Last updated: 27 October 2026

1. Introduction

Welcome to Hidden Aura.

Hidden Aura ("we", "us" or "our") operates the website https://hiddenaura.com.au and its associated online store, products, services and customer communications (collectively, the "Services").

Hidden Aura is an Australian-based online boutique offering crystals, gemstone jewellery and accessories to customers in Australia, the United States and New Zealand.

Our online store is powered by Shopify, which provides the ecommerce infrastructure used to deliver our Services.

We respect your privacy and are committed to handling personal information responsibly, transparently and in accordance with applicable privacy and consumer protection laws.

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information, including how we use advertising technologies and share certain information with third-party service providers and marketing partners.

By accessing our Services, you acknowledge that you have been provided with this Privacy Policy. Where required by law, we will seek your consent before collecting or using information for particular purposes.

2. Personal Information We Collect

Depending on how you interact with Hidden Aura, we may collect and process the following categories of personal information.

Contact Information

• Full name

• Email address

• Telephone number

• Billing address

• Shipping address

• Other contact details you voluntarily provide

Order and Transaction Information

• Products viewed, selected or purchased

• Shopping cart and checkout activity

• Order history and transaction details

• Payment status and payment method

• Delivery preferences and tracking information

• Returns, refunds and customer service enquiries

Payment information is processed through Shopify and supported payment providers. We do not ordinarily have access to complete payment card details.

Account Information

Where customer accounts are available, we may process account identifiers, login credentials, preferences, settings and other information associated with your account.

Device and Technical Information

When you visit our website, certain information may be collected automatically, including:

• IP address

• Browser type and version

• Device type and operating system

• Device and advertising identifiers

• Approximate geographic location derived from technical information

• Referring websites and traffic sources

• Pages visited and time spent on our website

• Cookies and similar identifiers

Shopping and Website Activity

We may collect information relating to:

• Products and collections viewed

• Searches performed on our website

• Items added to or removed from shopping carts

• Checkout initiation and progress

• Completed purchases

• Interactions with advertisements and promotional campaigns

Communications

We collect information you provide when contacting us, submitting enquiries, subscribing to marketing or communicating with our customer support team.

3. How We Collect Personal Information

We may collect personal information:

Directly from you: When you place an order, enter checkout information, subscribe to our mailing list, create an account or contact us.

Automatically: Through website functionality, cookies, pixels, analytics software and related technologies.

From Shopify and service providers: When they process orders, payments, shipping, website activity or customer communications on our behalf.

From advertising and marketing partners: When you interact with our advertisements, subject to their privacy practices and applicable law.

From other permitted sources: Where you have authorised collection or where applicable law otherwise permits it.

4. How We Use Your Personal Information

We use personal information for the following purposes.

Processing and Fulfilling Orders

To:

• Process purchases and payments

• Confirm and manage orders

• Arrange packaging, shipping and delivery

• Provide shipping notifications and tracking

• Manage returns, refunds and order enquiries

• Detect payment or order errors

Operating and Improving Our Store

To:

• Maintain website functionality

• Understand how customers use our website

• Improve the shopping experience

• Personalise relevant product recommendations

• Analyse product and sales performance

• Identify technical issues

• Improve our products and services

Customer Support

To respond to enquiries, resolve complaints, provide after-sales assistance and communicate information relating to orders or customer accounts.

Marketing and Promotions

To:

• Send promotional emails where permitted

• Provide subscriber offers and discounts

• Promote new products and collections

• Measure advertising campaign performance

• Display relevant advertisements on external platforms

• Understand the effectiveness of our marketing activities

Security and Legal Compliance

To:

• Prevent and investigate fraud

• Protect customer accounts and transactions

• Comply with legal and regulatory obligations

• Maintain necessary business records

• Respond to lawful requests and resolve disputes

• Enforce applicable store terms

We use personal information only where we have an appropriate basis under applicable law, including where processing is necessary to fulfil an order, comply with legal obligations, pursue permitted legitimate business purposes or act with your consent where required.

5. Advertising, Analytics and Tracking Technologies

Hidden Aura uses advertising, analytics and tracking technologies to understand website activity, measure marketing performance and display more relevant advertisements.

