Privacy policy

Last updated: 27 July 2026

DecorusOne operates this online store and website, including its related information, content, features, tools, products and services, collectively referred to in this Privacy Policy as the “Services”.

DecorusOne is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services to you.

This Privacy Policy explains how we collect, hold, use, process and disclose your personal information when you:

  • visit or use our website;
  • create or use a customer account;
  • purchase, return or enquire about a product;
  • subscribe to our marketing communications;
  • contact our customer-support team; or
  • otherwise communicate or interact with DecorusOne.

If there is a conflict between our Terms of Service and this Privacy Policy concerning the collection, use, processing, storage or disclosure of personal information, this Privacy Policy applies to that privacy-related matter.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have had the opportunity to read and understand this Privacy Policy.

1. About DecorusOne

DecorusOne is an Australian-operated online retailer based in Perth, Western Australia. We provide products to customers in Australia and selected international destinations.

Our business details are:

2. International Scope

DecorusOne serves customers in Australia and selected international destinations. Privacy and data-protection rights differ between countries, regions and states.

Depending on where you live, you may have additional rights under the laws applicable to you. Where applicable law provides protections that cannot lawfully be limited by this Privacy Policy, those protections continue to apply.

This Privacy Policy provides a general international framework. It does not represent that the same privacy requirements, rights or legal grounds apply identically in every country.

3. Meaning of Personal Information

In this Privacy Policy, “personal information” means information that identifies you or can reasonably be linked to you.

Depending on the law applying where you live, similar terms may include “personal data”, “personally identifiable information” or other equivalent definitions.

Personal information generally does not include information that has been anonymised or de-identified so that it can no longer reasonably identify or be linked to an individual.

4. Personal Information We Collect

The personal information we collect or process depends on how you interact with DecorusOne, the Services you use, where you live and the requirements of applicable law.

Contact and identity information

We may collect:

  • your name;
  • email address;
  • telephone number;
  • billing address;
  • delivery address;
  • country or region; and
  • other information reasonably required to verify or fulfil your order.

Order and transaction information

We may collect information about:

  • products you view, add to your cart, save or purchase;
  • your order number and order history;
  • returns, refunds, replacements, exchanges and cancellations;
  • delivery and tracking information;
  • discounts or promotional codes used;
  • product reviews or feedback you submit; and
  • communications relating to your order.

Payment information

Payments are processed by Shopify and authorised payment providers.

Depending on the payment method you select, these providers may process payment-card details, billing information, payment confirmations, transaction identifiers and fraud-prevention information.

DecorusOne does not ordinarily receive or store complete payment-card numbers. Payment providers process payment information in accordance with their own privacy notices, terms and security requirements.

Customer account information

If customer accounts are enabled, we may process your account profile, login information, saved addresses, order history, preferences and account activity.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you suspect unauthorised use of your account.

Customer-support information

When you contact our customer-support team, we may collect:

  • your order number;
  • the content of your enquiry;
  • product photographs or videos;
  • delivery or return information;
  • warranty-claim information; and
  • other information reasonably required to assist you.

Please do not send passwords, full payment-card numbers or other highly sensitive financial information by email.

Device, technical and usage information

We, Shopify and authorised service providers may automatically collect:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • network information;
  • unique device or browser identifiers;
  • pages and products viewed;
  • website interactions;
  • referring website;
  • approximate location derived from an IP address;
  • shopping-cart activity; and
  • cookie and similar-technology identifiers.

Marketing information

If you subscribe to marketing communications, we may collect your contact details, communication preferences, consent status and information about how you interact with our communications.

5. Sources of Personal Information

We may collect personal information:

  • directly from you, including when you place an order, create an account, submit a form, join our mailing list or contact us;
  • automatically through the Services, including through cookies, pixels, tags, local storage and similar technologies;
  • from Shopify, which hosts and supports our ecommerce store;
  • from payment providers, including payment confirmations and fraud-prevention information;
  • from approved suppliers and fulfilment partners, including product availability, fulfilment and order-status information;
  • from couriers and logistics providers, including tracking, attempted-delivery and delivery information;
  • from technology and service providers, including analytics, fraud-prevention and customer-support providers; and
  • from marketing or advertising partners, where permitted by law and consistent with your privacy choices.

