Privacy policy

Melanie Harris operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Melanie Harris is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

This Privacy Policy applies to individuals interacting with our Services in the United States, United Kingdom, Canada, and Australia, subject to applicable privacy and data protection laws.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details. Full payment card details are handled by our payment processors and are not directly stored by us.
  • Account information including your username, password, security questions, preferences and settings, where applicable.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases.

Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites. We obtain consent where required by applicable law, including relevant marketing and electronic communications requirements in the United Kingdom, Canada, Australia, and the United States. You may opt out of marketing communications at any time using the unsubscribe link in any email, by replying STOP to any text message, or by contacting us using the details below.

Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services.

Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.

Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, and to enforce or investigate potential violations of our terms or policies.

Legal Bases for Processing in the United Kingdom. Where the UK General Data Protection Regulation (UK GDPR) applies, we process personal information on appropriate lawful bases, including performance of a contract, compliance with legal obligations, our legitimate interests where those interests are not overridden by your rights, and your consent where required.

For example, we generally rely on contractual necessity to process orders, legal obligations to maintain required records, legitimate interests to maintain security and prevent fraud, and consent for certain marketing communications, analytics, and advertising activities where required by law.

For customers in the United States, Canada, and Australia, we process personal information in accordance with applicable federal, state, provincial, and territorial privacy laws, including any applicable consent, notice, and opt-out requirements.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
  • With business and marketing partners to provide marketing services and advertise to you, where permitted by law. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.
  • When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
  • With our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Where personal information is disclosed to service providers or other recipients located outside your country of residence, we take steps to comply with applicable international data transfer requirements.

Sale or Sharing of Personal Information

Certain US state privacy laws define "sale" and "sharing" broadly. Our use of advertising and analytics technologies that disclose device and usage information to third parties for targeted advertising may be considered a "sale" or "sharing" of personal information under those laws.

Where applicable US privacy laws provide these rights, you may opt out of the sale or sharing of your personal information and of targeted advertising at any time by using the "Do Not Sell or Share My Personal Information" link on our website, by adjusting your cookie preferences, or by contacting us using the details below.

We recognize Global Privacy Control (GPC) and other legally recognized opt-out preference signals sent by your browser or device as valid requests to opt out of the sale or sharing of personal information where required by applicable law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

For customers in the United Kingdom, Canada, and Australia, the collection, use, and disclosure of personal information for advertising or other marketing purposes are subject to applicable consent, transparency, and privacy requirements.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/consumer-privacy-policy.

Depending on where you live, you may exercise certain rights with respect to your personal information via the Shopify Privacy Portal at https://privacy.shopify.com/en.

Cookies

We use cookies and similar tracking technologies to operate our Services, remember your preferences, and for analytics and advertising purposes. You can manage cookie preferences through the cookie preference controls on our site or through your browser settings at any time. Disabling certain cookies may affect how the Services function.

For customers in the United Kingdom, non-essential cookies and similar tracking technologies, including those used for analytics and advertising, are subject to applicable consent requirements. Where required, these technologies are activated only after you provide consent.

For customers in the United States, Canada, and Australia, cookies and tracking technologies are used in accordance with applicable privacy laws, including relevant consent, transparency, and opt-out requirements.

You may change or withdraw your cookie preferences using the available privacy controls on our website, subject to the technologies and settings available.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information from children under the age of 13, in accordance with the Children's Online Privacy Protection Act (COPPA) where applicable.

For customers in the United Kingdom, Canada, and Australia, we also comply with applicable laws governing the collection and processing of children's personal information, including any additional protections, age-related requirements, or parental consent obligations that apply.

If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details below to request that it be deleted, subject to any applicable legal obligations.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, tax, or reporting requirements, and to resolve disputes or enforce our agreements.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.

Retention periods may vary depending on the type of information, the purpose for which it was collected, and applicable legal obligations in the United States, United Kingdom, Canada, and Australia.

When personal information is no longer required, we delete, anonymize, or securely dispose of it in accordance with applicable law, unless continued retention is necessary or legally required.

Your Rights and Choices

Depending on where you live, and subject to exceptions and limitations provided by applicable law, you may have some or all of the following rights in relation to your personal information:

  • Right to Know / Access: You may request access to the personal information we hold about you, including the categories of personal information collected, the sources of that information, the purposes for collecting it, and the categories of third parties to whom we disclose it, where applicable.
  • Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
  • Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
  • Right to Data Portability: You may request a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.
  • Right to Opt Out of Sale or Sharing: Where applicable, you may direct us not to sell or share your personal information, including for targeted advertising purposes.
  • Right to Limit Use of Sensitive Personal Information: Where applicable, you may direct us to limit the use and disclosure of sensitive personal information.
  • Right to Non-Discrimination: We will not unlawfully discriminate against you for exercising applicable privacy rights, including by denying goods or services, charging different prices, or providing a different level of quality where prohibited by law.