Some of these technologies involve sharing personal information or online activity data with third-party advertising providers.

Meta — Facebook and Instagram

We use Meta advertising technologies, including the Meta Pixel and related conversion measurement integrations.

These technologies may collect or receive information about:

• Pages and products viewed

• Items added to shopping carts

• Checkout and purchase events

• Purchase values and transaction identifiers

• Browser, device and network identifiers

• Contact identifiers where supported and permitted

Meta may use information received to measure advertising performance, attribute conversions, create advertising audiences and display relevant advertisements across Facebook, Instagram and other Meta services, subject to applicable law and privacy choices.

TikTok

We use TikTok advertising and conversion tracking technologies, including the TikTok Pixel and associated integrations where enabled.

Information shared with TikTok may include website visits, product interactions, shopping cart activity, checkout events, purchase information and technical identifiers.

TikTok may use this information to measure advertising performance, attribute conversions and deliver relevant advertising according to its own privacy practices and applicable law.

Google

We may use Google services, including Google Analytics, Google Ads, Google Merchant Center and associated measurement technologies, where configured and enabled.

These services may process website activity, advertising interaction data, device information, transaction events and related identifiers for analytics, reporting, advertising attribution or personalised advertising.

The particular Google data processing activities depend on which services and features are active.

Shopify Analytics and Advertising Features

Shopify processes certain information about store visitors and customers to support website functionality, analytics, ecommerce operations and other enabled services.

Where Shopify enhanced advertising features or Shopify Network Intelligence are enabled, Shopify may also use information about interactions with our store, Shopify and other participating merchants to provide enhanced services, including advertising-related services.

Shopify may act as an independent controller of certain information for its own services, as explained in its privacy documentation.

Information Shared With Advertising Partners

Depending on the integrations enabled, information shared with advertising providers may include:

• IP addresses and browser information

• Device and advertising identifiers

• Cookie identifiers

• Website interactions and product activity

• Shopping cart and checkout events

• Order values and purchase events

• Transaction identifiers

• Email addresses or telephone numbers where supported and lawfully permitted

Certain identifiers may be hashed before transmission. Hashing does not necessarily make information anonymous.

We do not intentionally provide complete payment card details to advertising platforms.

Advertising partners may process information under their own privacy policies and may combine information received from Hidden Aura with information they collect through their services, subject to applicable law.

Your Advertising Privacy Choices

Depending on your location and applicable law, you may have the right to:

• Reject or withdraw consent for certain non-essential cookies and tracking

• Opt out of certain targeted advertising activities

• Opt out of the sale or sharing of personal information as those terms are defined under applicable privacy laws

• Request that we stop using your information for direct marketing

• Access or request deletion of certain personal information

Where available, you may manage your preferences through the privacy controls on our website.

You may also manage advertising preferences directly through Meta, TikTok and Google.

To make a privacy-related request, contact hello@hiddenaura.com.au.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate and improve our Services.

These may include:

Essential cookies: Necessary for shopping cart functionality, checkout, security, payments and basic website operation.

Analytics cookies: Used to understand website traffic, visitor behaviour and store performance.

Advertising cookies: Used to measure advertisements, understand conversions and deliver relevant promotional content.

Preference cookies: Used to remember certain settings and shopping preferences.

Some cookies are placed by Shopify or other service providers, while others may be associated with third-party advertising or analytics platforms.

You may be able to manage cookies through our website's privacy controls or your browser settings.

Where consent is legally required, we will seek the appropriate consent before using relevant non-essential tracking technologies.

Disabling certain cookies may affect some website features.

7. Email Marketing and Promotional Communications

Hidden Aura may send promotional emails about new arrivals, special offers, product collections and other store news.

Where required by law, we obtain consent before sending marketing communications.

Customers who subscribe to our mailing list may receive promotional messages through Shopify's email marketing and customer communication services.

You can unsubscribe from promotional emails at any time using the unsubscribe link included in those messages.

You may also request removal from our marketing communications by contacting hello@hiddenaura.com.au.

Unsubscribing from marketing does not prevent us from sending essential transactional communications, including order confirmations, shipping notifications or important service updates.

Information collected for an order is not automatically treated as permission to send promotional communications.

