Privacy policy

Privacy Policy

Last updated: June 5, 2026

Archandles ("we", "us", or "our") operates this store and website at archandles.com, including all related information, content, features, tools, products, and services (the "Services"). The Services are powered by Shopify, which enables us to provide them to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information described below.

1. Personal information we collect

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services and where you live:

  • Contact details — name, billing address, shipping address, phone number, and email address
  • Financial information — credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, and payment confirmation. Full payment card numbers are processed by our payment processors and are not stored by us
  • Account information — username, password, security questions, preferences, and settings
  • Transaction information — items you view, add to cart, add to wishlist, purchase, return, exchange, or cancel, and your past order history
  • Communications with us — the content of any messages you send to us, including customer support inquiries and product reviews
  • Trade Program information — if you apply for our Trade Program, we collect business name, professional credentials, project type, business address, and tax identification information
  • Device information — information about your device, browser, network connection, IP address, and other unique identifiers
  • Usage information — information about your interaction with the Services, including how and when you navigate the site

We may also draw inferences from the personal information listed above to better understand your preferences and improve the Services.

2. How we collect personal information

We collect personal information from the following sources:

  • Directly from you — when you create an account, place an order, contact us, sign up for our newsletter, apply for the Trade Program, or otherwise interact with the Services
  • Automatically — through cookies, pixels, and similar technologies when you visit the Services (see Section 7 below)
  • From service providers — payment processors, shipping carriers, analytics providers, and email marketing platforms that process information on our behalf
  • From business partners — including advertising and marketing partners
  • From publicly available sources — when permitted by law

3. How we use your personal information

We use personal information for the following purposes:

To provide and improve the Services. We process payments, fulfill orders, manage returns and exchanges, maintain your account, arrange shipping, send order and account notifications, recommend products, and customize your shopping experience.

For marketing and advertising. We send marketing emails (only if you've opted in), display online advertisements based on your interests, and conduct promotional campaigns. You can opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us.

For security and fraud prevention. We authenticate accounts, detect and investigate suspicious activity, and protect against fraud, abuse, and unauthorized access.

For customer support. We respond to your inquiries, resolve issues, and maintain our business relationship with you.

For legal and compliance purposes. We comply with applicable laws, respond to valid legal process (subpoenas, court orders, government requests), enforce our Terms of Service, and protect our rights and the rights of others.

For business operations. We analyze how the Services are used, conduct research, and make business decisions about the products and services we offer.

4. How we disclose personal information

We disclose personal information to third parties only as described below:

  • Service providers — Shopify (our e-commerce platform), payment processors (Shopify Payments, PayPal, Klarna), shipping carriers (USPS, UPS, FedEx, DHL), email marketing platforms (Klaviyo), analytics providers, customer support tools, and cloud hosting providers
  • Marketing and advertising partners — including platforms like Meta, Google, Pinterest, and TikTok, to deliver targeted advertising. Where required by law, we honor your right to opt out of these disclosures
  • At your direction — when you authorize us to share information, such as through social media login or third-party integrations
  • Within our corporate group — including affiliates and subsidiaries
  • For legal reasons — to comply with legal obligations, respond to lawful requests from public authorities, enforce our terms, or protect the rights, property, or safety of Archandles, our customers, or others
  • In a business transaction — if we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your personal information may be transferred as part of that transaction

We do not sell your personal information for monetary consideration.

5. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify, including across borders, to enable Shopify to provide and improve its platform.

In some cases, Shopify uses certain enhanced features that involve processing personal information from your interactions with our store along with other Shopify merchants. In those circumstances, Shopify acts as a data controller and is responsible for processing your personal information in accordance with its own privacy policy.

To learn more about how Shopify processes personal information and the rights you may have, see Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and the Shopify Privacy Portal at https://privacy.shopify.com/en.

6. Third-party websites and links

The Services may contain links to websites or platforms operated by third parties. We are not responsible for the privacy or security of those sites. We recommend you review their privacy notices before sharing personal information with them. Inclusion of a link does not imply our endorsement.

