Privacy Policy

Effective date: 21 July 2026
Last updated: 21 July 2026

This Privacy Policy explains how Elysian Solara ("Elysian Solara", "we", "us", "our") collects, uses, discloses, stores and deletes personal information. It applies to our website at elysiansolara.com.au, to our enquiry and quote services, to our email communications, and to our official accounts and applications on third-party platforms including Facebook, Instagram and TikTok.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the General Data Protection Regulation (EU GDPR), the UK GDPR, or United States state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) apply to you, we also comply with those laws as set out in this policy.

This policy is publicly available, free of charge, without registration or login, over a secure HTTPS connection, at the permanent address https://elysiansolara.com.au/pages/privacy-policy.

Who We Are and How to Contact Us
Information We Collect
Social Media Platform Data (Facebook, Instagram, TikTok)
How We Use Your Information
Legal Bases for Processing
How We Share and Disclose Information
Overseas Disclosure and International Transfers
Cookies, Pixels and Tracking Technologies
How Long We Keep Your Information
How We Protect Your Information
Your Rights and Choices
How to Request Deletion of Your Data
Children's Privacy
Automated Processing and AI-Assisted Content
Third-Party Websites and Links
Data Breach Notification
Complaints and Supervisory Authorities
Changes to This Policy

1. Who We Are and How to Contact Us

Elysian Solara is an Australian wellness education publisher, wellness technology marketplace and referral platform. We publish evidence-based educational content and connect customers with independent suppliers of wellness and recovery products.

Elysian Solara is the data controller (for GDPR purposes) and the APP entity (for Australian Privacy Act purposes) responsible for the personal information described in this policy.

Privacy contact
Elysian Solara
Burleigh Heads, Queensland 4220, Australia
Email: info@elysiansolara.com.au
Business hours: Monday to Friday, 9:00am to 5:00pm AEST

All privacy enquiries, access requests, correction requests, deletion requests and complaints can be sent to the email address above. We respond to privacy requests within 30 days, and usually within 2 business days.

2. Information We Collect

We only collect personal information that is reasonably necessary for our functions and activities. We do not sell personal information, and we do not collect sensitive information (such as health records) unless you voluntarily provide it to us in the course of an enquiry.

2.1 Information you give us directly

Enquiry and quote requests: your name, email address, phone number, suburb or postcode, the product category you are interested in, your budget range, your intended timeframe, and any details you choose to include in your message.
Newsletter and resource downloads: your name and email address, and your subscription preferences.
Direct correspondence: the contents of emails, contact form submissions, social media messages and comments you send us.
Feedback and reviews: any testimonial, review or survey response you choose to submit.

2.2 Information we collect automatically

Technical and device data: IP address, browser type and version, operating system, device type, screen size, language, and referring URL.
Usage data: pages viewed, time on page, scroll depth, links clicked, search terms used on our site, and the path you take through the website.
Cookie and identifier data: cookie identifiers, session identifiers, and advertising or analytics identifiers, as described in section 8.

2.3 Information we receive from third parties

Social media platforms: the data described in section 3 below.
Analytics and advertising providers: aggregated and pseudonymised audience, campaign and conversion reporting.
Supplier partners: status updates about an enquiry or quote you asked us to pass on.

2.4 Anonymous interaction

Where it is lawful and practicable, you may interact with us anonymously or under a pseudonym, for example by reading our educational content without submitting any form. Some services, such as arranging a supplier quote, cannot be provided anonymously.

3. Social Media Platform Data (Facebook, Instagram, TikTok)

This section explains exactly what we do with data obtained through third-party social media platforms, including data accessed through their developer APIs. It applies to Meta Platforms (Facebook and Instagram), TikTok, and any other platform we operate an official account or application on.

3.1 What platform data we access

When you connect with us on a social platform, interact with our content, or where we use a platform's official developer API to manage our own accounts, we may access or receive:

Basic public profile information: your platform username or handle, display name, profile picture, and platform-assigned user ID (which is typically app-scoped and specific to us).
Your interactions with our content: comments, replies, mentions, reactions, shares, and direct messages you send to our accounts.
Content we publish: videos, images, captions and posts that we upload to our own accounts, together with the platform's performance metrics for that content (views, reach, watch time, engagement, follower counts).
Aggregated audience insights: de-identified, aggregated statistics the platform provides about the people who view our content, such as broad age bands, general country or region, and active times.

