Privacy policy

Last updated: 7 October 2026

This Privacy Policy explains how Luxinova – a brand of Gabrisa Limited, registered in Hong Kong (Company Registration Number 77665906) – collects, uses, stores and shares your personal information when you visit or buy from www.luxinova-au.com. We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, because our customer service team is based in the Netherlands, the EU General Data Protection Regulation (GDPR).

1. What we collect

Order details: your name, email address, delivery address, phone number (optional), and the details of what you ordered.
Personalisation details: the names, text, dates and photos you enter or upload to personalise a product. Photos may show you, your family, your children or your pets.
Payment details: handled by our payment providers (Shopify Payments, PayPal and the wallets they support). We never see or store your full card number.
Customer service: emails and messages you send us, including any attachments.
Marketing preferences: whether you've subscribed to our emails.
Website data: IP address, device and browser type, pages viewed, products added to the cart, and the source you came from – collected through cookies and similar technologies (see section 7).

2. Why we collect it

To make, ship and deliver your order and to send you order and shipping confirmations.
To personalise your product with the details and photos you provide.
To answer your questions and handle returns, claims and complaints.
To send you marketing emails, only if you've opted in (see section 6).
To measure and improve our website, products and advertising.
To prevent fraud and meet our legal obligations.

Under the GDPR our legal bases are performance of a contract (your order), your consent (marketing emails), our legitimate interests (improving the store, measuring our advertising, preventing fraud) and legal obligations (tax and accounting records).

3. Who we share it with – including overseas

We only share what's needed for the purpose. Because our business operates from Europe and products are made overseas, your information is disclosed to recipients outside Australia:

Our production and fulfilment partner (Asia) receives your name, delivery address, phone number (if provided) and your personalisation details and photos, solely to make and ship your order.
Shopify Inc. (Canada/USA) hosts our store, stores order data and processes payments through Shopify Payments.
Payment providers – Shopify Payments, PayPal and wallet providers such as Apple Pay and Google Pay – process your payment.
Carriers – our shipping partners and Australia Post – receive your name, address and phone number to deliver the parcel.
Google (Google Analytics, Google Ads, Google Merchant Center) and Meta (Facebook/Instagram advertising) receive website usage data and, where you've consented, hashed contact details, to measure and target our advertising.
Email service providers send our order emails and – if you've subscribed – our newsletters.
Our customer service team in the Netherlands handles your messages.

We don't sell your personal information to anyone. Where recipients are outside Australia, we take reasonable steps to ensure they protect your information, including contractual commitments and – for transfers from the EU – the safeguards required by the GDPR.

4. Your photos

Photos you upload are used only to make your product. They're stored with your order on Shopify and with our production partner for as long as needed to produce, deliver and – if there's a claim – remake the item, and are deleted from our production partner's systems after that. We never use your photos for marketing without your explicit permission. Please only upload photos you have the right to use.

5. How long we keep it

Order and invoice data: 7 years, as required by tax law. Customer-service correspondence: up to 2 years after the last contact. Marketing data: until you unsubscribe. Website analytics: per the retention settings of Google Analytics (currently 14 months for user-level data).

6. Marketing emails (Spam Act 2003)

We only send marketing emails if you've opted in – for example by ticking the newsletter box at checkout (never pre-ticked) or subscribing in the footer. Every email identifies Luxinova / Gabrisa Limited as the sender and contains a working unsubscribe link; unsubscribe requests are honoured within 5 business days. We don't send marketing SMS.

7. Cookies and tracking

Our store uses cookies and similar technologies that are necessary for the shop to work (cart, checkout, security), as well as analytics and advertising cookies from Shopify, Google and Meta. We use these to understand how visitors use our store, to measure the results of our advertising and to show you relevant ads on other websites and on social media.

You can block or delete cookies at any time in your browser settings. You can also limit personalised ads through your Google ad settings (myadcenter.google.com) and your Facebook and Instagram ad preferences, and opt out of Google Analytics with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout). Blocking essential cookies may stop the checkout from working.

8. Your rights

You can ask us to access, correct or delete the personal information we hold about you, to restrict or object to its use, to receive a copy in a portable format, and to withdraw consent at any time. Email support@luxinova-au.com; we respond within 30 days. If you're unhappy with how we've handled your information, you can complain to us first and, if unresolved, to the Office of the Australian Information Commissioner (oaic.gov.au) or, for GDPR matters, to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Security

Our store runs on Shopify with TLS encryption, PCI-DSS-compliant payment processing and access controls. No system is perfectly secure; if a data breach is likely to cause you serious harm, we'll notify you and the OAIC as required by the Notifiable Data Breaches scheme.

10. Children

Our store is intended for adults. We don't knowingly collect personal information from children under 16, other than the names and photos parents or guardians provide to personalise a gift.