Privacy Policy

Last updated: March 2026

At Gelupu, your privacy matters. This policy explains what data we collect, how we use it, and your rights as a customer.

1. Information We Collect

Order information: name, billing/shipping address, email, phone, and payment details (processed securely by Shopify Payments — we never store card numbers).
Account information: if you create an account, we store your email and order history.
Device & browsing data: IP address, browser type, pages visited, and referring URLs via cookies and analytics tools.
Communications: messages you send us via email or our contact form.

2. How We Use Your Information

Process and fulfil your orders
Send order confirmations and shipping updates
Respond to customer service enquiries
Improve our website and product selection
Send marketing emails (only if you opt in — you can unsubscribe any time)
Comply with legal obligations

3. Sharing Your Information

We share your data only where necessary:

Fulfilment partners (e.g. CJ Dropshipping) receive your name and shipping address to dispatch your order.
Payment processors (Shopify Payments / Stripe) handle transactions under their own privacy policies.
Shipping carriers receive your address and contact details to deliver your parcel.
Analytics providers (Google Analytics) receive anonymised usage data.

We do not sell your personal information to third parties.

4. Cookies

We use essential cookies to keep your cart intact and functional cookies for analytics. You can disable cookies in your browser settings, but some site features may not work correctly.

5. Data Retention

We keep order records for 7 years to meet Australian tax and consumer law requirements. You can request deletion of your account data at any time (subject to legal retention obligations).

6. Your Rights

Under the Australian Privacy Act 1988 you have the right to:

Access the personal information we hold about you
Request corrections to inaccurate data
Request deletion of your data (where no legal retention obligation applies)
Opt out of marketing communications at any time

To exercise any of these rights, email us at gelupu.store@gmail.com.

7. Security

Your data is stored on Shopify's secure, PCI-compliant infrastructure. We use HTTPS across the entire site. No data transmission method is 100% secure, but we take all reasonable precautions.

8. Changes to This Policy

We may update this policy periodically. Significant changes will be notified via email or a site banner. Continued use of Gelupu after changes constitutes acceptance of the updated policy.