8. Abandoned Carts and Checkout Communications

When you begin checkout or provide contact information during the shopping process, Shopify may record certain shopping cart and checkout details.

Where enabled and permitted by applicable law, Hidden Aura may use this information to send abandoned checkout reminders or related transactional or marketing communications.

Marketing-related abandoned checkout messages will be subject to applicable consent, unsubscribe and electronic marketing requirements.

We may also use aggregated or permitted checkout activity information to understand store performance and improve customer experience.

9. How We Share Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business, provide services, conduct permitted marketing or meet legal obligations.

Shopify

To host and operate our online store, process transactions, maintain customer accounts, support analytics and deliver enabled ecommerce services.

Payment Providers

To securely process payments, verify transactions, prevent fraud, issue refunds and manage payment-related disputes.

Shipping and Fulfilment Providers

Including Australia Post, MyPost Business, customs and international shipping service providers, and related delivery partners.

We may share necessary information such as recipient names, addresses, contact details, order contents, shipment values and customs declaration information.

For international shipments, information may also be processed by customs and import-related service providers, including Zonos where used.

Advertising and Analytics Partners

Including Meta, TikTok, Google and other providers used to measure campaigns, analyse website activity or support permitted advertising.

Email Marketing Providers

To manage mailing lists, send permitted communications and process subscription preferences.

Professional and Technical Service Providers

Including website support, IT services, security providers, accountants, legal advisers and other businesses assisting with our operations.

Legal and Regulatory Authorities

Where disclosure is required or permitted by law, including to customs authorities, courts, regulators or law enforcement bodies.

Business Transfers

Personal information may be disclosed as part of an actual or proposed business sale, merger, restructuring or transfer, subject to applicable legal requirements.

We do not sell customer contact lists to unrelated businesses for their independent direct marketing.

Certain disclosures to advertising platforms may nevertheless constitute a "sale", "sharing" or "targeted advertising" activity under some privacy laws, even where no money is exchanged for the information.

Where applicable, we provide legally required choices concerning these activities.

10. Relationship With Shopify

Hidden Aura uses Shopify to provide and operate its online store.

Shopify processes personal information relating to customer interactions, transactions, accounts and use of our Services.

Information submitted through our store may be transmitted to Shopify and its authorised service providers, including providers located outside Australia.

Shopify may use certain personal information for its own permitted purposes or enhanced services, as explained in Shopify's privacy policies and applicable service terms.

Where Shopify Network Intelligence and associated enhanced services are enabled, Shopify may process information across participating merchant interactions to support those services.

For more information, please review:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal:
https://privacy.shopify.com/

Requests relating to information processed independently by Shopify may also be directed to Shopify through its privacy portal.

11. International Data Transfers

Hidden Aura is based in Australia and serves customers in Australia, the United States and New Zealand.

Personal information may be transferred to, stored or processed in other countries where Shopify, payment processors, advertising partners, shipping providers or other service providers operate.

These countries may have different privacy and data protection laws from those in your place of residence.

Where required by applicable law, we take reasonable steps to ensure overseas disclosures are subject to appropriate safeguards, including contractual protections or other recognised arrangements.

For New Zealand customers, overseas disclosures will be handled in accordance with applicable requirements under the Privacy Act 2020, including Information Privacy Principle 12 where relevant.

Where required, we will obtain appropriate authorisation or use another lawful mechanism before transferring personal information to an overseas recipient.

12. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Our store uses Shopify's ecommerce infrastructure and supported payment processing services.

We also seek to limit access to personal information to authorised individuals and service providers who require it for legitimate business purposes.

No website, electronic transmission or storage system can be guaranteed to be completely secure.

If you believe your information has been compromised or your account has been accessed without authorisation, please contact us promptly.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

• Processing and fulfilling orders

• Providing customer support

• Maintaining required accounting, tax and transaction records

• Managing disputes, refunds and fraud prevention

• Meeting legal or regulatory obligations

• Providing marketing services where permitted

Retention periods may vary depending on the category of information, the reasons for collection and applicable legal requirements.

When information is no longer reasonably required, we will take appropriate steps to delete, de-identify or securely dispose of it, subject to lawful retention requirements.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

These may include:

Access

You may request access to personal information we hold about you.