6. How We Use Personal Information

We may use personal information for the following purposes.

Providing and fulfilling the Services

We may use your information to:

  • process and confirm orders;
  • process payments and refunds;
  • arrange product fulfilment and delivery;
  • provide tracking information;
  • manage customer accounts;
  • process returns, replacements and warranty claims;
  • respond to customer enquiries;
  • manage stock and product availability;
  • maintain transaction records; and
  • provide relevant store features and product recommendations.

Communicating with you

We may send:

  • order confirmations;
  • payment and fulfilment updates;
  • tracking and delivery notifications;
  • return, refund or warranty updates;
  • account and security notices;
  • responses to customer-support requests; and
  • important updates concerning our Services or policies.

Security and fraud prevention

We may use personal information to authenticate accounts, verify transactions, identify suspicious activity, prevent fraud, protect our customers and business, secure the Services and enforce our terms and policies.

Improving our Services

We may analyse website performance, customer interactions and product interest to improve navigation, customer support, product selection and the overall shopping experience.

Marketing and advertising

Where permitted by law and consistent with your consent or privacy preferences, we may use personal information to:

  • send promotional emails or messages;
  • provide information about products, offers or services;
  • measure marketing performance;
  • create or use advertising audiences; and
  • display relevant advertising on our website or third-party platforms.

Legal and operational purposes

We may use personal information to comply with legal obligations, respond to valid legal requests, maintain financial and business records, resolve disputes, enforce agreements and establish, exercise or defend legal claims.

7. Legal Grounds for Processing

Where applicable law requires us to identify a legal ground for processing personal information, we may rely on one or more of the following grounds:

  • Performance of a contract: to process payments, fulfil orders, deliver products and provide customer support;
  • Legal obligations: to comply with tax, accounting, consumer-protection, fraud-prevention and other legal requirements;
  • Legitimate interests: to operate, secure, analyse and improve DecorusOne, where those interests are not overridden by applicable individual rights;
  • Consent: where you have provided consent for marketing, non-essential cookies or another specified activity; and
  • Legal claims: where processing is necessary to establish, exercise or defend legal rights.

The applicable legal ground may differ depending on the processing activity, your location and applicable law.

8. How We Disclose Personal Information

We may disclose personal information when reasonably necessary to operate DecorusOne, fulfil orders, provide support, prevent fraud or comply with applicable law.

Recipients may include:

  • Shopify;
  • payment providers;
  • approved suppliers and fulfilment partners;
  • couriers, postal operators and logistics providers;
  • customs and border authorities where required;
  • technology, hosting and cloud-storage providers;
  • customer-support providers;
  • analytics providers where enabled;
  • marketing and advertising providers where enabled and permitted;
  • professional advisers, including accountants, lawyers, insurers and auditors;
  • government agencies, regulators, law-enforcement bodies or courts where required or permitted by law; and
  • parties involved in a proposed or completed sale, reorganisation, merger or transfer of business assets.

We aim to disclose only the information reasonably necessary for the recipient to perform the relevant service or meet the applicable legal requirement.

9. Approved Suppliers, Fulfilment Partners and Couriers

DecorusOne uses approved third-party suppliers and fulfilment partners to process and dispatch products.

To fulfil an order, we may provide them with:

  • your name;
  • delivery address;
  • telephone number;
  • email address where required for tracking;
  • the products ordered;
  • your order reference; and
  • relevant delivery instructions.

We may also provide necessary information to couriers, postal operators, customs authorities and logistics providers.

These organisations may operate in countries other than your country of residence and may also have their own privacy obligations and privacy notices.

10. Relationship with Shopify

Our store is hosted by Shopify. Shopify collects and processes personal information relating to your access to and use of the Services to provide, secure and improve its platform and related services.

Information submitted through DecorusOne may be transmitted to Shopify and to service providers located in countries other than your country of residence.

Where enabled, Shopify features may use information about your interactions with DecorusOne and other Shopify merchants to provide enhanced services such as security, fraud prevention, personalisation, analytics and advertising-related services.

In some circumstances, Shopify acts independently in deciding how and why it processes personal information. Requests relating to Shopify’s independent processing may need to be directed to Shopify.

