Privacy policy

Last updated: 16 August 2026

This Privacy Policy describes how Ovegan, operated by Sino Cosmetics Pty Ltd (ABN 99 678 171 992) ("Site", "we", "us", or "our"), collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from ovegancurls.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refers to you as the user of the Services, whether as a customer, website visitor, or any other individual whose personal information we handle in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our information handling practices or for operational, legal, or regulatory reasons.

Any revised Privacy Policy will be posted on the Site with an updated "Last Updated" date. Where required by applicable law, including the Privacy Act 1988 (Cth), we will provide you with additional notice of material changes (such as via email or a prominent notification on the Site) before the changes become effective. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, hold, and disclose your personal information.

How We Collect and Use Your Personal Information

To provide the Services, we collect, hold, use, and disclose personal information about you from a variety of sources. The specific categories of information we collect depend on how you interact with us.

We collect personal information directly from your interactions with our Site and Services, as well as automatically through cookies, pixel tags, and similar tracking technologies.  

We may disclose this personal information to third-party partners, including advertising and analytics providers (such as Meta and Google), to show you targeted advertisements on third-party platforms that are tailored to your interests. Under Australian privacy law, using your personal information for targeted advertising constitutes direct marketing, and you have the right to request that we cease sending you direct marketing communications or using your data for targeted advertising at any time. 

Opting Out of Targeted Advertising (Australia & Global): You can opt out of personalized advertising by adjusting your cookie preferences on our Site, utilizing browser-level privacy controls, or contacting us directly using the details provided below.

Notice to US Residents: If you reside in certain US states, the disclosure of personal information to third parties for targeted online advertising may be defined as a "sale" or "sharing" of personal information under applicable US state privacy laws. If you visit our Site with an opt-out preference signal enabled (such as Global Privacy Control), we will process that signal as a valid request to opt out of the targeted advertising and sharing of data for the browser or device you are using.

What Personal Information We Collect

The types of personal information we collect depend on how you interact with our Site and use our Services. For the purposes of this Privacy Policy, "personal information" has the meaning given in the Privacy Act 1988 (Cth) and includes any information or opinion about an identified individual, or an individual who is reasonably identifiable.

The categories of personal information we collect include:

Information We Collect Directly from You

Information you directly submit to us through our Services may include:

  • Contact details: Name, residential/shipping address, billing address, phone number, and email address.
  • Order details: Products purchased, transaction details, delivery instructions, and payment confirmation status.
  • Account information: Username, encrypted password, account preferences, and security verification details.
  • Shopping & interaction history: Products viewed, items saved to cart or wishlists, store credits, product reviews, and customer referral information.
  • Customer support communications: Any information or correspondence you choose to provide when contacting us with an inquiry, feedback, or support request.

Providing your personal information is generally voluntary. However, if you elect not to provide certain mandatory information, we may be unable to process your orders, provide account access, or answer your inquiries.

Information We Collect Automatically (Usage Data)

When you access or use our Services, we automatically collect certain technical and usage information ("Usage Data") via cookies, web beacons, pixel tags, and similar tracking technologies. This includes:

  • Device & connection data: Your IP address, device type, operating system, browser type, and mobile network details.
  • Browsing activity: Pages or products viewed, time spent on the Site, click paths, search terms, referring URLs, and email interactions (e.g., opens and clicks).

Information We Obtain from Third Parties

We may receive personal information about you from trusted third-party service providers who assist us in operating our business, including:

  • E-commerce platform providers: Technical and transactional data from platforms that host our online store (e.g., Shopify).
  • Payment processors: Financial confirmation and billing details (such as payment authorization, card type, and billing address) collected securely on our behalf to fulfill your orders. We do not directly store full credit card numbers or sensitive financial account details.
  • Marketing & analytics partners: Online activity data collected via integrated pixel tags, advertising networks, and data analytics tools to evaluate Site performance and target advertisements.

Any personal information received from third parties is handled in accordance with this Privacy Policy and applicable Australian privacy laws.

How We Use Your Personal Information

We collect, hold, use, and disclose your personal information for the primary purpose of operating our business, delivering our Services to you, and meeting our legal and regulatory obligations under Australian law.

