Privacy policy

PRIVACY POLICY

Last updated: September 2026

YOUR PRIVACY: OVERVIEW

Eco Tan Pty Ltd (“Eco Tan”, “Eco By Sonya”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information that we collect, hold, use and disclose.

Eco Tan Pty Ltd is responsible for the personal information collected through the Sites. If you are located in the European Union (EU) or the United Kingdom (UK), Eco Tan Pty Ltd is the “controller” of your personal data.

This Privacy Policy explains how we collect and handle personal information when you interact with us, including when you visit or purchase from our websites, communicate with us, use our customer service or AI-powered services, interact with our advertising, subscribe to our communications or otherwise engage with Eco Tan.

This Privacy Policy applies to information collected through websites operated or provided by Eco Tan, including:

• www.ecotan.com.au
• www.ecotan.com
• www.ecobysonyadriver.eu
• www.ecotan.co.nz
• www.ecotan.ca
• www.ecobysonyadriver.co.uk

and any other websites, online stores or digital services operated by Eco Tan from time to time (collectively, the “Sites”).

For the purposes of this Privacy Policy, “personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined under applicable privacy laws. It includes “personal data” as defined under the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Our Sites may contain links to websites, applications or services operated by third parties. We do not control those third parties and this Privacy Policy does not apply to their privacy practices. We encourage you to review the privacy policies of third parties before providing personal information to them.

COLLECTION OF YOUR INFORMATION

We collect personal information where it is reasonably necessary for our business activities and to provide our products and services.

We may collect personal information when you:

• purchase or enquire about a product, gift card or service;
• create an account or complete a form on our Sites;
• subscribe to our email, SMS or other marketing communications;
• contact our customer service team;
• interact with an AI-powered chatbot, virtual assistant or other automated service;
• participate in a survey, competition, promotion or giveaway;
• submit a product review, testimonial or other content;
• participate in a loyalty, referral or rewards program;
• communicate with us through email, telephone, social media, messaging services or other channels;
• browse or interact with our Sites, emails or other digital content;
• click on or interact with advertising for Eco Tan on third-party platforms; or
• otherwise voluntarily provide information to us.

The personal information we collect will depend on how you interact with us and may include:

• your name;
• email address;
• telephone number;
• billing and delivery address;
• account username and password;
• date of birth or age, where relevant;
• information you provide about your preferences or interests;
• order, transaction and purchase history;
• information you provide when contacting customer service;
• information you provide when interacting with our AI-powered chatbot or other automated services;
• product reviews, testimonials and other content you submit;
• marketing and communication preferences; and
• any other personal information that you voluntarily provide to us.

Where you make a payment, payment information may be processed by our payment providers. We may receive limited information relating to your payment or transaction but do not necessarily receive or store your complete payment card details.

We may also automatically collect technical and usage information when you interact with our Sites, including:

• IP address;
• browser and device information;
• operating system;
• cookie, advertising and device identifiers;
• approximate location derived from technical information;
• pages or products viewed;
• referring websites or sources;
• interactions with our Sites;
• interactions with advertisements;
• shopping cart activity;
• purchases and other conversion events; and
• dates, times and duration of interactions.

We may combine information collected through different interactions with us where permitted by applicable law.

ARTIFICIAL INTELLIGENCE AND AUTOMATED SERVICES

Eco Tan may use artificial intelligence (“AI”), machine learning and other automated technologies to support our business and improve our customer experience.

These technologies may be used for purposes including:

• providing AI-powered website chat and customer assistance;
• answering common customer questions;
• providing information about our products;
• assisting customers in finding products that may suit their preferences;
• assisting our customer service team;
• analysing and categorising customer enquiries;
• improving website functionality and customer experience;
• supporting marketing and advertising activities;
• generating or assisting with business and marketing content;
• analysing business information and trends; and
• improving internal business processes.

If you interact with an AI-powered chatbot or automated service on our Sites, information you provide through that service may be collected, processed and stored by Eco Tan and/or third-party technology providers that provide or support the service.

Our website chat assistant is developed and operated by Eco Tan using artificial intelligence technology provided by Anthropic PBC (“Anthropic”), a technology provider based in the United States. When you use the chat assistant, the content of your conversation is sent to Anthropic so that a response can be generated. Anthropic processes this information on our behalf as a service provider under commercial terms that do not permit it to use your conversations to train its AI models.

When you use our chat assistant, you will be told that you are interacting with an AI system and not a person. Chat conversations are recorded and stored, and may be reviewed by authorised Eco Tan staff and our service providers for the purposes described in this Privacy Policy.