For more information, review the https://www.shopify.com/legal/privacy/consumersShopify Consumer Privacy Policy.

You may also use the Shopify Privacy Portal where applicable.

11. Cookies and Similar Technologies

DecorusOne, Shopify and authorised service providers may use cookies, pixels, tags, local storage and similar technologies to:

  • operate essential store and checkout functions;
  • maintain your shopping cart;
  • remember your preferences;
  • authenticate customer accounts;
  • prevent fraud and protect the Services;
  • measure website performance;
  • understand how customers use the Services;
  • personalise available features; and
  • support marketing and advertising where permitted.

Depending on your location, you may be shown a cookie banner allowing you to accept, reject or manage certain non-essential cookies.

You may also control cookies through your browser settings. Disabling essential cookies may prevent parts of the store, shopping cart or checkout from functioning properly.

12. Marketing Preferences

Where permitted, DecorusOne may send marketing communications if you have subscribed, consented or otherwise become eligible to receive them under applicable law.

You can unsubscribe from promotional emails at any time by selecting the unsubscribe link in the email or contacting support@decorusone.com.

Unsubscribing from marketing does not prevent us from sending transactional communications relating to your orders, deliveries, account, returns, refunds, warranties or security.

13. Data Sharing and Targeted Advertising Choices

Depending on where you live, you may have the right to opt out of certain disclosures or uses of personal information for targeted advertising, or activities legally defined as a “sale” or “sharing” of personal information.

DecorusOne does not sell personal information for money. However, certain analytics or advertising activities may be legally classified as a sale, sharing or targeted advertising in some jurisdictions.

If our data-sharing opt-out page is active, eligible customers can submit a request at:

https://decorusone.com/pages/data-sharing-opt-out

Where required and technically supported, DecorusOne or Shopify may recognise a Global Privacy Control signal as an opt-out request for the browser or device sending the signal.

14. International Transfers

Because DecorusOne uses Shopify, payment providers, suppliers, fulfilment partners, couriers and technology providers, personal information may be transferred to, stored in or processed in countries outside the country where you live.

Privacy and data-protection laws in those countries may differ from the laws in your jurisdiction.

Where required by applicable law, DecorusOne or its service providers will use recognised safeguards for international transfers, which may include:

  • adequacy decisions;
  • contractual privacy protections;
  • standard contractual clauses;
  • international data-transfer agreements; or
  • another legally recognised transfer mechanism.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • process and maintain records of orders;
  • provide customer support;
  • manage returns, refunds and warranties;
  • prevent and investigate fraud;
  • comply with accounting, taxation and legal obligations;
  • resolve disputes; and
  • enforce our agreements and policies.

Retention periods differ depending on the type of information, the reason it was collected and applicable legal requirements.

When information is no longer reasonably required, we may delete, destroy or de-identify it, subject to applicable legal, contractual and technical limitations.

16. Information Security

DecorusOne uses reasonable administrative, technical and organisational safeguards intended to protect personal information against loss, misuse, interference and unauthorised access, alteration, disclosure or destruction.

No information system or transmission method is completely secure. DecorusOne cannot guarantee absolute security.

Please do not provide passwords, full payment-card numbers or highly sensitive information through ordinary email or other unsecured communication channels.

17. Children’s Privacy

The Services are intended for adults and are not directed to children.

DecorusOne does not knowingly collect personal information directly from children below the age at which they may lawfully consent to the relevant processing in their jurisdiction.

If you are a parent or guardian and believe that a child has provided personal information to DecorusOne, contact support@decorusone.com. We will review the request and take appropriate action where required.

18. Your Privacy Rights

Depending on where you live and applicable law, you may have one or more of the following rights:

  • request access to personal information held about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of certain information;
  • request a portable copy of certain information;
  • object to or restrict certain processing;
  • withdraw consent where processing is based on consent;
  • opt out of certain marketing;
  • opt out of certain targeted advertising, sale or sharing activities;
  • appeal a denied privacy request where applicable; and
  • submit a complaint to DecorusOne or an applicable privacy authority.

Privacy rights are not absolute. Exceptions may apply, and we may be required or permitted to retain or continue processing some information.

