experience: remembering your preferences, personalising content and suggesting products that may interest you.
Communication: sending order confirmations and shipping updates, answering your questions and providing support.
Marketing: where permitted, sending you offers or showing you relevant ads. You can unsubscribe at any time via the link in our emails.
Protection and fraud prevention: protecting accounts, detecting suspicious activity and keeping payments secure.
Legal obligations: complying with applicable laws, responding to legitimate requests and enforcing our Terms of Service.

3. Who we share your information with

We only share personal data when necessary, with:

Shopify Inc., which hosts our store and processes orders on our behalf.
Payment providers and delivery partners, including Australia Post, so that payments can be completed and parcels can reach you.
Service providers for IT, analytics, advertising and email, who support the operation of our store.
Public authorities or courts, where we are legally required to do so.

All partners are contractually required to protect your information and to use it only for the agreed purpose. We never sell or rent your personal data to anyone.

4. Shopify

Because our store is built on Shopify, Shopify also collects and processes certain data (such as cookies and device information) to run the platform and provide analytics. You can read more about how Shopify handles personal data, and exercise your rights regarding that data, at https://www.shopify.com/legal/privacy.

5. Overseas transfers

We are based in the Netherlands, and in some cases your personal data may be stored on servers located outside Australia, for example in the European Union, Canada or the United States. When this happens, we take reasonable steps to ensure that your data continues to receive an adequate level of protection, in line with the Australian Privacy Principles and, where applicable, recognised legal safeguards such as Standard Contractual Clauses.

6. How long we keep your information

We keep personal data only for as long as necessary. In practice this means we keep data:

to fulfil your orders and provide the Services,
to comply with legal and tax obligations,
to resolve any disputes, and
to enforce our agreements.

When information is no longer needed, it is securely deleted or anonymised.

7. Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles you have the right to:

request access to the personal data we hold about you,
have inaccurate data corrected,
ask us to delete your personal data where we no longer need it,
opt out of direct marketing at any time, and
ask questions or raise concerns about how we handle your data.

Because our company is established in the European Union, you can also rely on the rights provided by the General Data Protection Regulation (GDPR), including the right to restrict or object to certain processing, to withdraw consent and to receive your data in a portable format.

To exercise any of these rights, email us at info@emmarosesmith.com. To protect your data, we may first ask you to verify your identity. You will never be treated differently for exercising your privacy rights. If you are not satisfied with how we handle your data, you can lodge a complaint with the Office of the Australian Information Commissioner (www.oaic.gov.au) or, in the European Union, with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl).

8. How we protect your information

We take appropriate technical and organisational measures to keep your personal data safe. At the same time, no online system can ever be completely secure, so we cannot promise absolute protection of data transmitted over the internet.

9. Minors

Our Services are not directed at children under 18 and we do not knowingly collect their personal data. If you believe a minor has provided us with personal data, contact us so we can remove it.

10. Changes to this policy

We may revise this Privacy Policy from time to time, for example when our activities or legal requirements change. The most recent version will always be published on this page with an updated "Last updated" date. In the event of significant changes, we will communicate this clearly on our website.

11. Contact us

If you have questions about this Privacy Policy or about how we handle your data, you can contact us here:

Store name: Emma Rose Smith
Email: info@emmarosesmith.com

Business information

Company name: Atelier Emma & Rose
Company registration number (KvK): 34369650
Business address: Donizettihof 26, 2402 EK Alphen aan den Rijn, Netherlands
Email: info@emmarosesmith.com

Emma Rose Smith is a trading name of Atelier Emma & Rose