Privacy policy

Last updated: October 2026

Solstice Resort (“Solstice”, “we”, “us”, “our”) respects your privacy. This policy explains what personal information we collect, how we use it, who we share it with and the choices you have.

We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. For customers in the United Kingdom and European Union, we also comply with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

Solstice Resort
Email: contact@solsticeresort.com.au

1. Information We Collect

Information you give us

Orders: your name, shipping and billing address, email address, phone number and order details
Newsletter and SMS: your name, email address and mobile number when you sign up
Customer support: anything you share when you contact us, such as order queries, sizing questions or returns
Reviews and competitions: your name, content and any photos you submit

Information we collect automatically

When you visit our website, we collect technical information such as your IP address, browser type, device, operating system, pages viewed, time on site and how you arrived at our site. We collect this using cookies and similar technologies (see Section 7).

Information from third parties

We may receive information from payment providers (such as confirmation of payment), from Afterpay (such as approval status) and from social media platforms when you interact with our content or ads.

2. How We Use Your Information

We use your information to:

process, ship and manage your orders, returns and exchanges
provide customer support
send you marketing emails and SMS about new collections, events and offers, if you’ve opted in
personalise your shopping experience and show you relevant ads
understand how our website is used and improve it
detect and prevent fraud
meet our legal and tax obligations

3. Legal Basis for Processing (UK & EU Customers)

If you’re in the UK or EU, we rely on the following legal bases to process your personal data:

Contract: to process and deliver your order
Consent: for marketing emails, SMS and non-essential cookies (you can withdraw this at any time)
Legitimate interests: to improve our website, prevent fraud and understand our customers, where these interests aren’t outweighed by your rights
Legal obligation: to meet tax, accounting and other legal requirements

4. Marketing

We’ll only send you marketing emails or SMS if you’ve opted in. Every message includes a simple way to unsubscribe: an unsubscribe link in emails, or replying STOP to SMS. You can also email us at contact@solsticeresort.com.au at any time.

To make our communications more relevant, we may personalise them based on your browsing and purchase history. You can opt out of this by unsubscribing from marketing.

5. Who We Share Your Information With

We never sell your personal information. We only share it with trusted service providers who help us run our business, and only as much as they need to provide their services.

Provider	Purpose
Shopify	E-commerce platform and order management
Payment providers (e.g. Shopify Payments, PayPal)	Secure payment processing
Afterpay	Buy now, pay later payments
Klaviyo	Email and SMS marketing
Meta (Facebook & Instagram)	Advertising and measuring ad performance
Google Analytics	Website analytics
Australia Post, DHL Express	Order delivery

When you choose Afterpay at checkout, Afterpay collects and uses your information under its own privacy policy, which we recommend you read.

We may also disclose your information if the law requires it, to protect our rights or to prevent fraud. If Solstice is sold or merged with another business, your information may be transferred to the new owner so they can continue to serve you.

6. International Transfers

Some of our service providers store or process data outside Australia, the UK and the EU, including in the United States, Canada and Ireland.

For Australian customers, by using our website you acknowledge that your information may be handled overseas, where privacy laws may differ from those in Australia.

For UK and EU customers, when your data is transferred outside the UK or EU we make sure appropriate safeguards are in place. These include the European Commission’s Standard Contractual Clauses (and the UK equivalent) or transfers to countries recognised as providing adequate protection.

7. Cookies & Tracking

We use cookies and similar technologies, including the Meta Pixel and Google Analytics, for:

Essential: keeping the website working, such as your cart and checkout
Analytics: understanding how visitors use our site
Marketing: showing you relevant ads on other platforms and measuring how well they work

UK and EU visitors will be asked for consent before we use non-essential cookies, and you can change your preferences at any time through our cookie banner. All visitors can also manage cookies in their browser settings, though some parts of the site may not work properly if you disable them.

You can learn more about controlling ads at Meta Ad Preferences and opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

8. Payments

Payments are processed securely by our payment providers. Solstice never sees or stores your full card details. All of our payment providers comply with the Payment Card Industry Data Security Standard (PCI-DSS).

9. How Long We Keep Your Information

We keep your personal information only as long as we need it for the purposes in this policy, including to meet legal, tax and accounting requirements. For example, order records are generally kept for up to seven years for tax purposes. When we no longer need your information, we delete or de-identify it securely.

10. Keeping Your Information Secure

We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction. Our website uses SSL encryption. No online transmission or storage is completely secure, so we can’t guarantee absolute security.

11. Your Rights

All customers can ask to access or correct the personal information we hold about them.

UK and EU customers also have the right to:

ask us to delete your personal data
restrict or object to how we process your data, including for direct marketing
receive your data in a portable format
withdraw consent at any time, without affecting processing that has already happened
complain to a data protection authority

To make a request, email contact@solsticeresort.com.au. We may need to confirm your identity first. We’ll respond within 30 days (or within one month for UK and EU requests).

12. Complaints

If you have a concern about how we’ve handled your information, please contact us first at contact@solsticeresort.com.au and we’ll do our best to resolve it.

If you’re not satisfied with our response, you can contact:

Australia: Office of the Australian Information Commissioner (OAIC), oaic.gov.au
United Kingdom: Information Commissioner’s Office (ICO), ico.org.uk
European Union: the data protection authority in your country of residence

13. Children

Our website is not intended for children under 16, and we don’t knowingly collect their personal information. If you believe a child has given us their information, please contact us and we’ll delete it.

14. Third-Party Links

Our website may link to other websites, including our social media pages. We’re not responsible for their privacy practices and encourage you to read their privacy policies.

15. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Where the changes are significant, we’ll let you know by email or with a notice on our website.

Contact Us

If you have any questions about this policy or your personal information, please get in touch.