19. Australia

Eligible individuals in Australia may request access to or correction of personal information held by DecorusOne and may submit a complaint about how their information has been handled.

If you remain dissatisfied after contacting us, you may be entitled to contact the Office of the Australian Information Commissioner or another applicable authority.

Information about Australian privacy rights is available at https://www.oaic.gov.auhttps://www.oaic.gov.au.

20. New Zealand

Eligible individuals in New Zealand may have rights to request access to and correction of their personal information and to submit a privacy complaint.

If a complaint remains unresolved, you may be entitled to contact the Office of the Privacy Commissioner of New Zealand.

21. European Economic Area and United Kingdom

Subject to applicable exceptions and limitations, eligible individuals in the European Economic Area or United Kingdom may have rights to:

  • access personal information;
  • correct inaccurate information;
  • request erasure;
  • restrict processing;
  • object to processing;
  • receive certain information in a portable format;
  • withdraw consent where processing relies on consent; and
  • submit a complaint to an applicable supervisory authority.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Customers in the European Economic Area can obtain information about supervisory authorities through the https://edpb.europa.eu/about-edpb/about-edpb/members_enEuropean Data Protection Board.

Customers in the United Kingdom may contact the Information Commissioner’s Office where applicable.

22. Canada

Subject to applicable Canadian privacy laws, eligible individuals may have rights to:

  • request access to personal information;
  • request correction of inaccurate information;
  • obtain information about how personal information is used or disclosed;
  • withdraw consent where permitted; and
  • submit a privacy complaint.

Withdrawing consent may affect our ability to provide a product or service where the relevant information is necessary to complete the transaction.

23. United States

Privacy rights in the United States differ between states. Subject to eligibility, legal thresholds, exceptions and verification requirements, residents of certain states may have rights to:

  • know what categories of personal information are collected;
  • access personal information;
  • correct inaccurate personal information;
  • request deletion of certain personal information;
  • obtain a portable copy of certain information;
  • opt out of targeted advertising;
  • opt out of the sale or sharing of personal information;
  • limit certain uses of sensitive personal information where applicable;
  • appeal a denied privacy request where applicable; and
  • exercise privacy rights without unlawful discrimination.

DecorusOne does not sell personal information for monetary payment. Some analytics or advertising activities may nevertheless be treated as a sale, sharing or targeted advertising under certain state privacy laws.

24. Submitting a Privacy Request

To submit a privacy request, email support@decorusone.com.

Please include:

  • your full name;
  • your contact information;
  • relevant order or account information; and
  • a clear description of your request.

We may need to verify your identity before processing your request. We will request only the information reasonably necessary to complete the verification.

We will respond within the timeframe required by applicable law.

25. Authorised Agents

Where permitted by law, you may appoint an authorised agent to submit a privacy request on your behalf.

Before accepting an agent’s request, we may require proof that the agent has authority to act for you. We may also need to verify your identity directly.

26. Third-Party Websites and Services

The Services may contain links to websites, social-media platforms or other services operated by third parties.

DecorusOne is not responsible for the privacy, security, accuracy or practices of third-party services that we do not control.

Review the privacy policy and terms of each third-party service before providing personal information.

27. Privacy Complaints

If you have a concern about how DecorusOne handles personal information, contact us so that we can investigate and respond.

Email: support@decorusone.com

Please include:

  • your name and contact details;
  • a description of your concern;
  • relevant dates, order numbers or account details; and
  • the outcome you are seeking.

We will review and respond to privacy complaints within a reasonable period and within any timeframe required by applicable law.

Depending on your location, you may also have the right to submit a complaint to your local privacy or data-protection authority.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, suppliers, fulfilment arrangements or legal obligations.

When this Privacy Policy is updated, we will publish the revised version on our website and update the “Last updated” date.

We will provide additional notice where required by applicable law.

29. Contact DecorusOne

If you have questions about this Privacy Policy, our privacy practices or your privacy rights, contact:

For the purposes of applicable data-protection laws, [LEGAL BUSINESS NAME], trading as DecorusOne, is the controller, organisation or business responsible for the personal information described in this Privacy Policy, except where Shopify or another service provider acts independently under its own legal obligations.