Privacy policy

Last Updated: August 11, 2026

Privacy Policy

This Privacy Policy complies with the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) regulated by the Office of the Australian Information Commissioner (OAIC). It governs how Lorenya (“we”, “us”, “our”) collects, stores, uses and protects your personal information when you visit and purchase from our website www.lorenya.com, and outlines your statutory privacy rights as an Australian consumer.
By accessing our website and completing any transaction, you acknowledge that you have read, understood and agreed to this Privacy Policy.

1. Business & Data Controller

Lorenya is an Australian online retail business located in Adelaide, South Australia, acting as the exclusive data controller for all personal data collected via this platform.
Website: www.lorenya.shop
Support Email: hello@lorenya.shop
Phone: +61 8 8017 2080
Address: 41 Currie Street, Adelaide SA 5000, Australia
All privacy requests including data access, correction, deletion and formal complaints can be submitted via our official support email.

2. Personal Information We Collect

We only collect information reasonably necessary for legitimate business operations in compliance with Australian privacy laws:
  • Voluntarily Provided Information: Full name, email address, contact number, Australian billing and delivery address, suburb, state, postcode, order details, customer support messages and return application records.
  • Transaction Data: Order numbers, purchase records and checkout preferences. We do not store full credit card details. All payment processing is handled by ASIC-regulated Australian payment providers under strict PCI DSS security standards.
  • Automated Technical Data: Device information, browser type, IP address, website browsing logs and cookie data for website optimisation, security maintenance and fraud prevention.

3. Purpose of Data Usage

Your personal data is only used for lawful business purposes permitted under Australian federal law:
  • Process, pack and deliver orders to all Australian states and territories
  • Respond to customer enquiries regarding products, shipping, refunds and after-sales services
  • Send order confirmations, tracking updates and official policy notifications
  • Prevent fraudulent transactions and maintain website operational security
  • Deliver promotional communications only with your explicit opt-in consent
  • Retain business and financial records to meet Australian GST taxation and legal record-keeping obligations

4. Third-Party Disclosure

We never sell, rent or trade your personal information. We only share limited essential data with trusted Australian regulated third parties, including authorised payment processors, Australia Post, local courier services and web analytics providers. All third-party partners are contractually required to comply with the Australian Privacy Act 1988.

5. Cookies & Tracking

This website uses cookies to improve user browsing experience. You may disable or clear cookies through your browser settings at any time. All tracking activities fully comply with Australian online privacy regulations.

6. Your Statutory Privacy Rights

Under the Privacy Act 1988, you have the right to access your personal data, correct inaccurate information, request data deletion, opt out of marketing communications, and lodge a privacy breach complaint with the OAIC.

7. Data Retention

Financial and order records are retained for 7 years to comply with Australian tax laws. Customer service records are stored for 12 months after case resolution. Marketing contact data is permanently deleted upon user unsubscription.

8. Data Security & Breach Notification

We implement end-to-end SSL encryption and secure server protocols to protect user data. In the event of a notifiable data breach, we will complete mandatory notifications to the OAIC as required by Australian law.

9. Children’s Privacy

Our website and products are intended for users aged 18 and above. We do not knowingly collect personal information from minors. Any unauthorised minor data will be permanently deleted upon request.

10. Policy Updates

We reserve the right to update this policy to align with amendments to Australian privacy legislation. All updates will be published on this page with the latest effective date.