Tiya Aura · Customer information

Privacy Policy

Effective date: September 4, 2026

This Privacy Policy explains how TYA & Co Pty Ltd (ABN 66 687 255 125), trading as Tiya Aura (“Tiya Aura”, “we”, “us” or “our”), collects, uses, discloses and protects personal information when you visit tiyaaura.com, contact us, subscribe to marketing or place an order for delivery in Canada.

We handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial privacy laws, where they apply.

1. Personal Information We Collect

Depending on how you interact with us, we may collect:

  • Contact and account information: name, email address, telephone number, account credentials and communication preferences.
  • Order information: products ordered, billing and delivery address, order history, returns and customer-service records.
  • Payment information: payment method, transaction status and limited payment details provided by our payment processors. We do not receive or store your complete payment-card number.
  • Device and usage information: IP address, browser and device type, pages viewed, referring page, approximate location, cookie identifiers and interactions with our website and advertising.
  • Information you provide: messages, photographs, reviews, survey responses or other information submitted to customer care.

2. How We Collect Information

We collect information directly from you, automatically through cookies and similar technologies, and from service providers such as Shopify, payment processors, delivery partners, analytics providers and advertising platforms. Where required, we obtain consent before collecting, using or disclosing personal information.

3. Why We Use Personal Information

We use personal information to:

  • process payments, fulfil and deliver orders, provide tracking and manage returns;
  • create and maintain customer accounts;
  • respond to questions, complaints and warranty requests;
  • detect, investigate and prevent fraud, abuse and security incidents;
  • operate, troubleshoot, personalize and improve the website;
  • measure website and campaign performance;
  • send service messages and, with consent where required, promotional email or SMS messages;
  • meet accounting, tax, product-safety, legal and regulatory obligations; and
  • establish, exercise or defend legal claims.

4. Consent And Marketing Choices

We seek meaningful consent where required. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. You can unsubscribe from marketing email using the link in any message. SMS messages, if offered, include separate opt-out instructions. Withdrawal does not affect processing already lawfully completed and may prevent us from providing a service that requires the information.

5. Cookies, Analytics And Advertising

We and our providers use essential, functional, analytics and advertising cookies or similar technologies. Essential cookies support checkout, security and account functions. Optional technologies help us understand website use and measure or personalize advertising. You can manage cookies through our consent tool, where available, and your browser settings. Blocking some cookies may affect website functions.

6. When We Share Information

We may disclose personal information to Shopify, payment processors, fraud-prevention providers, warehouses, suppliers, delivery carriers, customer-support tools, analytics and advertising providers, professional advisers and government or law-enforcement bodies where permitted or required by law. We may also transfer information in connection with a financing, merger, reorganization or sale of all or part of our business, subject to appropriate safeguards.

We do not sell personal information for money. Some advertising activities may be treated as a sale, sharing or targeted advertising under certain laws. Where applicable, you may opt out by using the privacy controls provided on the Site or contacting us.

7. Shopify And Payment Processing

Our store is hosted by Shopify. Shopify processes personal information so it can provide ecommerce, security, payment and related services. Shopify’s privacy information is available at shopify.com/legal/privacy. Payment providers process payment information under their own privacy policies.

8. Processing Outside Your Province Or Canada

We and our providers may process or store personal information in Canada, Australia, the United States and other countries. Information processed elsewhere may be accessible to courts, law-enforcement and national-security authorities under local law. We use contractual and organizational safeguards appropriate to the sensitivity of the information.

9. Retention

We keep personal information only as long as reasonably necessary for the purposes described above, including to complete orders, maintain tax and accounting records, resolve disputes, enforce agreements and meet legal obligations. Retention periods vary by record type. We then delete, anonymize or securely dispose of the information where practicable.

10. Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information. No transmission or storage system is completely secure, and we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us promptly.

11. Your Privacy Rights

Subject to applicable law, you may request access to personal information we hold about you, ask us to correct inaccurate information, withdraw consent, request deletion where available, or ask how information has been used and disclosed. We may need to verify your identity and may retain information where law requires or permits.

Residents of Québec may also have rights under Québec privacy law, including rights to rectification, de-indexation in certain circumstances and data portability for qualifying computerized information. You may submit a complaint to the relevant privacy regulator, including the Office of the Privacy Commissioner of Canada or your provincial privacy authority.

12. Children

The Site is not directed to children under 14, and we do not knowingly collect their personal information without appropriate consent. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

13. Changes To This Policy

We may update this Policy to reflect changes to our practices, technology or legal obligations. We will post the updated version here and change the effective date. Where required, we will provide additional notice or seek consent.

14. Contact Us

For privacy questions, access or correction requests, withdrawal of consent or complaints, use our Contact Us form and write “Privacy Request” in the subject line. We will respond within the period required by applicable law.