Privacy Policy

1. Introduction

ELLAH Co. is the legal entity operating the ELLAH brand (“ELLAH”, “we”, “us” or “our”). ELLAH is a registered trademark and the name under which our clothing label trades. References to “ELLAH Co.” in this Privacy Policy are to the legal entity; references to “ELLAH” are to the brand and its operations. ELLAH Co. respects your privacy and is committed to protecting the personal information we collect in connection with our business.

This Privacy Policy explains how we collect, use, disclose, store and manage personal information in accordance with the Privacy Act 1988 (Cth), the Privacy and Other Legislation Amendment Act 2024 (Cth) (“POLA Act”), and the Australian Privacy Principles (“APPs”).

By accessing our website, placing an order, subscribing to marketing communications or otherwise interacting with ELLAH, you acknowledge and consent to the practices described in this Privacy Policy.

2. Who We Are

ELLAH Co. is a partnership registered in Australia (ABN: 32 100 716 551) and is the legal entity that owns and operates the ELLAH brand. ELLAH is a registered trademark under which the clothing label trades. All privacy obligations under this Policy are the responsibility of ELLAH Co.

Contact: support@ellah.com.au | Website: www.ellah.com.au

3. Information We Collect

We may collect the following categories of personal information.

Identity and Contact Information

• Name
• Email address
• Telephone number
• Billing and shipping address

Transaction Information

• Order history and products purchased
• Returns and exchanges
• Store credits and gift card activity
• Customer service interactions

Payment Information

Payment details are processed directly by our payment providers.

We do not store complete credit card details.

Providers may include Shopify Payments, Stripe, PayPal, and Buy Now Pay Later services such as Afterpay, Zip, or Klarna.

Technical Information

• IP address and device identifiers
• Browser type and operating system
• Website usage data, referral sources and session activity

Marketing Information

• Email and SMS subscription preferences
• Product interests and engagement with marketing campaigns

4. Information We Do Not Intentionally Collect

We do not intentionally collect sensitive information unless required by law or voluntarily provided by you. This includes information relating to health, religion, political opinions, sexual orientation, criminal records and biometric information.

If sensitive information is inadvertently provided, we will securely delete it where it is not required for legitimate business purposes.

5. Children’s Privacy

ELLAH does not knowingly collect personal information from individuals under the age of 15. If you are under 15, please do not provide personal information to us. If we become aware that we have inadvertently collected information from a child under 15, we will take reasonable steps to delete it promptly.

We do not engage in targeted advertising directed at individuals we know to be under 15 years of age.

6. How We Collect Information

We may collect information when you:

• place an order or create an account
• subscribe to marketing communications
• contact customer service
• participate in competitions or promotions
• submit reviews or upload photographs
• engage with us on social media
• browse or interact with our website
• communicate with us through email, chat or direct messages

We may also collect information from third-party providers involved in processing transactions or fulfilling orders.

7. Why We Collect Information

We collect personal information to:

• process and fulfil orders
• provide customer service and manage returns and exchanges
• process payments and arrange shipping
• communicate with customers and personalise experiences
• improve our website and operations
• conduct analytics
• comply with legal obligations
• investigate fraud and enforce our rights
• protect ELLAH, its partners and customers from unlawful activity

8. Fraud Prevention and Protection of Legal Interests

Because ELLAH operates in an online environment, we may use personal information to:

• investigate suspected fraud and prevent unauthorised transactions
• verify customer identities
• investigate chargebacks and payment disputes
• recover debts
• protect the rights, property and legal interests of ELLAH, its partners, employees and customers

Where reasonably necessary, information may be disclosed to legal advisers, insurers, financial institutions, fraud prevention agencies and law enforcement authorities.

9. Direct Marketing

With your consent, we may send marketing communications relating to promotions, new products, restocks, events and brand updates.

You may opt out at any time by:

• clicking the unsubscribe link in emails
• replying STOP to SMS communications
• contacting us directly at support@ellah.com.au

We will honour opt-out requests as required by the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth). Opt-out requests for email and SMS will be actioned within five (5) business days.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to improve the functionality and performance of our website. We distinguish between the following types:

Essential Cookies

Required for the website to function, including maintaining shopping carts and enabling secure login. These cannot be disabled without affecting core website functionality.

Analytics Cookies

Used to understand how visitors interact with our website, including traffic analysis and performance measurement. These are not used without your consent.

Advertising and Targeting Cookies

Used to personalise advertising and measure campaign effectiveness across platforms such as Meta (Facebook and Instagram) and TikTok. These are not activated without your consent.

