PRIVACY POLICY

Last updated: February 2026

At Divyaline, we are committed to protecting your privacy and personal data in accordance with the Australian Privacy Principles (APP) and the Privacy Act 1988 (Cth).

This privacy policy explains how we collect, use, store, and protect your personal information when you visit our online store or make a purchase.

1. WHO WE ARE

Business name: Divyaline Legal entity name: Whispers From Bali Legal form: PT (Limited Liability Company) Full address: Graha Merdeka, Renon Unit 15, Jalan Merdeka, Sumerta Kelod, Denpasar Timur, Kota Denpasar, Bali 80239 Business ID (NIB): 1507240086789 Email: contact@divyaline.com

Our online store is hosted by Shopify Inc., headquartered at 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada.

2. WHAT INFORMATION WE COLLECT

We collect the following personal information:

Information you provide directly:

• First and last name
• Email address
• Shipping and billing address
• Phone number
• Payment information (processed securely by our payment providers)

Information collected automatically:

• IP address
• Browser and device type
• Pages visited on our site
• Date and time of your visits
• Cookie data and similar technologies
• Information about your shopping journey

3. HOW WE USE YOUR INFORMATION

We use your personal information to:

• Process and fulfill your orders
• Communicate with you about your orders (confirmations, shipping updates)
• Provide customer service and respond to your inquiries
• Process payments and prevent fraud
• Improve our website and services
• Send you marketing communications (with your consent)
• Comply with our legal and regulatory obligations
• Analyze trends and user behavior to improve your experience

4. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases:

• Contract performance: to process and deliver your orders
• Consent: for marketing communications and the use of non-essential cookies
• Legitimate interests: to improve our services, prevent fraud, and ensure security
• Legal obligations: to comply with tax and accounting laws

5. SHARING YOUR INFORMATION

We share your personal information only in the following cases:

With Shopify: Our e-commerce platform Shopify collects and processes your data to provide online store services. See Shopify's privacy policy: https://www.shopify.com/legal/privacy/app-users

With our service providers:

• Payment processors (to securely process your transactions)
• Carriers and delivery services (to ship your orders)
• Product suppliers (based in China, for order fulfillment)
• Analytics and marketing services (with your consent)

With authorities: We may disclose your information if required by law or to protect our legal rights.

We never sell your personal data to third parties.

6. INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred to and stored in the following countries:

• Canada: Shopify servers and infrastructure
• Indonesia: our company's headquarters
• China: suppliers for order fulfillment and shipping
• United States: certain service providers (hosting, analytics)

We ensure these transfers comply with applicable data protection standards and that your information is adequately protected.

7. DATA RETENTION

We retain your personal data for as long as necessary to:

• Fulfill your orders and provide our services
• Comply with our legal obligations (e.g., tax and accounting obligations: 7 years)
• Resolve disputes and enforce our agreements

You may request deletion of your data at any time, subject to our legal obligations.

8. YOUR RIGHTS UNDER THE AUSTRALIAN PRIVACY PRINCIPLES

In accordance with the Privacy Act 1988 and the Australian Privacy Principles, you have the following rights:

Right of access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request correction of your personal data if it is inaccurate or incomplete.

Right to erasure: You may request deletion of your personal data, subject to certain legal exceptions.

Right to object: You may object to the processing of your data for direct marketing purposes.

Right to withdraw consent: You may withdraw your consent at any time for processing based on consent.

Right to lodge a complaint: You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have not respected your privacy rights.

To exercise these rights, contact us at: contact@divyaline.com

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

• Ensure our website functions properly (essential cookies)
• Analyze traffic and improve your experience (analytics cookies)
• Personalize content and advertising (marketing cookies, with your consent)

You can manage your cookie preferences via:

• Your browser settings
• Our cookie consent banner (on your first visit)

For more information on how Shopify uses cookies, see: https://www.shopify.com/legal/cookies

10. DATA SECURITY

We implement appropriate technical and organizational security measures to protect your personal data against:

• Unauthorized access
• Loss, destruction, or alteration
• Accidental disclosure

These measures include:

• SSL/TLS encryption for transactions
• Secure data storage
• Restricted access to personal data
• Regular security audits

However, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security.

11. MARKETING AND COMMUNICATIONS

With your consent, we may send you:

• Promotional offers and discounts
• Information about our new products
• Newsletters

You can unsubscribe at any time by:

• Clicking the unsubscribe link in our emails
• Contacting us at: contact@divyaline.com
• Adjusting your preferences in your customer account

12. LINKS TO THIRD-PARTY SITES

Our site may contain links to third-party websites (social media, partners). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

13. CHILDREN'S PRIVACY

Our site is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected information about a minor, please contact us immediately.

14. CHANGES TO THIS POLICY

We may update this privacy policy from time to time to reflect:

• Changes in our practices
• Legal or regulatory developments
• Improvements to our services

The date of the last update is shown at the top of this policy. We encourage you to review this page regularly.

In the event of significant changes, we will notify you by email or via a notice on our site.

15. CONTACT AND COMPLAINTS

For any questions regarding this privacy policy or to exercise your rights, contact us:

Email: contact@divyaline.com

We are committed to responding to your requests within 30 days.

If you are not satisfied with our response, you may lodge a complaint with:

Office of the Australian Information Commissioner (OAIC) Website: https://www.oaic.gov.au Phone: 1300 363 992 Email: enquiries@oaic.gov.au

16. CONSENT

By using our site and making a purchase, you consent to the collection, use, and sharing of your personal information as described in this privacy policy.