Privacy Policy

Last updated: 22 October 2026

Ancarta Pty Ltd (“Ancarta”, “we”, “us” or “our”) respects your privacy. This policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to ancarta.com.au, our emails and messages, and our invitation and community programme.

1. Information we collect

Information you give us, such as:

Your name, email address, phone number, and billing and delivery addresses
Order details and payment confirmation (we never see or store your full card details)
Messages you send our support team, and reviews or feedback
Your marketing preferences
When you accept an invitation or join our community programme: your Instagram handle, TikTok handle (optional) and the personal code you choose

Information collected automatically when you use our website, such as your IP address, device and browser type, pages viewed, links clicked, referring sites and general usage data, collected through cookies, pixels and similar technologies.

Information from others, such as Shopify and our payment providers, and our advertising and analytics partners when you interact with our ads or emails. We also record orders placed with your private or personal codes and any rewards you earn.

2. How we use your information

To process, deliver and support your orders, returns and exchanges
To run invitation offers, personal codes and community rewards, including counting orders placed with your code
To respond to your questions and provide customer service
To send marketing emails where you’ve agreed or the law otherwise allows
To understand how our website is used and improve it
To show you relevant Ancarta ads on platforms such as Instagram and Facebook, including reminders about an invitation offer you haven’t used yet, and to avoid showing ads to people they don’t apply to, such as existing customers
To measure our advertising, including telling advertising platforms, in hashed form, when someone signs up or orders through their ads
To prevent fraud and misuse, and keep our website secure
To comply with the law and protect our legal rights

If you’re in the European Economic Area or the United Kingdom, we rely on performing our contract with you (orders and programme benefits), our legitimate interests (running and securing our business, measuring and improving our services, and showing you relevant ads), your consent (marketing emails and non-essential cookies, where required) and our legal obligations. You can object to our use of your information for advertising at any time.

3. Cookies

We and our partners, including Shopify, use cookies and similar technologies to run the website, remember your preferences, understand how the site is used and show relevant advertising. Where required, we ask for your consent first through our cookie banner, and you can change your choice at any time. You can also block or delete cookies in your browser, although some features may then not work. For more about Shopify’s cookies, see shopify.com/legal/cookies.

4. Sharing your information

We share personal information only where needed to run our business, with:

Shopify, which hosts our store, and our payment providers
Shipping carriers and fulfilment partners
Our email and messaging providers, including Resend
Website, hosting and technology providers, including Cloudflare
Advertising and analytics partners, including Meta
Reviews providers, professional advisers, and authorities where the law requires

We use the advertising tools of Meta (Facebook and Instagram). We may share your email address, phone number, name and location details (such as city, postcode and country) with Meta in hashed (scrambled) form so Meta can match them to its users. We use this to show relevant Ancarta ads to our customers and community members, such as a reminder of an invitation offer you haven’t used yet; to avoid showing ads to people they don’t apply to, such as existing customers; to help Meta find new people similar to our customers; and to measure how our ads perform, including signups and orders that come from them. You can opt out at Your Privacy Choices or by emailing support@ancarta.co, and we’ll leave you out of the lists we share with Meta from our next update.

If you share your personal code, we tell you how many orders used it, but never who placed them.

We may also share information in connection with a sale or restructure of our business, or to protect our rights and prevent fraud.

5. We don’t sell your information

We don’t sell or rent your personal information for money. Some US state laws treat sharing information with advertising partners through cookies and pixels, for targeted advertising, as a “sale” or “sharing”. You can opt out of this, including the customer lists described in section 4, at Your Privacy Choices, and we treat a Global Privacy Control (GPC) signal from your browser as an opt-out for that browser.

6. Marketing

We send marketing emails where you’ve opted in or the law otherwise allows. When you accept an Ancarta invitation, you agree to receive emails from us. You can unsubscribe at any time using the link in every email, and you keep your welcome offer, codes and rewards. We’ll still send the messages you need, such as your code, order and delivery updates, and reward notices.

Ruby or our team may also message you on Instagram about your invitation. Just tell us to stop and we won’t message you about offers again.

7. Reviews and public content

Reviews, photos and other content you post publicly, on our website or social media, can be seen by others. Please don’t include personal or sensitive information.

8. Keeping your information

We keep personal information only as long as we reasonably need it, for example to manage orders and rewards, provide support, meet tax and legal requirements, resolve disputes and prevent fraud. After that, we delete or anonymise it.

9. Security

We take reasonable steps to protect your personal information from loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so please avoid sending sensitive information to us by email.

10. Your rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you, and receive a copy
Correct inaccurate or incomplete information
Ask us to delete your information
Object to or restrict certain uses, including opting out of targeted advertising
Withdraw your consent where we rely on it
Unsubscribe from marketing at any time

To make a request, email support@ancarta.co. We may need to verify your identity first. Where the law allows, you can ask someone to make a request for you, and you can appeal if we decline your request. We won’t treat you differently for exercising your rights.

11. International transfers

We’re based in Australia. Our service providers, including Shopify, Cloudflare, Resend and Meta, may store or process personal information outside Australia, including in the United States. Where the law requires, we use recognised safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses.

12. Children

Our website isn’t directed at children, and we don’t knowingly collect personal information from children without appropriate consent. If you believe a child has given us personal information, please contact us and we’ll take appropriate action.

13. Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You can also complain to the privacy regulator where you live, such as the Office of the Australian Information Commissioner (OAIC) in Australia, or your local data protection authority in the EEA or UK.