We access this data only through each platform's official, authorised APIs and interfaces. We do not scrape platforms, we do not circumvent technical restrictions, and we do not remove or alter watermarks, attribution or copyright management information from platform content.

3.2 What we use platform data for

We use platform data solely to:

publish and schedule our own educational and promotional content to our own accounts;
read and respond to comments, mentions and messages directed at us;
measure how our own content performs so we can improve it;
provide customer service and answer product enquiries received through the platform.

3.3 What we never do with platform data

We do not, and will not:

sell, rent, license or trade platform data to any third party;
transfer platform data to any data broker, ad network, data aggregator, monetisation service, or any party that resells or brokers data;
use platform data to build, enrich or append profiles about individuals beyond what is necessary to answer their enquiry;
use platform data to make decisions about eligibility, credit, employment, insurance, housing or any similar determination;
use platform data for surveillance purposes, or provide it to any government or law enforcement body except where compelled by valid legal process;
use platform data to train, fine-tune or develop any artificial intelligence or machine learning model;
combine platform data with data from other sources except where strictly necessary to fulfil a request you have made to us;
attempt to re-identify individuals from de-identified or aggregated platform insights.

3.4 Consent, access revocation and platform retention

Where a platform requires your permission before we can access data, that permission is requested and recorded by the platform itself, and you grant it directly through the platform's own authorisation screen. You can withdraw that permission at any time:

Facebook: Settings and Privacy, then Settings, then Apps and Websites, then remove Elysian Solara.
Instagram: Settings, then Website Permissions or Apps and Websites, then remove Elysian Solara.
TikTok: Profile, then Settings and Privacy, then Security and Permissions, then Manage App Permissions, then remove Elysian Solara.

When you withdraw permission, we stop accessing new data immediately. Any platform data we already hold is deleted in accordance with section 12. We retain platform data only for as long as it is needed for the purpose it was obtained, and no longer than the maximum period permitted by the relevant platform's developer terms. Where a platform requires us to delete or refresh cached data within a set period, we comply with that requirement.

3.5 Data the platforms collect themselves

Facebook, Instagram and TikTok each collect and process data about you under their own privacy policies, which we do not control. Your use of those platforms is governed by their terms and privacy policies. We recommend reviewing the privacy policy of any platform you use.

3.6 No affiliation

Elysian Solara is an independent business. We are not affiliated with, endorsed by, sponsored by, or administered by Meta Platforms, Inc., TikTok, or any other platform. Any promotion or campaign we run is in no way sponsored or endorsed by those platforms.

4. How We Use Your Information

We use personal information to:

respond to your enquiries and provide the information you ask for;
prepare and arrange quotes, and connect you with relevant supplier partners where you have asked us to;
provide customer support and handle warranty or consumer guarantee queries;
send you newsletters, resources and marketing communications where you have subscribed or otherwise consented, and always with an unsubscribe option;
operate, secure, maintain and improve our website and content;
measure the performance of our content and advertising in aggregate;
detect, prevent and investigate fraud, spam, abuse and security incidents;
comply with our legal, tax, accounting and regulatory obligations.

We will not use your personal information for a materially different purpose without first obtaining your consent, unless we are permitted or required to do so by law.

5. Legal Bases for Processing

If you are located in the European Economic Area or the United Kingdom, we process personal data on the following legal bases:

Consent: marketing emails, non-essential cookies, and any optional platform permissions you grant. You may withdraw consent at any time.
Contract: steps taken at your request before entering into a transaction, such as arranging a quote.
Legitimate interests: operating and securing our website, responding to enquiries, and measuring content performance in a privacy-protective way, balanced against your rights and freedoms.
Legal obligation: retaining records required by tax, consumer and corporate law.

6. How We Share and Disclose Information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising in exchange for payment.