Correction

You may request correction of inaccurate or incomplete personal information.

Deletion

You may request deletion of eligible personal information, subject to applicable legal exceptions and retention obligations.

Data Portability

Where applicable law provides this right, you may request a copy of certain personal information in an appropriate format.

Marketing Opt-Out

You may request that we stop using or disclosing your personal information for direct marketing purposes.

Advertising and Data Sharing Choices

Where required by applicable law, you may opt out of certain targeted advertising, personal information sales or sharing activities.

Consent Withdrawal

Where processing depends on consent, you may withdraw that consent, subject to applicable legal limitations.

Non-Discrimination

Where prohibited by law, we will not unlawfully discriminate against you for exercising your privacy rights.

Identity Verification

Before fulfilling certain requests, we may need to verify your identity or the authority of a person acting on your behalf.

We will respond to requests within the periods required by applicable law.

To exercise your rights, contact hello@hiddenaura.com.au.

15. Australian Privacy Rights

Customers in Australia may have rights under the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable laws, to the extent those laws apply to Hidden Aura.

These may include rights to request access to or correction of personal information and protections concerning direct marketing and overseas disclosure.

Where the Australian Privacy Principles apply, requests and complaints will be handled in accordance with those requirements.

If you are dissatisfied with how we handle a privacy concern, you may be able to contact the Office of the Australian Information Commissioner.

Website: https://www.oaic.gov.au/

16. New Zealand Privacy Rights

Customers in New Zealand may have rights under the Privacy Act 2020 and other applicable privacy laws.

These may include rights concerning access to and correction of personal information, collection notices and overseas disclosure.

Where applicable, Hidden Aura will comply with relevant New Zealand privacy requirements.

New Zealand customers may contact the Office of the Privacy Commissioner for information about their rights.

Website: https://www.privacy.org.nz/

17. United States Privacy Rights

Residents of certain United States states may have additional rights under applicable consumer privacy laws.

Depending on the law and whether it applies to Hidden Aura, these may include rights to:

• Know what personal information is collected and disclosed

• Access personal information

• Correct inaccurate information

• Delete eligible personal information

• Obtain copies of certain information

• Opt out of the sale or sharing of personal information

• Opt out of certain targeted advertising

• Limit certain uses of sensitive personal information

• Appeal decisions concerning privacy requests

Where required by applicable law, we will honour recognised opt-out preference signals and provide appropriate methods to exercise applicable privacy rights.

Requests may be submitted to hello@hiddenaura.com.au or through privacy controls made available on our website.

We will not unlawfully discriminate against customers for exercising their applicable rights.

18. Children's Privacy

Our Services are intended for a general shopping audience and are not directed to children.

We do not knowingly collect personal information from children in violation of applicable laws.

If you are a parent or guardian and believe a child has provided us with personal information that should not have been collected, please contact us.

We will review the request and take appropriate steps in accordance with applicable law.

We do not knowingly sell or share the personal information of individuals under 16 in circumstances requiring authorisation that has not been obtained.

19. Third-Party Websites and Services

Our website may contain links to social media platforms, external websites and third-party services.

These services may operate independently from Hidden Aura and maintain their own privacy policies and terms.

We recommend reviewing the privacy practices of third-party websites before submitting personal information.

Hidden Aura is not responsible for the independent privacy practices of third parties that we do not control.

20. Privacy Complaints

If you have concerns about how Hidden Aura collects, uses, stores or discloses personal information, please contact us.

We will review privacy complaints and respond within a reasonable period or within any timeframe required by applicable law.

Where you remain dissatisfied, you may have the right to raise the matter with an appropriate privacy regulator or supervisory authority in your jurisdiction.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business operations, service providers, advertising technologies, legal obligations or privacy practices.

When we make changes, we will publish the revised policy on our website and update the date shown at the beginning.

Where required by law, we will provide additional notice or obtain consent before making material changes to relevant processing activities.

22. Contact Information

For questions about this Privacy Policy, privacy-related requests or concerns regarding your personal information, please contact:

Hidden Aura

Email: hello@hiddenaura.com.au

Website: https://hiddenaura.com.au/

Location: Victoria, Australia

We aim to respond to enquiries as promptly as possible during Australian business days.