7. Cookies and similar technologies

We use cookies, pixels, and similar technologies to operate and improve the Services. The categories we use include:

  • Essential cookies — required for core functionality such as cart, checkout, and account login. These cannot be disabled
  • Performance and analytics cookies — help us understand how visitors use the Services so we can improve them
  • Functional cookies — remember your preferences such as language, currency, and region
  • Advertising cookies — used by us and our advertising partners to deliver relevant ads and measure their effectiveness

You can manage cookie preferences through our cookie banner when you first visit the site, or at any time through your browser settings or our cookie preferences page. Disabling certain cookies may affect the functionality of the Services.

8. Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may not apply in every situation.

General rights

  • Right to access — request access to the personal information we hold about you
  • Right to correct — request that we correct inaccurate personal information
  • Right to delete — request that we delete personal information we hold about you
  • Right to portability — receive a copy of your personal information in a portable format
  • Right to object or restrict processing — object to certain types of processing, including marketing
  • Right to withdraw consent — where we rely on consent, withdraw it at any time

To exercise any of these rights, please contact us using the details in Section 14.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

  • The right to know the categories and specific pieces of personal information we collect, use, disclose, and share
  • The right to delete personal information, subject to certain exceptions
  • The right to correct inaccurate personal information
  • The right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising
  • The right to limit use and disclosure of sensitive personal information
  • The right not to be discriminated against for exercising these rights

To exercise these rights, email us at hello@archandles.com or use the "Do Not Sell or Share My Personal Information" link in our website footer. You may designate an authorized agent to make a request on your behalf, subject to verification.

European Economic Area, United Kingdom, and Switzerland residents

If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws, including:

  • The legal bases on which we rely include consent, contract performance, legitimate interests, and legal obligation
  • The right to lodge a complaint with your local data protection authority
  • The right to information about international transfers (see Section 11)

Australian residents

If you are located in Australia, your personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access and correct your personal information and to make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe your privacy has been breached.

Marketing communications

We may send you marketing communications by email or text message if you have opted in. You can opt out at any time by clicking the unsubscribe link in our emails, replying STOP to text messages, or contacting us. Even if you opt out of marketing, we may still send transactional messages related to your account or orders.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request.

9. Children's data

The Services are not intended for, or directed to, children. We do not knowingly collect personal information from individuals under the age of 16. As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share personal information of individuals under 16 years of age.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at hello@archandles.com and we will delete it.

10. Security and retention

We implement reasonable technical, administrative, and physical safeguards designed to protect personal information. However, no security measures are perfect, and we cannot guarantee absolute security. Information transmitted over the internet may not be fully secure during transit. We recommend you do not send sensitive information through unsecured channels.

We retain personal information for as long as necessary to:

  • Provide the Services and maintain your account
  • Comply with legal, accounting, or reporting obligations (typically 7 years for transaction records under tax and consumer protection laws)
  • Resolve disputes and enforce our agreements
  • Pursue legitimate business interests, such as fraud prevention

When personal information is no longer required, we securely delete or anonymize it.

11. International transfers

We are based in Australia and use service providers (including Shopify) that may process personal information in the United States, the European Economic Area, and other countries. By using the Services, you understand that your personal information may be transferred outside the country where you live.

When we transfer personal information out of the EEA or the UK, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement, or transfers to countries that have been determined to provide an adequate level of protection.

12. Data breach notification

In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law, including the Privacy Act 1988 (Cth) Notifiable Data Breaches scheme, GDPR Article 33 and 34, and applicable US state breach notification laws.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date above. Where required by law, we will provide additional notice (such as by email).

We encourage you to review this Privacy Policy periodically.

14. Contact

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise any of your rights, please contact us:

Email: hello@archandles.com
Reply within: 1–2 business days
Mailing address: 108 Kinterbury Drive, Kings Park VIC 3021, Australia

If you are unable to reach a satisfactory resolution with us, you may have the right to lodge a complaint with your local data protection authority. Australian residents may contact the OAIC at oaic.gov.au. California residents may contact the California Privacy Protection Agency at cppa.ca.gov. EEA and UK residents may contact their national data protection authority.