We disclose personal information only in the following circumstances:

Supplier partners: where you submit a quote or enquiry request, we pass your contact details and enquiry information to one or more relevant suppliers so they can respond to you. You are told this at the point of submission, and we only pass on what is necessary.
Service providers who process data on our behalf: these providers are bound by contract to use the information only to provide services to us. They include:
- our e-commerce and website hosting platform (Shopify);
- our customer relationship management and enquiry management platform;
- our email delivery and email marketing providers;
- our website analytics provider (Google Analytics);
- our advertising and measurement partners (including Meta and TikTok, where advertising or measurement tools are enabled);
- our workflow automation and internal operations tooling;
- security, spam-filtering, backup and IT support providers.
Professional advisers: lawyers, accountants and auditors, where reasonably required.
Legal and safety: where required or authorised by law, by a court or regulator, or where necessary to protect the rights, property or safety of any person.
Business transfer: in connection with a merger, acquisition or sale of assets, in which case we will require the recipient to honour this policy and will notify you of any material change.

7. Overseas Disclosure and International Transfers

Some of our service providers store or process data on servers located outside Australia, including in the United States, Ireland, Singapore and other jurisdictions where major cloud providers operate.

Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles, including through contractual data protection commitments. For transfers of personal data out of the EEA or the UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Cookies, Pixels and Tracking Technologies

Our website uses cookies and similar technologies. These fall into the following categories:

Strictly necessary: required for the site to function, including session management, security and form submission. These cannot be disabled.
Analytics: Google Analytics, used to understand how visitors find and use the site so we can improve it.
Advertising and measurement: where enabled, the Meta Pixel and TikTok Pixel, used to measure the effectiveness of our advertising and to show relevant ads.

You can control cookies in the following ways:

adjust or block cookies through your browser settings (this may affect site functionality);
install the Google Analytics Opt-out Browser Add-on;
manage ad preferences in your Meta account settings and your TikTok account settings;
use a Global Privacy Control (GPC) signal. We treat a GPC signal as a valid request to opt out of any sale or sharing of personal information.

9. How Long We Keep Your Information

We keep personal information only for as long as we need it, then securely delete or de-identify it.

Enquiry and quote records: up to 7 years, to meet Australian tax, consumer guarantee and warranty record-keeping obligations.
Newsletter subscriber records: until you unsubscribe, plus up to 12 months to honour your suppression preference.
Social media platform data (section 3): only for as long as needed to respond to your interaction, and in any event no longer than each platform's developer terms permit. Deleted immediately on request or on withdrawal of permission.
Website analytics data: retained in aggregate; individual-level analytics identifiers expire within 14 months.
Email correspondence: up to 2 years after the matter is closed, unless a longer period is required for a legal claim.

10. How We Protect Your Information

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include HTTPS/TLS encryption in transit, access controls and least-privilege permissions, credential rotation, multi-factor authentication on administrative accounts, restricted access on a need-to-know basis, regular backups, and secure deletion when information is no longer required.

No method of transmission or storage is completely secure. If you believe your interaction with us is no longer secure, contact us immediately at info@elysiansolara.com.au.

11. Your Rights and Choices

11.1 Everyone

Access: request a copy of the personal information we hold about you.
Correction: ask us to correct information that is inaccurate, out of date or incomplete.
Deletion: ask us to delete your personal information. See section 12.
Opt out of marketing: unsubscribe using the link in any marketing email, or email us.
Complain: raise a privacy concern with us directly. See section 17.

11.2 If the EU or UK GDPR applies to you

You additionally have the right to restrict processing, to object to processing based on legitimate interests, to data portability in a structured machine-readable format, to withdraw consent at any time without affecting prior lawful processing, and not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not carry out such automated decision-making.

11.3 If you are a California resident

You have the right to know what personal information we collect, use and disclose; the right to delete; the right to correct; the right to opt out of the sale or sharing of personal information; the right to limit the use of sensitive personal information; and the right not to receive discriminatory treatment for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not knowingly sell the personal information of consumers under 16.