United States

If you reside in the United States, you may have privacy rights under applicable federal or state legislation, including the California Consumer Privacy Act (CCPA), as amended, and other state privacy laws where they apply to our business.

These rights may include access, correction, deletion, data portability, and the right to opt out of certain sales, sharing, targeted advertising, or profiling activities, subject to applicable legal requirements and exceptions.

United Kingdom

If you reside in the United Kingdom, you may have rights under the UK GDPR and the Data Protection Act 2018, as amended, including:

  • The right to access your personal information.
  • The right to request correction of inaccurate or incomplete information.
  • The right to request erasure of personal information in certain circumstances.
  • The right to request restriction of processing.
  • The right to data portability where applicable.
  • The right to object to certain processing activities, including direct marketing.
  • The right to withdraw consent where processing is based on your consent.
  • Rights relating to certain automated decisions that have legal or similarly significant effects.

We will respond to requests under the UK GDPR within the applicable legal timeframe, generally one month, subject to permitted extensions and exceptions.

Canada

If you reside in Canada, you may have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable, and relevant provincial privacy legislation.

Depending on the applicable law, these rights may include:

  • Requesting access to personal information we hold about you.
  • Requesting correction of inaccurate or incomplete information.
  • Withdrawing consent for certain uses or disclosures of personal information, subject to legal or contractual restrictions.
  • Requesting information about our privacy practices and how your information is used or disclosed.
  • Submitting a complaint concerning the handling of your personal information.

Additional privacy rights may apply under provincial legislation, including Quebec privacy laws.

Australia

If you reside in Australia, you may have rights under the Privacy Act 1988 and the Australian Privacy Principles, where applicable.

These rights include requesting access to personal information we hold about you and requesting correction of inaccurate, outdated, incomplete, irrelevant, or misleading information, subject to applicable exceptions.

You may also contact us with a complaint about how we handle your personal information, and we will investigate and respond in accordance with applicable privacy requirements.

How to Exercise Your Rights

You may exercise applicable privacy rights by contacting us at support@melanieharris.co. To learn more about rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We may need to verify your identity before processing your request, which may involve asking you to confirm information already associated with your account or order.

You may also designate an authorized agent to submit a request on your behalf where permitted by applicable law; we may require the agent to provide proof of authorization and may require you to verify your own identity directly with us.

We will respond to privacy requests within the timeframes required by applicable law.

California residents: In addition to the rights above, California's "Shine the Light" law (Civil Code Section 1798.83) permits eligible residents to request information about certain disclosures of personal information to third parties for their direct marketing purposes. You may make such a request by contacting us using the details below.

Appeals

If we decline to act on your privacy request, you may appeal that decision by contacting us at the email address below with the subject line "Privacy Request Appeal." We will respond to your appeal in writing within the timeframe required by applicable law.

If your appeal is denied, you may contact the relevant privacy or data protection authority where applicable.

For customers in the United States, this may include the attorney general or applicable privacy regulator in your state.

For customers in the United Kingdom, complaints may be submitted to the Information Commissioner's Office (ICO) at https://ico.org.uk.

For customers in Canada, complaints may be submitted to the Office of the Privacy Commissioner of Canada or the relevant provincial privacy authority. Further information is available at https://www.priv.gc.ca.

For customers in Australia, complaints may be submitted to the Office of the Australian Information Commissioner (OAIC), where it has jurisdiction. Further information is available at https://www.oaic.gov.au.

International Transfers

Our head office is located in Australia, and we use service providers, including Shopify, that may store or process personal information outside your country of residence, including outside the United States, United Kingdom, Canada, and Australia.

Where we transfer your personal information internationally, we take steps designed to ensure it receives an appropriate level of protection in accordance with applicable privacy and data protection laws.

For transfers of personal information from the United Kingdom to countries without an applicable adequacy regulation, we use appropriate transfer safeguards where required, which may include the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses.

For personal information originating in Canada or Australia, international disclosures are handled in accordance with applicable Canadian privacy laws and Australian requirements governing overseas disclosures.

You may contact us for further information about international transfers and the safeguards applicable to your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date.

Contact Information

Store name: Melanie Harris

Registered address: Melbourne, Victoria, Australia

US Fulfillment Warehouse: 2824 Rockne St, San Diego, CA 92139, USA

Email: support@melanieharris.co

Customer service hours: Monday to Friday, 9:00 AM – 5:00 PM PT

We aim to respond to your inquiries within 24 hours.