Privacy Policy

Last updated: 29 October 2026

At Rose & Maree Sydney we respect your privacy and we are committed to protecting your personal information.

Rose & Maree Sydney, a trading name of LFS Commerce (Frouwesân 123, 8939 ES Leeuwarden, the Netherlands), is the party responsible for the personal data described in this policy.

This policy explains how we collect, use, disclose, store and protect personal information when you visit our website, place an order, contact us or otherwise use our services. We process personal data on the legal bases set out in the General Data Protection Regulation (“GDPR”). Because our customers are in Australia, we also handle personal information in line with the Australian Privacy Principles (“APPs”) under the Privacy Act 1988 (Cth).

By using our website you acknowledge the practices described in this policy.

For questions or requests about privacy, please contact us through our contact page.

1. Personal information we collect

Depending on how you use our website and services, we may collect the following categories of personal information.

Information you give us directly

For example:

• your first and last name;
• your email address;
• your phone number, if you provide one;
• your delivery address;
• your billing address;
• your order details;
• your account details, where available;
• items you have purchased or returned;
• your communications with our customer service team;
• reviews or other content you choose to send us;
• any other information you choose to give us.

Payment information

When you make a purchase, your payment details are processed by our payment providers through Shopify’s secure checkout.

Depending on the method you choose, these providers may include card networks, payment processors, PayPal, Apple Pay, Google Pay, Shop Pay or other services shown at checkout.

Rose & Maree Sydney does not store complete payment card details on its own systems.

Information collected automatically

When you visit or use our website, some information may be collected automatically, including:

• your IP address;
• your browser type;
• device information;
• your operating system;
• your approximate location, based on your IP address;
• the pages you visit;
• the products you view;
• the site or source that referred you to us;
• your interactions with the website;
• your activity in the shopping cart;
• cookie identifiers;
• other technical or usage information.

This information may be collected through cookies, pixels, tags, analytics tools and similar technologies.

To learn more, please read our Cookie Policy.

2. How we use your personal information

We may process personal information for purposes such as:

• processing and fulfilling your orders;
• handling payments;
• providing shipping and tracking information;
• managing returns and refunds;
• communicating with you about your order;
• responding to your questions and requests for help;
• providing and maintaining our website;
• personalising your shopping experience;
• improving our products, website and services;
• keeping our website and transactions secure;
• detecting and preventing fraud, abuse and unauthorised transactions;
• keeping accounting, tax and business records;
• meeting our legal obligations;
• measuring website performance;
• carrying out statistical analysis;
• measuring the effectiveness of our advertising;
• sending you marketing emails if you have subscribed to them.

Where consent is required for a particular activity, we ask for it before we process your information for that purpose.

3. Legal bases for processing (GDPR)

Where the GDPR applies, we process your personal data on one or more of the following legal bases.

Performance of a contract

We process data where it is necessary to:

• manage your order;
• receive your payment;
• deliver your purchase;
• manage returns or refunds;
• provide support relating to your purchase.

Legitimate interests

We may process data where it is reasonably necessary for our legitimate interests, including:

• preventing fraud;
• keeping our website secure;
• improving our services;
• understanding how customers use our website;
• running our business.

When we rely on legitimate interests, we always take your rights into account.

Consent

Where required, we rely on your consent for activities such as:

• marketing emails;
• advertising cookies;
• analytics cookies;
• certain forms of personalised advertising.

Where processing is based on consent, you can withdraw it at any time.

Legal obligations

We may process or retain personal data where necessary to comply with laws, regulations, tax and accounting obligations, orders from public authorities or other legal requirements.

4. Who we share personal information with

We may share personal information with third parties where it is reasonably necessary to run our business and provide our services. These include the following.

Online store and website providers

Our online store is built on Shopify.

Shopify may process certain personal information to provide hosting, online store functions, checkout, security, payment, analytics and related services.

Payment providers

We may share transaction information with payment processors, banks, card networks and digital payment services so that your payment can be authorised and processed.

Shipping and tracking providers

We may share information such as:

• your name;
• your delivery address;
• your phone number;
• your email address;
• your order details

with our suppliers, logistics partners, delivery carriers and tracking services, where this is needed to prepare and deliver your order and to let you follow your parcel.

Analytics and advertising partners

Depending on your privacy and cookie choices, we may use analytics, advertising and marketing partners, such as Meta, to:

• understand how our website is used;
• measure website performance;
• measure the effectiveness of our advertising;
• help prevent fraud;
• show or measure relevant ads.

Where required by law, non-essential tracking technologies are only used after we have obtained your consent.

Email marketing providers

If you subscribe to our emails, we use an email marketing service to send them. We only share your details with this service for that purpose.

Advisers and professional service providers

We may share information with accountants, lawyers, insurers, financial institutions, consultants or other professionals where reasonably necessary.