11.4 How to exercise a right

Email info@elysiansolara.com.au with the subject line "Privacy Request". Tell us which right you are exercising and give us enough detail to locate your record, such as the email address, phone number or social media handle you used. We may ask you to verify your identity before we act, and we will only use that verification information for that purpose. Exercising these rights is free of charge. An authorised agent may act on your behalf with written authority.

12. How to Request Deletion of Your Data

You can ask us to delete all personal information we hold about you, including any data obtained through Facebook, Instagram or TikTok. There are three ways to do it, and all of them are free.

Option 1: Email us (fastest, covers everything)

Send an email to info@elysiansolara.com.au.
Use the subject line: Delete My Data.
In the body, tell us which details to search for. This can be your name, the email address you contacted us from, your phone number, or your Facebook, Instagram or TikTok username.
We will confirm receipt and issue you a deletion confirmation code, normally within 2 business days.
We will complete the deletion and email you confirmation within 30 days. You can check the status of your request at any time by replying to that email with your confirmation code, and we will respond with the current status.

Option 2: Remove our access on the platform

Revoking our app permission on a platform automatically triggers deletion of the platform data we hold about you:

Facebook: Settings and Privacy, then Settings, then Apps and Websites, find Elysian Solara, then Remove.
Instagram: Settings, then Apps and Websites or Website Permissions, find Elysian Solara, then Remove.
TikTok: Profile, then Settings and Privacy, then Security and Permissions, then Manage App Permissions, find Elysian Solara, then Remove.

When a platform notifies us that you have removed our access, we delete the associated data without requiring any further action from you.

Option 3: Unsubscribe

To stop marketing only, use the unsubscribe link at the bottom of any email. To delete your record entirely rather than simply stop emails, use Option 1.

What deletion means

When we action a deletion request we permanently delete your personal information from our live systems, and from our backups on their normal rotation cycle (no longer than 90 days). We instruct our processors to do the same.

We may need to retain a minimal record where the law requires it, for example transaction and tax records that must be kept for 7 years under Australian law, or information needed to establish or defend a legal claim. Where this applies, we will tell you exactly what is being retained and why, and that information is quarantined from all other use. We also keep a minimal suppression record (your email address in hashed form) so that we do not accidentally contact you again.

13. Children's Privacy

Our website, our services and our social media accounts are intended for adults aged 18 and over. They are not directed to children. We do not knowingly collect personal information from anyone under the age of 18, and we do not knowingly collect personal information from children under 13 in any jurisdiction.

If you believe a child has provided us with personal information, contact us at info@elysiansolara.com.au and we will delete it promptly.

14. Automated Processing and AI-Assisted Content

Some content on this website, including articles, product summaries, comparison guides and images, may be produced or assisted using artificial intelligence tools and is reviewed by a person before publication.

We do not use your personal information, your enquiry contents, or any data obtained from Facebook, Instagram or TikTok to train, fine-tune or develop artificial intelligence or machine learning models. We do not make decisions that produce legal or similarly significant effects about you using solely automated processing.

15. Third-Party Websites and Links

Our website and social content contain links to third-party websites, including supplier websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any website you visit.

16. Data Breach Notification

We maintain a data breach response plan. In the event of an eligible data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme and notify affected individuals and the Office of the Australian Information Commissioner as soon as practicable. Where the GDPR applies, we will notify the relevant supervisory authority within 72 hours of becoming aware of a reportable breach. Where a breach involves data obtained through a social media platform, we will also notify that platform as required by its developer terms.

17. Complaints and Supervisory Authorities

If you have a privacy concern, please contact us first at info@elysiansolara.com.au with the subject line "Privacy Complaint". We will acknowledge your complaint within 2 business days and provide a substantive response within 30 days.

If you are not satisfied with our response, you may complain to:

Australia: Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au, telephone 1300 363 992.
EEA or UK: your local data protection supervisory authority, or the UK Information Commissioner's Office at ico.org.uk.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The "Last updated" date at the top of this page shows when it was last revised. Where changes are material, we will take reasonable steps to notify you, for example by a notice on this website or by email. This URL will remain the permanent home of our Privacy Policy.

Item added to your cart