Providing Products and Services

We use your personal information to fulfill our contractual obligations to you and run our online store, including:

  • Processing payments, verifying transactions, and issuing receipts.
  • Fulfilling, shipping, and tracking your product orders.
  • Managing customer accounts, loyalty benefits, returns, and exchanges.
  • Sending administrative notifications regarding your orders, account updates, or changes to our terms.
  • Integrating with store infrastructure (such as Shopify) to streamline checkout processes. Where integrated services are used, your data is also handled in accordance with the platform's respective privacy terms.

Marketing and Advertising

We may use your personal information to send you direct marketing communications about our products, special offers, and brand updates via email, SMS, or post. We also use tracking technologies to tailor the advertising you see on our Site and third-party platforms (such as Meta and Google).

  • You can opt out of receiving direct marketing emails or SMS messages at any time by clicking the "unsubscribe" link in any communication or by contacting us directly.
  • Opting out of direct marketing does not affect non-promotional transactional communications regarding your active orders or account.

Security and Fraud Prevention

We use personal information to monitor, detect, investigate, and prevent fraudulent, unauthorized, or illegal activity, protecting both our business and our customers.

  • Account holders are responsible for maintaining the confidentiality of their account credentials (such as passwords). If you suspect your account has been compromised, you must notify us immediately.

Customer Support and Business Improvement

We use your information to handle customer inquiries, resolve complaints, conduct internal research, analyze Site performance, and continuously improve our product offerings and overall customer experience.

Cookies and Tracking Technologies

Like most commercial websites, we use cookies, pixel tags, web beacons, and similar automated tracking technologies (collectively, "Cookies") on our Site.

Why We Use Cookies

  • Essential Operations: Enabling core Site functionality, secure checkout, and basic navigation.
  • Store Infrastructure: Powering our e-commerce store infrastructure via Shopify. For detailed information on the specific Cookies deployed by our platform provider, please visit Shopify's Cookie Policy.
  • Performance & Analytics: Understanding how visitors interact with our Site, analyzing site traffic, identifying performance issues, and optimizing user experience.
  • Functional Preferences: Remembering your choices, language preferences, and shopping cart contents across sessions.
  • Targeted Advertising: Permitting third-party partners (such as Meta and Google) to place Cookies on your device to deliver tailored advertisements on other websites based on your browsing activity.

Managing Your Cookie Preferences

Most web browsers automatically accept Cookies by default. You can adjust your browser settings to block, disable, or delete Cookies at any time.

Please note that disabling or blocking certain Cookies:

  • May impair Site performance, causing features (such as shopping cart persistence or account login) to function incorrectly or become unavailable.
  • Will not completely stop all information sharing with our third-party advertising partners, as non-cookie tracking methods may still apply depending on your device and browser settings.

How We Disclose Personal Information

We may disclose your personal information to third parties for the primary purposes of operating our business, fulfilling our contracts with you, complying with legal obligations, and providing our Services.

We may disclose personal information to the following categories of recipients:

  • Service Providers & IT Vendors: Third-party partners who perform services on our behalf, including e-commerce platforms (Shopify), payment gateways, logistics and courier networks, IT hosting, marketing automation tools, and customer support providers.
  • Advertising & Analytics Partners: Digital marketing and analytics platforms (such as Meta and Google) to serve tailored advertisements, measure campaign performance, and analyze Site traffic.
  • Corporate Affiliates: Related entities within our corporate group for operational and business administration purposes.
  • Professional Advisers: Legal counsel, accountants, auditors, insurers, and financial advisors as reasonably necessary to manage our business operations and risk.
  • Business Transfers: Parties involved in a merger, acquisition, restructuring, joint venture, assignment, asset sale, or bankruptcy proceeding involving our business or assets.
  • Legal & Regulatory Authorities: Law enforcement agencies, courts, government regulators, or third parties when required or authorized by Australian law, court order, or to protect our legal rights, safety, and property.

Overseas Disclosures

Some of our service providers and corporate entities are located outside Australia (such as in the United States, Canada, and Singapore). When we disclose personal information overseas, we take reasonable steps to ensure the recipient handles your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Sensitive Information

We do not collect, hold, use, or disclose sensitive information (such as health data, biometric data, or racial origin) unless you have provided express consent or we are specifically required or permitted to do so under Australian law.

