Soray Chicago operates this shop and this website, including all related information, content, features, tools, products and services, to offer you, as a customer, a curated shopping experience (the "Services"). Soray Chicago is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and share your personal data when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing and sharing of your personal data.
Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your data as described herein.
Personal Data We Collect or Process
When we talk about "personal data," we mean information that identifies you, or that could reasonably be linked to you. Personal data does not include information that is collected anonymously or that has been anonymized so that it no longer identifies you or can be linked to you. Depending on how you interact with the Services, where you live, and subject to applicable law, we may collect or process the following categories of personal data, including any inferences drawn from it:
- Contact details such as name, address, billing address, shipping address, telephone number and email address.
- Financial information such as credit card, debit card and account numbers, payment card information, account information, transaction details, payment method, payment confirmations and other payment details.
- Account information such as username, password, security questions, preferences and settings.
- Transaction information such as the items you view, add to your cart or wishlist, purchase, return, exchange or cancel, as well as your transaction history.
- Communications with us, including the information you provide in messages to us, for example when contacting customer support.
- Device information such as details about your device, browser or network connection, your IP address, and other unique identifiers.
- Usage information such as details about your interaction with the Services, including how and when you use or navigate them.
Sources of Personal Data
We may collect personal data from the following sources:
- Directly from you, for example when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal data.
- Automatically through the Services, for example through your device when you use our products or services or visit our website, as well as through the use of cookies and similar technologies.
- From our service providers, for example when we engage them for certain technical solutions and they collect or process personal data on our behalf.
- From our partners or other third parties.
How We Use Your Personal Data
Depending on how you interact with us or which Services you use, we use personal data for the following purposes:
- Providing, customizing and improving the Services. We use your personal data to provide the Services to you, fulfill our contract with you, process your payments, fulfill your orders, save your preferences and interests, send you account-related notifications, process purchases, returns, exchanges or other transactions, create, maintain and manage your account, arrange for shipping, enable returns and exchanges, enable you to write reviews, and provide you with a personalized shopping experience, such as product recommendations based on your purchases. This also includes using your personal data to better tailor and develop the Services for you.
- Marketing and advertising. We use your personal data for marketing and advertising purposes, for example to send you marketing, promotional and advertising communications by email, SMS or mail, and to show you online advertising for products or services on the Services or other websites, including based on items you have previously purchased or added to your cart, as well as other activity on the Services.
- Security and fraud prevention. We use your personal data to authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action against potentially fraudulent, illegal, unsafe or malicious activity, protect public safety, and secure our Services. If you register an account, you are responsible for keeping your account credentials safe. We strongly recommend that you do not share your username, password or other access credentials with anyone else.
- Communicating with you. We use your personal data to provide you with customer support, respond to you, deliver effective Services to you, and maintain our business relationship with you.
- Legal reasons. We use your personal data to comply with applicable law or respond to legal process, including requests from law enforcement or government authorities, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.
How We Share Personal Data
Under certain circumstances, we share your personal data with third parties for legitimate purposes, subject to this Privacy Policy. Such circumstances include, for example:
- With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment and shipping).
- With business and marketing partners to provide marketing services and to show you advertising. For example, we use Shopify to support personalized advertising through third-party providers, based on your online activity across different merchants and websites. Our business and marketing partners use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to direct us not to share your information for targeted advertising and marketing based on your online activity across different merchants and websites. If you would like to exercise this right, please contact us directly using the contact details set out below.
- When you direct or ask us to, or otherwise consent to our disclosure of certain information to third parties, for example to ship products to you or through your use of social media widgets or login integrations.
- With our affiliates or otherwise within our corporate group.
- In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of service or policies, and to protect the Services, our rights and the rights of our users or third parties.
Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes personal data about your access to and use of the Services in order to provide and improve them for you. Information you submit through the Services is transferred to and shared with Shopify, as well as with third parties who may be located in countries other than your country of residence, in order to provide and improve the Services for you. In addition, we use certain enhanced Shopify features to protect, grow and improve our business, which use data and information from your interactions with our shop as well as with other merchants and with Shopify. For these enhanced features, Shopify is responsible for processing your personal data, including responding to your requests to exercise your rights in relation to the use of your data for these purposes. You can learn more about how Shopify uses your personal data and the rights you have in the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights in relation to your personal data here: Shopify Privacy Portal.
Third-Party Websites and Links
The Services may contain links to third-party websites or other online platforms. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found there. Information you provide on public or semi-public platforms, including information you share on third-party social media platforms, may also be visible to other users of the Services and/or such third-party platforms, without restriction as to its use by us or third parties. The inclusion of such links does not, by itself, constitute an endorsement of the content of those platforms or their operators, unless stated otherwise on the Services.
Children's Data
The Services are not intended for use by children, and we do not knowingly collect personal data from children under the age of majority in your jurisdiction. If you are the parent or legal guardian of a child who has provided us with personal data, you may contact us using the contact details set out below to request its deletion. As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" personal data of individuals under 16 years of age, within the meaning of applicable law.
Security and Retention of Your Data
Please note that no security measure is perfect or impenetrable, and we cannot guarantee "perfect security." In addition, information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
How long we retain your personal data depends on a number of factors, such as whether we need the information to maintain your account, provide you with the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal data. However, these rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by applicable law.
- Right to know/access. You may have the right to request access to the personal data we hold about you.
- Right to delete. You may have the right to request the deletion of personal data we hold about you.
- Right to correct. You may have the right to request correction of inaccurate personal data we hold about you.
- Right to data portability. You may have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party, in certain circumstances and subject to certain exceptions.
- Right to opt out of sale or sharing for targeted advertising. Depending on where you live, you may have the right to opt out of the "sale" or "sharing" of your personal data, or to opt out of the processing of your personal data for purposes considered "targeted advertising," as defined under applicable privacy law. You may exercise this right by contacting us using the contact details set out below. Please note: if you visit our website with the "Global Privacy Control" opt-out signal enabled, we will, depending on your location, automatically treat this as an opt-out for the device and browser you use to visit the website. If we are able to associate the device sending the signal with a Shopify account, we will also apply the opt-out to that account. You can learn more about Global Privacy Control at https://globalprivacycontrol.org/. Aside from Global Privacy Control, we do not respond to other "Do Not Track" signals that may be sent by your browser or device.
- Managing your communication preferences. We may send you marketing emails, and you can opt out of receiving them at any time by using the unsubscribe link in our emails. Even after you opt out, we may still send you non-promotional emails, such as those about your account or orders.
You may exercise these rights where indicated on the Services, or by contacting us using the contact details set out below. You can learn more about how Shopify uses your personal data and the rights you have, including rights relating to data processed by Shopify, at https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your request, to the extent permitted or required by applicable law. Where permitted by applicable law, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before we accept such a request from an authorized agent, we will require proof that you have authorized them to act on your behalf, and we may also need to verify your identity directly. We will respond to your request within a reasonable timeframe in accordance with applicable law.
Complaints
If you have complaints about how we process your personal data, please contact us using the contact details set out below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or to lodge a complaint with your local data protection authority.
International Data Transfers
Please note that we may transfer, store and process your personal data outside your country of residence.
If we transfer your personal data from the European Economic Area, the United Kingdom or the United States, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority, unless the data transfer is to a country that has been deemed to provide an adequate level of data protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and notify you as required by law.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, or wish to exercise any of your rights, please contact us by email at info@soraychicago.com.
Last updated: September 10, 2026
Company Details
Shop name: Soray Chicago
Company: Zyvora Pty Ltd
ABN: 74 698 287 884
Business address: 141 King Street, Templestowe
Email: info@soraychicago.com
Phone: +61420836142