Privacy policy

Last updated: 3 November 2026

This Privacy Policy explains how ECOM X HUB LIMITED, trading as Idyl Spaces ("Idyl Spaces", "we", "us" or "our"), collects, uses, shares and protects your personal information when you visit idylspaces.com, place an order or get in touch with us. "You" and "your" refer to anyone who uses our website or services.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). As a company registered in the United Kingdom, we also comply with UK data protection law where it applies to our activities.

Who our services are for

Idyl Spaces sells to customers in Australia, and orders can only be delivered to Australian addresses. Our website and services are not intended for people outside Australia, and orders placed from overseas cannot be fulfilled.

1. Personal information we collect

Depending on how you use our website, we may collect:

Your name
Billing and delivery addresses
Email address and phone number
Order history and any messages you send us
Payment information (handled securely by our payment providers, not stored by us)
IP address, device type and browser details
Information about how you use our website, collected through cookies and analytics tools

We don't ask for sensitive information, such as health details or political opinions, and you shouldn't need to provide it to shop with us.

2. How we collect it

We collect personal information directly from you when you place an order, create an account, subscribe to emails or contact us. Some information is collected automatically through cookies and similar technologies, and we may also receive details from payment providers and couriers in connection with your order.

3. Why we use your information

We use personal information to:

Process, fulfil and deliver your orders
Send order confirmations, delivery updates and service messages
Respond to questions, returns and warranty claims
Improve our website, products and customer experience
Prevent fraud and keep our website secure
Comply with our legal, tax and accounting obligations
Send you marketing emails, where you've agreed to receive them

Every marketing email includes an unsubscribe link, in line with the Spam Act 2003 (Cth), and you can opt out at any time.

4. Who we share it with

We only share personal information where it's needed to run our business and serve you, including with:

Payment providers, to process your payment securely
Fulfilment partners, warehouses and couriers, to deliver your order
Our e-commerce platform, IT and website service providers
Analytics and advertising partners, such as Google
Government or regulatory bodies, where required by law

These parties are required to protect your information and use it only for the purposes we've agreed. We never sell your personal information.

5. Overseas disclosure

Because our company is based in the United Kingdom and we work with international service providers, your personal information may be stored or processed outside Australia, including in the United Kingdom, the United States and the countries where our fulfilment partners operate.

Before sharing information overseas, we take reasonable steps to make sure recipients handle it in a way that's consistent with the Australian Privacy Principles, for example through data protection agreements and contractual safeguards.

6. Cookies and tracking

We use cookies and similar technologies to:

Keep our website running properly, including your cart and checkout
Remember your preferences
Understand how visitors use our site
Show relevant advertising, including through Google services

You can block or delete cookies in your browser settings, although some parts of the website may not work as intended without them.

7. How long we keep it

We keep personal information only for as long as we need it to complete your order, handle returns and claims, resolve disputes and meet legal and tax record-keeping requirements. After that, it is securely deleted or de-identified.

8. Keeping your information secure

We use appropriate technical and organisational safeguards to protect personal information from misuse, loss, and unauthorised access, change or disclosure. Payments are processed through encrypted systems, and we never store your full card details.

If a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

9. Your privacy rights

You can:

Ask for access to the personal information we hold about you
Ask us to correct information that's inaccurate, out of date or incomplete
Ask us to delete your information, unless we're legally required to keep it
Opt out of marketing emails at any time
Interact with us anonymously or using a pseudonym where practical (for example, when asking a general question), although we'll need your details to process an order

To make a request, email us using the details below. We'll respond within 30 days, and we won't charge you for making a request.

10. Complaints

If you're concerned about how we've handled your personal information, please contact us first so we can look into it. We'll respond within 30 days. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

11. Third-party websites

Our website may include links to other websites. We don't control those sites and aren't responsible for their privacy practices, so we recommend reading their privacy policies.