Privacy Policy

Last updated: 3 July 2026

Clair de lune Pty Ltd (ACN 676 594 826), trading as CLAIR DE LUNE (“CLAIR DE LUNE”, “we”, “us” or “our”), respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit or make a purchase from www.clairdelunejewelry.com (the “Site”), visit one of our retail locations, communicate with us or otherwise interact with our products and services.

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as other applicable privacy and data protection laws.

By using our Site or providing personal information to us, you acknowledge the practices described in this Privacy Policy.

1. Personal Information We Collect

The types of personal information we collect depend on how you interact with us.

Information You Provide Directly

We may collect information that you provide when you place an order, create an account, subscribe to marketing, contact us, submit a review or otherwise interact with us, including:

• your name;

• email address;

• telephone number;

• billing and delivery address;

• account login details;

• order history and transaction details;

• product preferences, wish lists and saved items;

• customer service enquiries and correspondence;

• gift recipient details provided by you;

• marketing and communication preferences;

• survey, competition or promotion responses; and

• product reviews, photographs, comments or other content you choose to submit.

Please ensure that you have permission before providing us with personal information about another person, such as a gift recipient.

Payment Information

Payments are processed by third-party payment service providers, such as Shopify Payments, PayPal or other payment options displayed at checkout.

We do not ordinarily receive or store your complete payment card number. Payment providers may provide us with limited transaction information, such as the payment method, payment status, billing details and a partial or tokenised card reference.

Information Collected Automatically

When you visit or use the Site, we and our service providers may automatically collect certain technical and usage information, including:

• your IP address;

• browser type and version;

• device type and operating system;

• device and advertising identifiers;

• screen resolution and language settings;

• pages viewed and links selected;

• search terms and browsing activity;

• referring websites or advertising sources;

• shopping cart activity;

• approximate location derived from your IP address;

• date, time and duration of visits; and

• information about how you interact with our emails, advertisements and Site.

Some of this information may be personal information where it identifies you or can reasonably be linked to you.

Information From Third Parties

We may also receive personal information from third parties, including:

• our e-commerce platform;

• payment and fraud-prevention providers;

• delivery and fulfilment providers;

• email and SMS marketing platforms;

• analytics and advertising partners;

• social media platforms;

• retail and customer service systems; and

• business partners where you have authorised the disclosure.

2. How We Collect Personal Information

We generally collect personal information:

• directly from you;

• automatically when you use our Site;

• through cookies, pixels and similar technologies;

• through our service providers and business partners;

• when you communicate with us by email, telephone, social media or another channel;

• when you visit one of our physical locations; and

• from publicly available sources where permitted by law.

Where it is lawful and practical, you may interact with us without identifying yourself. However, we may be unable to process an order, arrange delivery or provide certain services without the information reasonably required for those purposes.

3. How We Use Personal Information

We may collect, hold and use personal information for purposes including:

• processing, confirming and fulfilling orders;

• arranging delivery and providing tracking updates;

• processing payments, refunds and returns;

• creating and managing customer accounts;

• responding to questions, requests and customer service matters;

• verifying customer or transaction information;

• detecting and preventing fraud, misuse and security incidents;

• managing product availability and pre-orders;

• providing personalised product recommendations and Site content;

• maintaining and improving our Site, products and customer experience;

• measuring Site performance and understanding customer engagement;

• administering competitions, promotions, surveys and loyalty initiatives;

• sending service-related communications;

• sending marketing communications where permitted;

• displaying and measuring relevant advertising;

• maintaining business, accounting, tax and transaction records;

• enforcing our terms, policies and legal rights;

• complying with applicable laws, regulations and lawful requests; and

• managing a proposed or completed business transaction, such as a merger, acquisition, restructuring or sale.

We may also use information for another purpose that is disclosed to you at the time of collection, with your consent or where otherwise permitted by law.

4. Email and SMS Marketing

Where you have subscribed, consented or where otherwise permitted by law, we may send you marketing communications about new collections, product releases, promotions, events, abandoned carts and other CLAIR DE LUNE updates.

