Privacy policy

MELBAROSE collects only the personal information needed to process your orders, run our website and, with your consent, send you marketing. We handle it in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Last updated: 01/10/2026

1. Who we are

The MELBAROSE website (melbarose.com) is operated by Mingopro L.L.C ("MELBAROSE", "we", "us" or "our"). Our contact details are at the end of this policy.

2. Information we collect

Contact and order details: your name, email address, phone number, delivery and billing address, and the items you order.
Payment details: these are processed by Shopify Payments. We never see or store your full card number.
Messages: emails and contact form messages you send us, including any photos you attach.
Device and browsing data: IP address, browser and device type, pages viewed, and how you arrived at our website. This is collected through cookies and similar technologies.
Marketing preferences: whether you have agreed to receive emails or SMS messages from us.

You can browse our website without telling us who you are. We need your name, email and delivery address to process an order.

3. How we collect it

We collect information directly from you when you place an order, sign up for marketing or contact us. We also collect information automatically through cookies when you use our website.

4. How we use it

To process, ship and track your orders
To handle returns, exchanges, refunds and store credit
To reply to your questions and support requests
To detect and prevent fraud
To understand how our website is used and improve it
To measure and show our ads on Google
To send marketing emails and SMS messages, only if you have agreed to receive them
To meet our legal obligations

5. Cookies and tracking technologies

Tool	Provider	Purpose
Shopify store cookies	Shopify	Keep your cart, process checkout and keep the website secure
Google Analytics 4	Google	Measure website traffic and how visitors use our pages
Google Ads tag	Google	Measure ad conversions and show our ads to people who have visited our website
Shopify Email and SMS	Shopify	Send marketing messages to people who have opted in
Track123	Track123	Show order tracking updates

You can block or delete cookies in your browser settings, although some parts of the website, such as the cart, may then stop working. You can manage personalised Google ads at adssettings.google.com.

6. Email and SMS marketing

We only send marketing messages if you have agreed to receive them, in line with the Spam Act 2003 (Cth). Every marketing email includes an unsubscribe link, and you can opt out of SMS by replying STOP. You will still receive messages about your orders.

We share your information only with service providers who help us run our business:

Shopify and Shopify Payments (website hosting, checkout and payment processing)
Our fulfilment partner and delivery carriers (to pack and deliver your order)
Track123 (order tracking)
Google (analytics and advertising)

We do not sell your personal information. We may also disclose information if the law requires it.

8. Overseas storage and disclosure

MELBAROSE is operated by a company based in the United States, and our service providers store data outside Australia. Your information is likely to be stored or accessed in the United States and Canada. We take reasonable steps to ensure these providers protect your information in a way that is consistent with the Australian Privacy Principles.

9. Automated decision-making

We use automated systems in two ways that can affect you:

Fraud screening: Shopify's fraud analysis reviews each order using your payment details, billing and delivery address, IP address and order history. An order flagged as high risk may be held for review or cancelled. If we cancel an order, we refund the full amount. You can email us to ask for a manual review.
Advertising: Google uses browsing data from our website to decide which of our ads to show you. You can turn off personalised ads at any time.

10. How we protect it

Our website and checkout are encrypted with SSL, and payments are handled by a PCI DSS Level 1 certified provider. Access to customer information is limited to the people who need it to serve you. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.

11. How long we keep it

We keep order information for as long as we need it for tax, accounting and legal purposes. We keep marketing information until you unsubscribe. After that, we delete or de-identify it.

12. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct or delete it. Email us at info@melbarose.com and we will reply within 30 days.

13. Complaints

If you have a concern about how we handle your information, email us first and we will reply within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.