User-Generated Content

The Services may allow you to submit, post, or publish product reviews, testimonials, photos, comments, or other user-generated content ("UGC").

Please be aware that any UGC you post becomes publicly accessible to other visitors and users of the Site. We are not responsible for how third parties view, collect, use, or further share information that you voluntarily choose to make public.

By submitting UGC through our Services:

  • You grant us a non-exclusive, worldwide, royalty-free, perpetual, and irrevocable license to use, reproduce, display, adapt, and distribute your content across our marketing channels, social media platforms, and Site.
  • You confirm that the content is accurate, does not violate the rights of any third party (including intellectual property or privacy rights), and complies with applicable laws.
  • You acknowledge that we reserve the right, but are not obligated, to monitor, edit, refuse to post, or remove any UGC at our sole discretion.

Third-Party Websites and Links

Our Site may contain links to third-party websites, plug-ins, services, or applications that are not owned, controlled, or operated by us. Clicking on those links or enabling those connections may allow third parties to collect, use, or share data about you.

We are not responsible for the privacy practices, security measures, or content of any third-party websites. The inclusion of any link on our Site does not imply our endorsement or approval of the linked site or its operator.

We strongly encourage you to read the privacy policy and terms of use of every third-party website you visit before providing them with any personal information.

Children’s Data

Our Services are intended for a general audience and are not directed at or designed for use by children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect, hold, or use personal information from children.

If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately to request its deletion. Upon notification, we will take prompt steps to investigate, securely delete, and remove that information from our systems.

Security and Retention of Your Information

We take reasonable steps to protect your personal information from misuse, interference, and loss, as well as from unauthorized access, modification, or disclosure, in accordance with Australian Privacy Principle 11 (APP 11).

Data Security

We implement appropriate technical, administrative, and physical security measures—including SSL encryption, secure payment gateway integrations, and restricted access controls—to safeguard your data. However, no security system or transmission over the internet is completely secure. While we strive to protect your personal information, we cannot guarantee the absolute security of data transmitted to or from our Site.

Data Retention and Destruction

We retain your personal information only for as long as reasonably necessary to fulfill the primary purposes for which it was collected, including:

  • Fulfilling your orders and maintaining your customer account.
  • Satisfying our legal, accounting, tax, and regulatory obligations (such as record-keeping requirements under Australian tax law).
  • Resolving disputes, enforcing our legal agreements, and protecting against legal claims.

When personal information is no longer required for any authorized purpose, we will take reasonable steps to securely destroy the information or permanently de-identify it, in accordance with our legal obligations.

Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have specific rights regarding how we collect, hold, use, and disclose your personal information.

Depending on where you live, you may have rights regarding your personal information, including:

  • Access to your personal information
  • Correction of inaccurate or out-of-date information
  • Deletion of your data (subject to legal obligations)
  • Data portability
  • Opt-out of targeted advertising
  • Withdrawal of consent (where applicable)
  • Restrictions of processing
  • The right to lodge a complaint

You can exercise these rights via our Site or by contacting us directly. We may need to verify your identity before proceeding with your request.

Complaints

If you have any questions, concerns, or complaints regarding how we collect, hold, use, or disclose your personal information, or if you believe we have breached the Australian Privacy Principles (APPs), please contact us using the details provided below.

We take all privacy complaints seriously. Upon receiving your complaint, we will acknowledge receipt and investigate the matter promptly. We aim to provide a formal written response to your complaint within 30 days.

If you are not satisfied with our response, or if we fail to respond within a reasonable timeframe, you have the right to escalate your complaint to:

Australia: The Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au 

International Residents: Your local data protection authority or supervisory authority in your country of residence.

International Users

We may transfer and store your personal information in countries outside of Australia. When doing so, we take steps to ensure your information is protected, including the use of Standard Contractual Clauses or other recognised transfer mechanisms.

Contact

If you have any questions, concerns, or feedback regarding our privacy practices or this Privacy Policy, or if you would like to exercise any of your statutory privacy rights, please contact our Privacy Team using the details below:

  • Email: hello@ovegancurls.com
  • Legal Entity: Sino Cosmetics Pty Ltd
  • ABN: 99 678 171 992
  • Address: 2/290 Boundary St, Spring Hill QLD 4000

For the purpose of applicable privacy laws, we are the data controller of your personal information.