Legal requirements

We may disclose personal information where necessary to:

• comply with applicable law;
• respond to a lawful request or legal process;
• enforce our agreements;
• investigate fraud or unlawful activity;
• protect our rights, our customers, our business or others.

5. Sale, sharing and targeted advertising

We do not sell personal information in exchange for money.

However, depending on the technologies used on our website, some disclosures of personal information to advertising or analytics partners may be considered “sharing” or use for targeted advertising under some privacy laws.

Where this applies, you can opt out through the cookie and privacy controls available on our website, or by contacting us through our contact page.

6. International transfers and overseas recipients

Rose & Maree Sydney works with service providers, product suppliers, technology providers and logistics partners who may be located in different countries.

As a result, your personal information may be processed or stored outside Australia, in the countries where our providers operate. Data protection laws in those countries may differ from the laws in Australia.

Where we disclose personal information to overseas recipients, we take reasonable steps to make sure they handle it in a way that is consistent with the APPs. Where the GDPR requires additional safeguards for an international transfer, we rely on transfer mechanisms recognised by law or other appropriate safeguards.

7. How long we keep personal information

We keep personal information only for as long as is reasonably necessary for the purposes for which it was collected, including to:

• fulfil orders;
• provide customer support;
• manage returns or refunds;
• keep accounting and transaction records;
• prevent fraud;
• resolve disputes;
• enforce our agreements;
• meet legal, tax, accounting or regulatory obligations.

Different categories of information may therefore be kept for different periods.

When personal information is no longer reasonably needed, we delete, de-identify or securely destroy it, subject to our legal obligations.

8. Cookies and similar technologies

We use cookies and similar technologies to make our website work and to improve it.

These technologies may be used to:

• keep your shopping cart contents;
• remember your preferences;
• keep our website secure;
• understand how our website is used;
• measure website performance;
• support our marketing activities;
• measure or personalise advertising.

Where required by law, we ask for your consent before using non-essential cookies.

You can manage some preferences through the cookie and privacy settings on our website and through your browser settings.

For more information, please read our Cookie Policy.

9. Marketing emails

If you subscribe to our emails, we use your email address to send you information about:

• products;
• promotions;
• exclusive offers;
• new collections;
• other marketing messages.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the message, or by contacting us through our contact page.

Unsubscribing from marketing emails does not affect service messages, such as order confirmations, shipping updates or replies from customer service.

10. Data security

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure;
• destruction.

Information sent through our website is protected with appropriate security technologies, including encrypted connections where applicable.

Payments are handled by third-party providers using their own systems and security standards.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. Your rights

Depending on where you live and the law that applies, you may have rights over your personal information.

These include the right to:

• ask for access to the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your personal information;
• ask us to restrict certain processing;
• object to certain processing;
• ask for data portability;
• withdraw your consent where processing is based on consent;
• object to certain forms of targeted advertising;
• make a complaint to a competent supervisory authority.

These rights are subject to the requirements and exceptions set out in the law.

To exercise a right, please contact us through our contact page.

Before acting on some requests we may need to verify your identity.

Where required by law, we respond within the legal time limits.

12. Rights under the GDPR

Where the GDPR applies to our processing of your personal data, you have rights including:

• access;
• rectification;
• erasure;
• restriction of processing;
• data portability;
• objection to certain processing;
• withdrawal of consent.

You also have the right to lodge a complaint with a competent data protection supervisory authority, for example the authority in your country of residence.

Exercising these rights does not affect the lawfulness of processing carried out before you withdrew your consent.

13. Australian customers and the Australian Privacy Principles

We also handle personal information about our Australian customers in line with the Australian Privacy Principles. This means that you can:

• ask us what personal information we hold about you and request access to it;
• ask us to correct information that is inaccurate, out of date or incomplete;
• ask us how we handle your personal information or make a privacy complaint.

Please make any of these requests through our contact page. We will respond within a reasonable time.

If you are not satisfied with our response to a complaint, you may contact the Office of the Australian Information Commissioner (www.oaic.gov.au).

We will not treat you unfairly for exercising your privacy rights.

14. Third-party websites and services

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content or security of websites or services run by others.

We encourage you to read the privacy policies of third parties before giving them your personal information.

15. Changes to this policy

We may update this policy from time to time to reflect changes in:

• our business practices;
• our services;
• technology;
• our providers;
• applicable laws and regulations.

When we update this policy, we change the “Last updated” date at the top of this page.

Where required by law, we may notify you of material changes in a more specific way.

16. Contact us

For questions about this policy, our privacy practices, or to exercise a right, please contact us through our contact page.

Rose & Maree Sydney (LFS Commerce)
Frouwesân 123
8939 ES Leeuwarden
The Netherlands
Email: info@rosemareesydney.com
Contact page: /pages/contact