You may unsubscribe from marketing communications at any time by:

• selecting the unsubscribe link in a marketing email;

• following the opt-out instructions in an SMS, including replying “STOP” where that option is available;

• updating your communication preferences where available; or

• contacting us at support@clairdelunejewelry.com.

We will process valid unsubscribe requests within the period required by applicable law. Under Australian spam laws, this will generally be within five working days.

You do not need to create an account, provide additional personal information or pay a fee to unsubscribe, other than any ordinary cost associated with sending a standard message.

Unsubscribing from marketing does not prevent us from sending necessary non-promotional communications, such as order confirmations, delivery updates, security notices, return information or responses to your enquiries.

Standard message and data rates charged by your mobile service provider may apply to SMS communications.

5. Cookies and Similar Technologies

We and our service providers use cookies, pixels, tags, software development kits and similar technologies on the Site.

These technologies may be used to:

• operate essential Site functions;

• remember your cart and preferences;

• keep you signed in to your account;

• maintain Site security;

• understand how visitors use the Site;

• measure Site and campaign performance;

• personalise content and recommendations;

• identify technical issues;

• prevent fraud; and

• display and measure relevant advertising.

Essential Cookies

Essential cookies support functions such as navigation, account access, shopping carts, checkout, payments and security. Disabling these cookies may prevent parts of the Site from operating correctly.

Analytics Cookies

Analytics technologies help us understand how visitors interact with the Site, which pages are viewed and how the Site can be improved.

Advertising Cookies and Pixels

We may use advertising technologies provided by platforms such as Meta and Google. These technologies may collect online identifiers and information about your activity on the Site to help us:

• measure advertising performance;

• understand whether an advertisement resulted in a visit or purchase;

• create advertising audiences; and

• display more relevant advertisements on third-party websites and platforms.

Where required, we will obtain consent before using non-essential cookies or provide an appropriate way to manage or opt out of these technologies.

You may be able to manage cookies through the cookie preference tool displayed on the Site, where available, or through your browser and device settings. Blocking cookies may affect certain Site features.

6. Targeted Advertising and Data Sharing

We do not sell personal information to data brokers in exchange for money.

However, we may disclose limited online activity information, device identifiers or advertising identifiers to analytics and advertising partners to provide and measure targeted advertising.

Under certain overseas privacy laws, some of these activities may be described as a “sale”, “sharing” of personal information or targeted advertising, even where no money is exchanged.

Where applicable, you may opt out through our cookie preference tool, browser settings or by contacting us.

7. Publicly Submitted Content

Information that you voluntarily submit for public display, such as a product review, social media mention, photograph or comment, may be visible to other users and may be shared or indexed by third parties.

Even after content is removed from our Site, copies may remain in search engine caches, archives, social media platforms or records retained by other users.

Please do not include sensitive information or information about another person in publicly submitted content unless you have permission to do so.

8. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide our services.

Recipients may include:

• e-commerce and website providers, including Shopify;

• payment providers, including Shopify Payments, PayPal and other payment services selected at checkout;

• delivery and fulfilment providers, including Australia Post, UPS and other courier or logistics providers;

• email, SMS and customer communication providers, including platforms such as Omnisend;

• analytics and advertising providers, including Google and Meta;

• cloud hosting, data storage and technology providers;

• fraud prevention, cybersecurity and identity-verification providers;

• customer service and retail management providers;

• professional advisers, including accountants, auditors, insurers and legal advisers;

• regulators, courts, government agencies and law enforcement authorities where required or authorised by law; and

• potential purchasers, investors or advisers involved in a proposed or completed business sale, merger, restructuring or acquisition.

We require service providers to handle personal information only for authorised purposes and subject to appropriate confidentiality, privacy and security obligations where reasonably practicable.

We may also disclose information with your consent or as otherwise permitted or required by law.

9. Overseas Disclosure

Some of our service providers, business partners and technology systems are located outside Australia or may store and process information in other countries.

These countries may include:

• the United States;

• Canada;

• New Zealand;

• the United Kingdom;

• countries within the European Economic Area; and

• other countries in which our customers, delivery providers or service providers operate.

The privacy and data protection laws of another country may differ from those in Australia.

