Privacy policy

Privacy Policy — Bagviera

Last updated: 19 September 2026

1. About this policy

This Privacy Policy explains how Bagviera collects, uses, discloses and protects personal information when you visit bagviera.com, create an account, place an order, contact us or otherwise use our online store and related services.

In this policy, Bagviera, we, us and our refer to the operator of this online store, trading as Bagviera and operating from Unit A550, 8 Ruanjian Road (Zi Bian 8-501), Guangzhou, Guangdong 510640, China.

The store is hosted by Shopify. Shopify and other service providers may process personal information on our behalf or for their own disclosed purposes. Where the Australian Privacy Act 1988 and Australian Privacy Principles (APPs) apply to our activities, we handle personal information in accordance with those requirements.

2. Personal information we collect

Depending on how you interact with the store, we may collect:

Contact and delivery information, including your name, billing address, shipping address, email address and telephone number;
Order and transaction information, including products viewed or ordered, order value, discounts, delivery method, returns, refunds and transaction status;
Account information, including account identifiers, preferences and saved settings;
Communications, including customer support enquiries, return requests, reviews and other messages you send to us;
Device and technical information, including IP address, browser type, device type, cookie identifiers, approximate location derived from IP address and information about interaction with the website; and
Marketing preferences, including whether you subscribed to or opted out of promotional email.

Payments are processed by Shopify and authorised payment providers. Bagviera does not directly receive or store complete payment card numbers, card security codes or online banking passwords. We may receive limited payment information such as payment status, payment method type, transaction reference and fraud-screening results.

We do not intentionally collect government identification numbers, health information or other sensitive information unless it is reasonably necessary, permitted by law and clearly requested for a stated purpose.

3. How we collect information

We collect personal information:

directly from you when you place an order, create an account, subscribe to email, submit a form or contact us;
automatically through the website, cookies and similar technologies;
from Shopify, payment providers, fraud-prevention providers, delivery carriers and other service providers involved in an order; and
from another person where that person lawfully provides information on your behalf, such as when sending a gift.

If you do not provide information required for checkout, payment or delivery, we may be unable to complete the order.

4. How we use personal information

We may use personal information to:

provide and operate the online store;
process payments and fulfil, deliver and track orders;
communicate about orders, delivery, returns and refunds;
create and maintain customer accounts;
provide customer support and respond to enquiries;
detect, investigate and prevent fraud, misuse and security incidents;
improve website performance, products and customer experience;
comply with legal, accounting, tax and regulatory obligations;
establish, exercise or defend legal claims; and
send promotional email where you have subscribed or where otherwise permitted by law.

Where consent is required, you may withdraw it at any time, although withdrawal does not affect processing already carried out lawfully. We may continue to send non-promotional communications that are necessary for an order, account, security matter or legal obligation.

5. Cookies and similar technologies

The store uses cookies and similar technologies for functions including keeping the cart and checkout working, remembering preferences, protecting accounts, detecting fraud, measuring performance and supporting advertising or marketing features where enabled and permitted by law.

Some cookies are set by Shopify or another service provider. Browser settings can be used to block or delete cookies, but blocking essential cookies may prevent the cart, account or checkout from functioning correctly. Where the website provides a cookie or privacy-preference control, you can use that control to manage non-essential cookies.

6. Marketing communications

We send promotional email only where you have subscribed or where otherwise permitted by applicable law. You can unsubscribe using the link in a promotional email or by contacting us. Unsubscribing does not stop transactional messages about an order, delivery, return, refund, account or security issue.

We do not send promotional text messages unless you separately provide a mobile number and valid consent for that purpose.

7. How we disclose personal information

We may disclose personal information where reasonably necessary to Shopify; payment and fraud-prevention providers; fulfilment partners, warehouses, postal operators and delivery carriers; technology, cloud, email and customer-support providers; analytics and advertising providers where enabled and permitted by law; professional advisers; regulators, courts and government authorities; and a purchaser or successor in connection with a business transaction subject to appropriate safeguards.

We do not disclose personal information to an unrelated third party for that party's own direct marketing without consent where consent is required by law.

8. Overseas processing and disclosure

Bagviera operates from China and sells to customers in Australia. Personal information may therefore be processed in or disclosed to recipients outside Australia.

Likely locations include:

China, where Bagviera and fulfilment partners may process order, customer-support and delivery information;
Australia, where customers, local delivery services and relevant service providers are located;
Canada and the United States, where Shopify or other technology providers may process or store information; and
other countries in which a payment provider, delivery carrier, cloud provider or authorised subcontractor operates.

The particular countries can vary depending on the payment method, carrier and service provider used for an order. Where the APPs apply, we take reasonable steps required by APP 8 before disclosing personal information to an overseas recipient, unless an exception applies.

9. Shopify

Shopify processes information about use of the store to provide hosting, checkout, customer account, security and ecommerce functionality. Shopify may also process information for purposes described in its own notices.

More information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

order, payment-status and accounting records may be retained for up to seven years, or longer where required by law;
customer-support and return records are normally retained for up to two years after the matter is closed;
account information is retained while the account remains active and for a reasonable period after closure;
marketing subscription information is retained until you unsubscribe, after which limited suppression information may be retained; and
technical logs and cookie data are retained according to their purpose and the settings of the relevant provider.

We may retain de-identified information where it can no longer reasonably identify an individual.

11. Security and data incidents

We use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information and the services we provide. No transmission or storage system is completely secure. Do not send complete payment card details, passwords or other highly sensitive information by ordinary email.

If a data incident occurs, we will investigate and take the steps required by applicable law, including notification where the incident is likely to result in serious harm and notification is legally required.

12. Your rights and choices

Depending on the law that applies, you may have the right to request access to or correction of personal information, request deletion where appropriate, object to or restrict certain processing, request a portable copy where applicable, and withdraw consent or opt out of promotional email.

These rights are not absolute. We may need to verify your identity and may retain information where required by law or reasonably necessary for fraud prevention or dispute resolution. To make a request, email bagviera@gmail.com.

13. Privacy complaints

If you believe we have mishandled personal information, email bagviera@gmail.com with details. We aim to acknowledge a privacy complaint within five business days and provide a substantive response within 30 calendar days, unless the matter reasonably requires more time.

If the Australian Privacy Act applies and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Children's privacy

The store is intended for adults and is not directed to children under 18. We do not knowingly collect personal information directly from a child for the purpose of creating a customer account or completing an order without appropriate adult involvement.

15. Third-party links

The website may link to third-party websites or services. Their privacy practices are governed by their own notices. We are not responsible for third-party services that we do not control.

16. Changes to this policy

We may update this Privacy Policy to reflect changes to the store, service providers, data practices or applicable law. The current version and its last-updated date will be published on the website. Where required by law, we will provide additional notice of a material change.