Privacy Policy | Evra Vital

1. What we collect

We collect only what we need to run our store and look after you:

Contact details: your name, email address and phone number.
Delivery details: your shipping address.
Order details: the products you buy, your subscriptions and their schedule, order history, and any messages you send us.
Account details: if you create an account, your login email and a securely hashed password (we can't see your password).
Technical information: basic information your browser sends, such as device type and pages visited, used to keep the site working and secure.

2. Why we collect it

To process, pack and deliver your orders, and to send order and shipping updates.
To manage subscriptions, including renewals, reminders, skips, pauses and cancellations.
To provide customer service and respond to your questions.
To prevent fraud and keep our store secure.
To send marketing emails or SMS, only with your consent. Every marketing message includes a way to opt out, and you can unsubscribe at any time by using the unsubscribe link, replying STOP to an SMS, or emailing us.

3. Payments

Payments are processed securely by Stripe. Your card details are entered directly into Stripe's systems and are never seen or stored by Evra Vital. We only receive limited information from Stripe, such as the card brand, the last four digits and whether a payment succeeded. Stripe's handling of your information is covered by its own privacy policy.

4. Who we share it with

We don't sell or rent your personal information. We share it only where needed to run our business:

Fulfilment and shipping partners, who receive your name, address, phone number and order contents only so they can deliver your order. Our fulfilment partner is located outside Australia, so your delivery details may be handled overseas for this purpose.
Service providers that help us operate, such as payment processing (Stripe), email and SMS delivery, and website hosting. They may only use your information to provide their service to us.
Authorities, where we're required to by law, for example to respond to a lawful request.

5. Cookies and local storage

Our site uses your browser's local storage to remember your cart, and a secure session cookie to keep you logged in to your account. These are needed for the store to work. Our payment provider may also set cookies to process payments securely and prevent fraud. You can clear local storage and cookies in your browser settings at any time, but your cart and login will be reset.

6. How we protect and keep your information

We take reasonable steps to protect your information from misuse, loss and unauthorised access, including encrypted connections (HTTPS) and limited access to customer data. We keep order and transaction records for as long as needed to provide our services and to meet our legal, tax and accounting obligations (generally up to 7 years). When we no longer need information, we delete or de-identify it.

7. Accessing or correcting your information

You can view and update your contact details, address and subscriptions in your account at any time. You can also ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing support@evravital.com. We'll respond within a reasonable time, usually within 30 days.

8. Complaints

If you have a concern about how we've handled your personal information, please email us first and we'll work to resolve it. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

10. Contact us

Questions about privacy? Email support@evravital.com.