Privacy Policy
Privacy Policy Arcane | Last updated: June 2025
At Arcane, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share your data when you visit our website or make a purchase from us.
Unless stated otherwise, providing your personal data to us is voluntary. You are not legally or contractually obliged to do so, and choosing not to provide certain information will generally have no consequences, except where noted below (for example, where data is required to complete an order).
"Personal data" means any information relating to an identified or identifiable natural person.
1. Server Log Files
You can browse our website without submitting any personal data. However, each time our website is accessed, your internet browser automatically transmits certain data to us or our hosting and IT service providers, which is stored in server log files. This includes:
- The name of the page visited
- Date and time of the request
- Your IP address
- Amount of data transferred
- Your internet service provider
This processing is carried out on the basis of our legitimate interests in ensuring the smooth operation of our website and improving our services (in accordance with applicable Australian Privacy Act principles and, where relevant, Article 6(1)(f) GDPR for visitors from the EU/UK).
Some data may be transferred to and stored in Canada. Such transfers are subject to appropriate safeguards, including an adequacy decision by the EU Commission where applicable.
2. Contact
Who is responsible for your data?
Arcane is the data controller responsible for your personal data. Contact details for our privacy representative can be found in our website's legal notice or by emailing us directly.
Contacting us by email
If you contact us by email, we will collect the personal data you provide (such as your name, email address, and message content) solely for the purpose of handling and responding to your enquiry.
If your enquiry relates to a purchase or an existing order, processing is carried out on the basis of contract performance. For all other enquiries, processing is based on our legitimate interest in responding to your request. Your data will be deleted once your request has been resolved, unless legal retention obligations apply.
Contact form
When you use our contact form, we collect the personal data you submit (name, email address, and message). This data is used exclusively to respond to your enquiry and will be deleted once your request has been resolved, unless you have consented to further use or legal retention requirements apply.
3. Orders
Collection and use of data for order processing
When you place an order with Arcane, we collect and use your personal data (such as your name, delivery address, email address, and payment information) only to the extent necessary to fulfil and process your order. Providing this data is required to enter into a contract with us — without it, we cannot process your order.
Your data may be shared with third-party service providers involved in fulfilling your order, including:
- Dropshipping and fulfilment partners who ship products on our behalf
- Payment service providers (see Section 4)
- IT service providers who support our platform and operations
We share only the minimum data necessary for each provider to perform their service. Some data may be transferred internationally, including to Canada, under appropriate safeguards.
All data is handled strictly in accordance with the Australian Privacy Act 1988 and, where applicable to international customers, the GDPR.
4. Payment Service Providers
Credit & Debit Cards
Card payments are processed securely through Shopify's payment infrastructure. Arcane does not store your full card details. Payment card data is handled in accordance with PCI-DSS standards.
PayPal
If you choose to pay via PayPal, your transaction will be processed by PayPal (Europe) S.à.r.l. et Cie, S.C.A. The data required to complete your payment will be transmitted to PayPal. This processing is based on contract performance. For full details on how PayPal handles your data, please refer to the PayPal Privacy Statement at https://www.paypal.com/webapps/mpp/ua/privacy-full
Shop Pay
Shop Pay is a payment and checkout service provided by Shopify Inc. If you use Shop Pay, your payment and contact information is processed by Shopify in accordance with their privacy policy. For more information, visit the Shopify Privacy Policy at https://www.shopify.com/legal/privacy
5. Cookies
Our website uses cookies — small text files stored on your device by your browser. Cookies allow our systems to recognise your browser between page visits and help us deliver a functional, secure, and user-friendly experience.
You have full control over cookies. You can configure your browser to notify you before a cookie is set, decline specific cookies, or delete existing cookies at any time. Please note that disabling certain cookies may affect the functionality of our website.
We use only technically necessary cookies unless you have consented to additional cookies (for example, for analytics or marketing). Technically necessary cookies are processed on the basis of our legitimate interest in maintaining website functionality.
For guidance on managing cookies in your browser:
- Google Chrome: https://support.google.com/accounts/answer/61416
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Safari: https://support.apple.com/en-au/guide/safari/sfri11471/mac
- Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge
6. Direct Marketing
Postal marketing
We may use the name and address you provided during a purchase to send you postal marketing material for our products and services, unless you have opted out. You may object to this use at any time by contacting us using the details in our legal notice.
Email marketing
Where you have purchased a product from us, we may send you email marketing for similar products and services. You can opt out at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly. No additional costs apply beyond your standard internet connection charges.
7. Comments and Reviews
If you post a comment or review on our website, we collect the personal data you submit (name, email address, and comment text). Your name and comment will be published publicly. Your IP address will also be stored to prevent misuse and maintain the security of our systems.
This processing is based on your consent. You may withdraw your consent at any time by contacting us, after which your data will be deleted. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
8. Your Rights
Data storage duration
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of any warranty period and as required by applicable laws (including tax and commercial record-keeping obligations in Australia). After these periods have elapsed, your data is securely deleted unless you have agreed to further use.
Your rights as a data subject
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right to access: request a copy of the data we hold about you
- Right to correction: request that inaccurate or incomplete data be corrected
- Right to deletion: request that your data be deleted
- Right to restriction of processing: request that we limit how we use your data
- Right to data portability: request your data in a machine-readable format
- Right to object: object to processing based on legitimate interests or for direct marketing purposes
Australian residents also have rights under the Privacy Act 1988, including the right to access and correct personal information we hold about you.
How to exercise your rights
To exercise any of the above rights, please contact us using the details in our legal notice. We will respond within a reasonable timeframe and in accordance with applicable law.
Right to lodge a complaint
If you believe your personal data is not being handled lawfully, you have the right to lodge a complaint with the relevant regulator. In Australia, this is the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. EU/UK customers may also contact their local data protection authority.
9. Contact Us
If you have any questions about this Privacy Policy or how Arcane handles your personal data, please contact us via the details in our website's legal notice.
Arcane www.ritualarcane.com