Privacy policy
Privacy Policy
Last updated: 30 August 2026
Victorian Goddess respects your privacy and is committed to handling your personal information responsibly.
This Privacy Policy explains how MICHELLE KEPPLER ABN 25426591896, trading as Victorian Goddess (“Victorian Goddess”, “we”, “us” or “our”), collects, holds, uses and discloses personal information when you:
* visit or shop at victoriangoddess.com.au (the “Site”);
* visit our physical store;
* purchase or enquire about our products or services;
* create an account or join our mailing list;
* book or participate in a tarot reading, event or other offering;
* contact or otherwise interact with us.
We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.
1. Personal information we collect
The personal information we collect depends on how you interact with Victorian Goddess.
Information you provide to us
We may collect:
* your name;
* email address and telephone number;
* billing and delivery addresses;
* account and login information;
* order, transaction and purchase history;
* products, services or events you enquire about;
* mailing-list preferences;
* messages, feedback and other information you provide when contacting us;
* information you provide when booking or receiving a tarot reading or other service;
* information provided when attending an event, entering a promotion or interacting with us in-store.
If you provide information when booking or receiving a tarot reading or spiritual service, it may reveal personal circumstances, beliefs or other sensitive information. We only ask you to share what is reasonably necessary to provide the service, and we use this information with your consent for that purpose.
Payment information
Payments are processed by third-party payment providers such as Shopify Payments, Shop Pay, Afterpay or other payment services made available at checkout.
Victorian Goddess generally does not receive or store your complete credit-card details. Payment providers process that information in accordance with their own privacy policies and security practices.
Information collected automatically
When you visit the Site, us and our service providers may automatically collect information including:
* your IP address;
* browser, device and operating-system information;
* approximate location derived from your IP address;
* time zone and language settings;
* pages and products viewed;
* searches, referring websites and links;
* interactions with the Site;
* shopping-cart and checkout activity;
* cookie, pixel and similar technology identifiers.
We use cookies, pixels, tags, web beacons and similar technologies to operate the Site, remember preferences, understand how visitors use the Site and measure advertising and marketing performance.
2. How we collect personal information
We may collect personal information:
* directly from you when you purchase, enquire, subscribe, book or contact us;
* automatically when you visit or interact with the Site;
* through our physical store and events;
* from Shopify and other service providers that help us operate the business;
* from payment, delivery, marketing and analytics providers;
* from social-media platforms when you interact with our pages or advertising;
* from publicly available sources where lawful and appropriate.
If you provide personal information about another person, such as a gift recipient, you should have their permission.
3. How we use personal information
We may use personal information to:
* process payments and fulfil orders;
* arrange delivery, collection, returns and exchanges;
* create and administer customer accounts;
* provide tarot readings, events and other requested services;
* communicate about orders, enquiries, bookings or accounts;
* provide customer service and resolve problems;
* manage mailing-list subscriptions and send marketing communications with your consent or where otherwise permitted;
* personalise and improve the Site, products and customer experience;
* analyse Site traffic, sales and marketing performance;
* detect, investigate and prevent fraud, misuse and security incidents;
* maintain business, accounting and taxation records;
* enforce our terms and protect our legal rights;
* comply with legal and regulatory obligations;
* carry out other purposes disclosed to you at the time of collection or with your consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in an email or contacting us. You may continue to receive necessary service communications concerning existing orders, accounts or bookings.
4. Cookies, analytics and advertising
The Site uses cookies and similar technologies. These may include:
* Essential cookies: required for shopping carts, checkout, account access, security and core Site functions.
* Functional cookies: used to remember preferences and improve Site features.
* Analytics cookies: used to understand visits, traffic and customer interactions.
* Advertising cookies and pixels: used to measure advertising and, where enabled, deliver advertising relevant to visitors.
Our Site currently uses, or may use, services including Shopify Analytics, Google Analytics, Google Tag Manager, and Meta technologies.
You can control cookies through your browser settings and any privacy controls provided on the Site. Blocking essential cookies may prevent parts of the Site from working correctly.