You may manage or withdraw consent at any time through your browser settings or our cookie preferences tool. Disabling certain cookies may affect website functionality.

11. Advertising and Analytics Technologies

We may use technologies provided by third parties including Google Analytics, Google Merchant Centre, Meta (Facebook and Instagram), TikTok, Shopify and Klaviyo. These technologies may collect information regarding your interaction with our website and advertisements, and may be used to:

• analyse website performance and customer behaviour
• deliver targeted advertising
• improve marketing effectiveness

You may manage advertising preferences through the relevant third-party providers.

Please refer to those providers’ privacy policies for further information.

12. Automated Decision-Making

We or our service providers may use automated processes in connection with fraud detection, personalised product recommendations and marketing campaign optimisation. These processes analyse customer data to inform decisions or actions without individual human review of each instance.

In accordance with obligations commencing 10 December 2026 under the POLA Act, we will update this Privacy Policy to include full disclosure of our automated decision-making practices. In the interim, you may contact us at support@ellah.com.au if you have questions about how automated processes may affect decisions relating to your account or experience.

13. Payment Providers and Buy Now Pay Later Services

Payments are processed through independent third-party providers. These providers maintain their own privacy practices and terms. We encourage customers to review those providers’ privacy policies before use. ELLAH Co. is not responsible for the independent privacy practices of third-party payment providers.

14. Shipping Providers

To fulfil orders, we may disclose information to shipping and logistics providers including Australia Post and international carriers. Information disclosed may include name, address, telephone number, email address and order details necessary for delivery.

International shipments may require disclosure to customs authorities or government agencies in destination countries.

15. Third-Party Service Providers

We engage trusted third parties to assist with operating our business. These providers may offer website hosting, e-commerce platforms, marketing services, payment processing, analytics, shipping and logistics, customer support, and fraud prevention.

We take reasonable steps to engage reputable providers with appropriate data handling practices. We are not responsible for the independent privacy practices of those organisations.

16. Overseas Disclosure of Information

Because our service providers operate internationally, personal information may be transferred to, stored or processed in countries outside Australia, including the United States and other jurisdictions where our providers maintain operations.

By using our website and services, you acknowledge that overseas recipients may not be subject to privacy laws equivalent to those in Australia. We take reasonable steps to engage providers with appropriate safeguards, but cannot guarantee the privacy practices of overseas recipients.

17. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Security measures may include secure platforms, password protection, restricted access, encryption technologies and contractual protections with service providers.

No method of electronic transmission or storage is completely secure. While ELLAH Co. takes reasonable precautions, we cannot guarantee absolute security. To the extent permitted by law, customers provide information and use electronic communications at their own risk.

18. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil orders, comply with legal obligations, maintain business records, resolve disputes, enforce agreements and protect our legal interests. When information is no longer required, we take reasonable steps to securely destroy or de-identify it.

19. Your Rights: Access, Correction and Deletion

You may request:

• access to the personal information we hold about you
• correction of information that is inaccurate, incomplete or out of date
• deletion of your personal information, subject to our legal obligations to retain certain records

Deletion requests will be assessed against our legal and operational requirements.

We may be required to retain certain information to comply with applicable laws, resolve disputes or enforce agreements, and will advise you accordingly.

Requests should be directed to support@ellah.com.au.

We will respond within a reasonable timeframe and no later than 30 days. We may refuse requests where permitted by law.

20. Privacy Complaints

If you believe we have breached this Privacy Policy or the Australian Privacy Principles, please contact us at support@ellah.com.au. We will investigate complaints and endeavour to respond within 30 days.

If you remain dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

Note: From 10 June 2025, individuals may also have a right to bring a statutory tort action for serious invasions of privacy under the POLA Act. For further information, refer to the OAIC website at www.oaic.gov.au.

21. Business Restructure or Sale

If ELLAH Co. undergoes a restructure, partnership change, incorporation, merger, sale of assets or transfer of business operations, personal information held by ELLAH Co. may be transferred to a successor entity. Any successor entity will be required to handle personal information in accordance with applicable privacy laws.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes become effective upon publication on our website. Your continued use of our website following publication constitutes acceptance of the updated Privacy Policy. We will update this policy no later than 10 December 2026 to include full disclosure of our automated decision-making practices as required by the POLA Act.

23. Contact Us

ELLAH Co.
ABN: 32 100 716 551
Email: support@ellah.com.au
Website: www.ellah.com.au
Business Address: PO Box 637 St Ives, NSW, 2075.

© 2026 ELLAH Co. All rights reserved.