Privacy Policy
Last Updated: September 2026
APP 1 — Open and Transparent Management of Personal Information
This Privacy Policy outlines how Cervanique, operated by Joekim ABRIGO, manages personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For any privacy-related inquiries, please contact us at joekimabrigo9988@outlook.com. Our postal address is 15 George Street, Liverpool, 2170, Australia. This policy is available on our website and linked from the footer on every page.
APP 2 — Anonymity and Pseudonymity
Where practicable, you may interact with us anonymously or by pseudonym (for example, when browsing the site or viewing this Privacy Policy). Some interactions — placing an order, customer service requiring account lookup, processing returns — necessarily require identifying information.
APP 3 — Collection of Solicited Personal Information
We collect personal information to provide our services effectively. This may include:
- Identifiers: Name, email address, phone number, and shipping address.
- Transaction Data: Order history and payment method (last 4 digits only).
- Technical Data: IP address, browser type, and device information.
- Inferred Preferences: For marketing purposes, based on your interactions with our site.
APP 4 — Dealing with Unsolicited Personal Information
If we receive unsolicited personal information, we will assess whether it could have been collected under APP 3. If not, we will destroy or de-identify the information as soon as practicable, provided it is lawful and reasonable to do so.
APP 5 — Notification of Collection
We notify individuals about the collection of personal information at the time of collection, such as during signup or checkout processes.
APP 6 — Use or Disclosure
We use personal information for primary purposes such as order fulfilment and customer service. We do NOT use third-party advertising pixels or analytics tools (no Meta Pixel, no Google Analytics, no Google Ads, no TikTok Pixel). If this changes, we will update this Privacy Policy and notify our customers. We may share information with service providers like Shopify (for payment processing and platform hosting) and Australia Post (for fulfilment).
APP 7 — Direct Marketing
We comply with the Spam Act 2003 (Cth) by obtaining express opt-in consent for promotional emails. Each commercial message includes a functional unsubscribe link, and we process unsubscribe requests within 5 working days. SMS marketing requires separate express consent.
APP 8 — Cross-Border Disclosure
We may disclose personal information to overseas recipients, including: Shopify Inc. (Canada/US) for payment processing and platform hosting; Australia Post (within Australia, no overseas disclosure for fulfilment). Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to your information (APP 8.1). You may withdraw consent for cross-border disclosure by contacting us — note this may limit our ability to provide certain services.
APP 9 — Government Identifiers
We do not collect or use Commonwealth government-issued identifiers (Tax File Number, Medicare number, Centrelink Reference Number, Veterans Affairs number, etc.) as defined under APP 9. If we ever need to verify your identity for a privacy access request, we will use your customer-service email and order number.
APP 10 — Quality
We take reasonable steps to ensure that the personal information we collect is accurate, up-to-date, and complete. Customers can update their information by contacting us at joekimabrigo9988@outlook.com.
APP 11 — Security
We retain personal information for as long as necessary to fulfil our business purposes and comply with legal obligations, typically up to 7 years for tax records as required by the ATO. We use encryption to protect data at rest and in transit. We comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act and will notify affected individuals and the OAIC within 30 days of becoming aware of an eligible breach.
APP 12 — Access
Customers can request access to their personal information by contacting us at joekimabrigo9988@outlook.com. We may need to verify your identity using your customer-service email and order number. We aim to respond to access requests within 30 days.
APP 13 — Correction
Customers can request correction of their personal information by contacting us at joekimabrigo9988@outlook.com. We will take reasonable steps to correct the information to ensure it is accurate, up-to-date, and complete.
Complaints and OAIC Escalation
If you have a complaint about our handling of your personal information, please contact us first at joekimabrigo9988@outlook.com. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992. For more details, please refer to our Complaint Handling page.