You can find more information about third-party privacy practices at:
* Shopify: https://www.shopify.com/au/legal/privacy/
* Google: https://policies.google.com/privacy
* Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
* Meta: https://www.facebook.com/privacy/policy/
5. When we disclose personal information
We may disclose personal information to organisations that help us operate Victorian Goddess, including:
* Shopify, which hosts and powers our online store;
* payment and fraud-prevention providers;
* postal, courier and fulfilment providers;
* website hosting, information-technology and security providers;
* email, marketing, analytics and advertising providers;
* customer-support and account-management providers;
* professional advisers such as accountants, insurers and lawyers;
* government agencies, regulators, courts or law-enforcement authorities where required or authorised by law;
* a purchaser, successor or adviser involved in a proposed or completed sale, merger or transfer of the business;
* other parties with your consent or at your direction.
We do not sell personal information in exchange for money.
When you select a third-party payment or account service, such as Afterpay, Shop Pay or a social-media platform, your interaction may also be governed by that provider’s privacy policy.
6. Overseas disclosure
Some of our service providers operate or store information outside Australia.
Depending on the service used, personal information may be disclosed to or accessible by recipients in countries including Singapore and the United States, as well as other locations where Shopify, Google, Meta, payment providers, and their related service providers operate.
Shopify states that personal information relating to users in Australia and New Zealand is received by Shopify Commerce Singapore Pte. Ltd. More information is available in Shopify’s Privacy Policy.
Where applicable, we take reasonable steps to ensure overseas recipients handle personal information in accordance with applicable privacy requirements. However, overseas recipients may be subject to privacy laws different from those that apply in Australia.
7. Security
We take reasonable administrative, technical and physical measures to protect personal information from loss, misuse, interference and unauthorised access, modification or disclosure.
Our online store is hosted by Shopify, and payment information is processed through third-party payment providers using their security systems.
No internet transmission or storage system can be guaranteed to be completely secure. If you believe your account or information may have been compromised, please contact us promptly.
Where required by applicable law, we will assess eligible data breaches and notify affected individuals and the Office of the Australian Information Commissioner.
8. Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
* fulfilling and documenting transactions;
* providing customer service;
* maintaining account and purchase records;
* complying with taxation, accounting and other legal requirements;
* resolving disputes;
* preventing fraud and protecting our legal rights.
Retention periods vary according to the type of information and applicable legal requirements. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it.
A request for deletion may be subject to legal and operational requirements that require us to retain certain records.
9. Accessing and correcting your information
You may request access to the personal information we hold about you or ask us to correct any information that is inaccurate, incomplete, or out of date.
To make a request, contact our Privacy Contact using the details below. Please provide enough information for us to identify you and understand your request. We may need to verify your identity before providing access or making changes.
In some circumstances, applicable law may permit or require us to refuse access or correction. If this occurs, we will explain the reason where we are legally permitted to do so.
You may also be able to view or update certain information through your customer account.
10. Privacy complaints
If you have a question or complaint about how we have handled your personal information, please contact our Privacy Contact in writing.
Please include:
* your name and contact details;
* a description of the privacy issue;
* relevant dates, orders or communications;
* the outcome you are seeking.
We will acknowledge and investigate your complaint and aim to respond within 30 days. If we require additional time, we will explain why and provide an expected response date.
If the Privacy Act 1988 (Cth) applies to Victorian Goddess and you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner:
Website: https://www.oaic.gov.au
Telephone: 1300 363 992
The OAIC will generally expect you to raise the matter with us before making a complaint to it.
11. Children
The Site and our online purchasing services are not directed to individuals under 18 years of age.
We do not knowingly collect personal information from a person under 18 without appropriate permission. If you believe a person under 18 has provided personal information to us, please contact us so that we can review and address the matter.
12. Third-party websites
The Site may contain links to third-party websites, payment services, and social media platforms. Victorian Goddess is not responsible for the privacy practices, security or content of third-party services.
We encourage you to review the privacy policy of any third-party service before providing personal information.
13. Changes to this policy
We may update this Privacy Policy to reflect changes to our practices, services, technology or legal obligations.
The latest version will be published on the Site with its updated date. If changes are significant, we may provide additional notice where appropriate.
14. Contact us
For privacy questions, access or correction requests, or complaints, please contact:
Privacy Contact
Victorian Goddess
MICHELLE KEPPLER ABN 25426591896
Shop 5, 13 Wharf Street
Murwillumbah NSW 2484
Australia
Email: michelle@victoriangoddess.com.au
Telephone: +61 447 610 222