Last updated: 19/01/2025

Bella vesta (“we,” “us,” “our”) operates this store and website, including all related information, content, features, tools, products, and services to provide you (“you,” “your,” “the customer”) with a curated shopping experience (the “Services”). Our store is powered by Shopify, which enables us to process transactions and provide the Services.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you access or use the Services, make a purchase, or communicate with us.
If there is any conflict between our Terms of Service and this Privacy Policy regarding personal information, this Privacy Policy controls.

By accessing or using the Services, you confirm that you have read and understood this Privacy Policy.

1. Personal Information We Collect

“Personal information” means any information that identifies or can reasonably be linked to an individual.
We may collect the following categories of personal information as permitted by applicable laws in Australia, the United States, the United Kingdom, and Canada:

A. Contact Information

• Name

• Billing and shipping address

• Email address

• Phone number

B. Financial Information

• Payment card details

• Payment confirmation

• Transaction details

C. Account Information

• Username & password

• Preferences

• Security questions (if applicable)

D. Transaction Information

• Items viewed, added to cart, or purchased

• Returns, exchanges, and cancellations

• Order history

E. Communications

• Information you provide when contacting customer support or interacting with us

F. Device Information

• IP address

• Browser type

• Device identifiers

• Network information

G. Usage Data

• Pages viewed

• Time and date of visits

• Interaction behavior

• Referring URLs

Personal information does not include de-identified or aggregated data.

2. Sources of Personal Information

We collect personal information from:

• Direct interactions (creating an account, placing orders, communicating with us)

• Automatic tracking technologies (cookies, device analytics)

• Service providers (Shopify, payment processors, logistics providers)

• Business partners or third parties

3. How We Use Your Personal Information

Depending on where you live and how you interact with the Services, we may use your personal information for the following purposes:

A. Provide, Improve, and Personalize the Services

• Process payments

• Fulfill orders

• Ship products

• Manage accounts

• Handle returns and exchanges

• Customize your shopping experience

• Recommend products

• Improve website features

B. Marketing and Advertising

• Send promotional emails (you may unsubscribe anytime)

• Deliver targeted advertisements

• Perform analytics, including Shopify-enhanced personalization tools

C. Security & Fraud Prevention

• Authenticate accounts

• Detect and prevent fraud, malicious activity, or unauthorized access

• Maintain platform integrity

D. Communication

• Customer support assistance

• Order confirmations and notifications

• Account-related messages

E. Legal Compliance

• Respond to legal requests

• Meet regulatory and tax obligations

• Enforce terms and policies

4. How We Disclose Personal Information

We may disclose personal information to third parties under the following circumstances:

A. Service Providers

Including Shopify, payment processors, hosting providers, IT services, logistics partners, marketing partners.

B. Business & Marketing Partners

Where permitted by applicable laws, including for personalized advertising.
You may have rights to opt-out of targeted ads depending on your jurisdiction.

C. With Your Consent

For example, when integrating with social media logins or shipping providers.

D. Affiliates or Corporate Group Members

E. Legal, Compliance, and Business Transactions

Including mergers, acquisitions, asset transfers, bankruptcy, or legal obligations.

5. Relationship with Shopify

Bella Vesta is hosted by Shopify, which collects and processes personal information necessary to operate the Services.
Shopify may process your personal information across global locations.

Shopify may also use personal information from your interactions across the Shopify ecosystem for:

• Security

• Analytics

• Fraud prevention

• Personalized advertising

Shopify is responsible for processing done under their systems.

You can review Shopify’s Privacy Policy here:
https://www.shopify.com/legal/privacy

You may exercise your regional data rights through:
https://privacy.shopify.com/en

6. Third-Party Links

Our Services may contain links to external websites we do not control.
We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

Information shared via social platforms may be visible to others depending on your privacy settings.

7. Children’s Data

Our Services are not intended for children under the age of majority in your region (includes under 18 in AU, UK, CA, and most US states).

We do not knowingly collect data from minors.

If you are a parent and believe your child submitted personal information, contact us and we will delete it.

8. Security and Retention

No system is perfectly secure, but we implement industry-standard safeguards.

We retain personal information only as long as necessary to:

• Maintain your account

• Provide the Services

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

9. Your Rights and Choices (AU, US, UK, CA)

Your rights depend on where you live:

You may have the right to:

• Access your personal information

• Request deletion

• Request correction

• Request portability

• Opt-out of marketing emails

• Limit or opt-out of targeted advertising

• File complaints with your regional privacy authority

We may need to verify your identity before processing your request.

Authorized agents may act on your behalf where allowed by law.

We will not discriminate against you for exercising your privacy rights.

10. Complaints

If you have concerns about our data practices, you may contact us directly.
You may also have the right to escalate complaints to your region’s data protection authority:

• Australia: OAIC

• United States: State Attorney General

• United Kingdom: ICO

• Canada: OPC or provincial authority

11. International Transfers

Your personal information may be processed in countries outside your residence.

For transfers from the EEA or UK, we use lawful mechanisms such as:

• EU Standard Contractual Clauses (SCCs)

• UK International Data Transfer Addendum

12. Changes to This Policy

We may update this Privacy Policy periodically.
The “Last updated” date reflects the most recent changes.

Continued use of the Services indicates acceptance of the updated policy.

13. Contact Information

If you have any questions, requests, or concerns about this Privacy Policy:

Company Information

Contact Us