Privacy

What we collect

When you order: your name, email, phone (optional), delivery address and order history. When you subscribe: your email. When you browse: standard analytics and advertising signals (pages viewed, device, approximate location).

Payment details go directly to Stripe and never touch our servers. We see only the payment method's brand and last four digits.

How we use it

• To fulfil orders — confirmations, shipping updates, returns.
• To send releases and campaign previews, only if you opt in. Unsubscribe any time.
• To measure our advertising with the Meta Pixel and Conversions API. Where personal details (email, phone) are shared for this purpose they are hashed (SHA-256) before leaving our servers.

We never sell your information. Data is shared only with the services that run the store: Supabase (database & authentication), Stripe (payments), Resend (email) and Meta (advertising measurement), each under their own privacy terms.

Storage & your rights

Data is stored with Supabase in encrypted infrastructure. Order records are retained as required by Australian tax law. You may request a copy of your data, correction, or deletion (excepting records we must keep) at any time — write to hello@selah.exampleand we'll act within 30 days.

This policy is drafted for the Australian Privacy Principles (Privacy Act 1988). If you are ordering from overseas, your local rights (e.g. GDPR) are respected on request.