Privacy Policy
Last updated: 14th March 2026
Mekora (“we,” “us,” “our”) is committed to protecting your personal information. This policy explains what we collect, how we use it, and your rights under Australian privacy law — and, if you are outside Australia, under the privacy laws of your country of residence.
Who We Are
Mekora Pty Ltd (ABN 64 695 214 165) is an Australian-registered business based in Melbourne. We own and operate the platform mekora.com and all socials (@mekora.official) relating to the business operations of Mekora Pty Ltd.
What We Collect
We collect personal information in the following ways:
Directly from you — when you create an account, place an order, contact us, or sign up for marketing emails, you provide us with:
- •Your name, email address, phone number, and shipping address
- •Payment information (processed securely by our payment providers — we do not store your card details)
- •Your order history and product preferences
- •Any information you provide when contacting us
Automatically via our website — when you browse our site, we collect:
- •Information about how you use our website (pages visited, time on site, device type)
- •Your IP address and approximate location
- •Cookie and tracking data (see Cookies and Tracking section below)
How We Use Your Information
We use your information to:
- •Process and deliver your orders
- •Send you order confirmations, shipping updates, and delivery notifications
- •Provide customer support
- •Send you marketing emails (only if you have separately opted in — you can unsubscribe at any time)
- •Improve our website and product selection
- •Run targeted advertising on platforms like Meta (Facebook/Instagram) and Google
- •Prevent fraud and protect our business
Third Parties We Share Data With
We share your information only with parties that help us run our business:
- •Payment processors (Airwallex, Afterpay) to process your transactions
- •Shipping and logistics providers to deliver your orders
- •Email marketing platform (Brevo) to send you marketing and transactional emails
- •Analytics and advertising platforms (Google Analytics, Google Ads, Meta) to measure and improve our marketing
- •Any service provider required to fulfil your order
We do not sell your personal information to third parties. We do not share your information for purposes unrelated to operating Mekora.
Cross-Border Data Transfers
Your personal information may be disclosed to recipients in the following countries:
- •Vietnam — our logistics and supplier partners who fulfil and ship your order
- •United States — Meta (advertising), Google (analytics and advertising)
- •European Union (France) — Brevo (email marketing platform)
Where your data is transferred overseas, we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles.
If you are in the European Economic Area or the United Kingdom, we transfer your personal information outside your region only with appropriate safeguards recognised under the GDPR or UK GDPR — such as an adequacy decision for the destination country or standard contractual clauses — as required by applicable law.
Data Storage, Security and Retention
Your personal information is stored securely using industry-standard encryption and security measures. Payment information is processed by PCI-compliant payment providers and is never stored on our servers.
We retain your personal information for as long as necessary to provide our services and fulfil the purposes described in this policy. Order and transaction data is retained for a minimum of 7 years to comply with Australian tax and accounting obligations. You may request deletion of your account and personal data at any time, subject to our legal retention requirements.
Your Rights
Under the Australian Privacy Act 1988, you have the right to:
- •Access the personal information we hold about you
- •Request correction of inaccurate information
- •Request deletion of your personal information (subject to legal and business requirements)
- •Opt out of marketing communications at any time
To exercise any of these rights, email us at support@mekora.com.
Your Rights Outside Australia
If you access our services from outside Australia, you may have additional rights under the privacy laws of your country of residence. Nothing in this policy excludes or limits those rights.
If you are in the European Economic Area or the United Kingdom, we process your personal information under the GDPR or UK GDPR on the following legal bases: to perform our contract with you (processing and delivering your orders), for our legitimate interests (improving our services and preventing fraud), with your consent (marketing emails — which you can withdraw at any time), and to comply with our legal obligations.
In addition to the rights listed above, you have the right to:
- •Receive a copy of your personal information in a portable format
- •Restrict or object to our processing of your personal information, including for direct marketing
- •Withdraw consent at any time, without affecting processing that happened before you withdrew it
- •Not be subject to solely automated decisions that produce legal or similarly significant effects
To exercise any of these rights, email us at support@mekora.com.
Complaints
If you believe we have breached your privacy or mishandled your personal information, you may lodge a complaint with us by emailing support@mekora.com. We will acknowledge your complaint within 5 business days and investigate it promptly. We aim to resolve all complaints within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are in the European Economic Area, you may also lodge a complaint with your national data-protection supervisory authority; in the United Kingdom, with the Information Commissioner's Office (ico.org.uk).
Data Breach Notification
In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required by Part IIIC of the Privacy Act 1988, and any overseas regulators we are required to notify under applicable law.
Marketing Emails
We only send marketing emails if you have separately opted in — for example, by checking a marketing consent box when creating an account or at checkout. Placing an order alone does not subscribe you to marketing emails. Every marketing email includes an unsubscribe link. If you unsubscribe, we will stop marketing emails but may still send transactional emails related to your orders (confirmations, shipping updates, delivery notifications).
Children
Our website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.
Contact
Mekora Pty Ltd
ABN 64 695 214 165
2 Queen Street, Melbourne, Australia