Where applicable, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements. However, some exceptions may apply under the Privacy Act or other applicable laws.

10. Data Security

We take reasonable technical, administrative and physical measures designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include:

• access controls and staff permissions;

• password and account security measures;

• encryption in transit where appropriate;

• secure payment processing;

• system monitoring and security testing;

• staff confidentiality requirements;

• service provider assessments; and

• procedures for responding to suspected data incidents.

No internet transmission, digital platform or storage system can be guaranteed to be completely secure. You should take reasonable steps to protect your account credentials and avoid reusing the same password across different services.

Please contact us promptly if you believe your account or personal information may have been compromised.

Where a data breach is subject to the Australian Notifiable Data Breaches scheme or another applicable notification requirement, we will assess and respond to the incident and provide notifications where required by law.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• complete transactions and provide customer service;

• maintain order, tax, accounting and business records;

• comply with legal and regulatory obligations;

• manage disputes, returns, warranties and chargebacks;

• prevent fraud and security incidents; and

• establish, exercise or defend legal claims.

Retention periods may vary depending on the type of information and the purpose for which it is held.

Where personal information is no longer required and we are not legally required to retain it, we will take reasonable steps to destroy it securely or de-identify it.

Information may remain temporarily in secure backups until those backups are overwritten or deleted through our normal retention cycle.

12. Access, Correction and Privacy Requests

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

Depending on your location and applicable law, you may also have rights to:

• request deletion or de-identification;

• withdraw consent;

• object to or restrict certain processing;

• opt out of direct marketing or targeted advertising;

• request a portable copy of certain information; or

• lodge a complaint with a privacy or data protection regulator.

To submit a request, email support@clairdelunejewelry.com with the subject line Privacy Request.

We may need to verify your identity before processing a request. This is to protect personal information from unauthorised access or disclosure.

We will respond within a reasonable period and within any timeframe required by applicable law.

We may be unable to fulfil all or part of a request where an exception applies, including where we are required to retain information by law, the request would affect another person’s privacy or the request is otherwise permitted to be refused. Where required, we will explain the reason for the refusal and available complaint options.

13. Account and Data Deletion

You may request deletion of your customer account or personal information by contacting us.

Deletion rights are not absolute. We may retain certain information where reasonably necessary or required for:

• tax, accounting and legal recordkeeping;

• completing outstanding transactions;

• processing returns, refunds or warranties;

• managing disputes or chargebacks;

• preventing fraud and security incidents;

• enforcing agreements; or

• complying with applicable laws and regulatory requirements.

Where we cannot delete information immediately, we may restrict its use or retain it securely only for the required purpose.

14. Privacy Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us at support@clairdelunejewelry.com with the subject line Privacy Complaint.

Please include enough information for us to understand and investigate your concern.

We will acknowledge and investigate your complaint and respond within a reasonable period. We may contact you for further information where necessary.

If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner or another privacy or data protection authority in your jurisdiction.

15. Children’s Privacy

Our Site and services are intended for a general audience and are not directed to children under the age of 13.

We do not knowingly collect personal information directly from children under 13 without appropriate parental or guardian consent.

Customers under 18 should use the Site and make purchases only with the involvement and permission of a parent or legal guardian.

If you believe that a child has provided personal information to us without appropriate consent, please contact us so that we can review and, where appropriate, delete the information.

16. Third-Party Websites and Platforms

The Site may contain links to websites, social media platforms, payment services or applications operated by third parties.

We do not control the privacy, security or data-handling practices of third parties. This Privacy Policy does not apply to websites or services that we do not operate.

We recommend reviewing the privacy policy of each third-party website or service before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, technologies, services or legal obligations.

The revised policy will be published on this page with an updated “Last updated” date.

Where changes are material and required by law, we may provide additional notice through the Site, by email or through another appropriate communication channel.

18. Contact Us

For privacy enquiries, requests or complaints, please contact:

Privacy Officer
Clair de lune Pty Ltd
ACN 676 594 826
145 Condamine Street
Brookvale NSW 2100
Australia

Email: support@clairdelunejewelry.com