This may include the content of your conversation, information you voluntarily provide, technical information relating to your interaction and other information necessary to respond to your enquiry.

We may use information from these interactions to respond to your enquiries, provide product information or recommendations, improve our customer service and website experience, troubleshoot our services, analyse performance and for other purposes described in this Privacy Policy.

We do not permit third-party AI providers to use your chat conversations to train their AI models. We may review and analyse chat conversations, in de-identified form where practicable, to improve the accuracy, safety and performance of our chat assistant.

Information processed through AI systems may also result in information, recommendations or inferences being generated based on the information provided.

We take reasonable steps to select and use AI and technology providers in a manner consistent with our privacy obligations.

We encourage you not to provide sensitive personal information or any information that is not reasonably necessary for us to assist you when interacting with an AI-powered service.

AI-generated information may occasionally be inaccurate, incomplete or unsuitable for your particular circumstances. You may contact our customer service team if you would prefer assistance from a member of our team or require further clarification.

Our chat assistant provides general product information only. It is not a substitute for advice from a medical practitioner or other qualified professional, including in relation to skin conditions, allergies, sensitivities or pregnancy.

Where required by applicable law, we will provide additional notice or obtain consent before using personal information for a new purpose involving AI or automated technologies.

Automated decisions. We do not currently use computer programs to make decisions about you, without meaningful human involvement, that could reasonably be expected to significantly affect your rights or interests. If this changes, we will update this Privacy Policy.

COOKIES, PIXELS AND SIMILAR TECHNOLOGIES

Our Sites use cookies, pixels, tags, local storage and other similar technologies to operate our Sites and understand how customers interact with us.

These technologies may be used to:

• maintain and remember your shopping cart;
• enable essential website functionality;
• remember preferences and settings;
• keep accounts secure;
• understand how visitors use our Sites;
• analyse website traffic and performance;
• identify and troubleshoot website issues;
• understand which products and content are of interest to visitors;
• measure the effectiveness of advertising campaigns;
• attribute sales and other conversions to advertising;
• personalise content and experiences where permitted;
• create or measure advertising audiences; and
• support our marketing and advertising activities.

We may use these technologies ourselves or through third-party ecommerce, analytics, advertising, marketing and technology providers.

Information collected through these technologies may include device and browser information, IP address, cookie and advertising identifiers, pages viewed, referring sources, interactions with our Sites, interactions with advertisements, purchases and other conversion events.

Some cookies are necessary for our Sites to operate. Other cookies and tracking technologies may be used for analytics, functionality or advertising.

Where required by applicable law, we will request your consent before placing or using non-essential cookies or similar technologies.

You may be able to manage your cookie preferences through the cookie preference tools available on our Sites and through your browser or device settings. Blocking certain cookies may affect the functionality or experience of our Sites.

ADVERTISING AND CONVERSION MEASUREMENT

Eco Tan uses digital advertising to promote our products and communicate with existing and potential customers.

We may use advertising, analytics and measurement services provided by third parties, including platforms such as Google, Meta and OpenAI (including advertising on ChatGPT), as well as other advertising and technology providers we engage from time to time.

These services may use cookies, advertising pixels, tags, APIs, server-side technologies or similar tools to help us understand the effectiveness of our advertising.

Depending on the platform and technology being used, information processed for these purposes may include:

• visits to our Sites;
• advertisements viewed or clicked;
• products or pages viewed;
• additions to shopping carts;
• checkout activity;
• purchases;
• transaction or conversion values;
• device and browser information;
• advertising or cookie identifiers; and
• other information used to measure or attribute advertising performance.

Where permitted, certain information may be securely transformed, hashed or otherwise protected before being provided to an advertising or measurement provider.

Some advertising pixels may, where enabled, automatically collect and hash contact details that you enter on our Sites (for example, your email address or phone number at checkout) to help the relevant platform match activity on our Sites to an account on that platform. Hashed information may still be personal information.

We use this information to measure advertising performance, understand whether advertising contributes to purchases or other actions, improve our marketing activities, manage advertising campaigns and better understand how customers interact with Eco Tan.

Third-party advertising and technology providers process information in accordance with their own privacy policies, contractual obligations and applicable laws.

The use of advertising technologies does not mean that Eco Tan receives access to private conversations or other personal information held by an advertising platform unless that information is specifically provided to us through the relevant service.

For example, when we advertise on ChatGPT, we do not receive the content of your ChatGPT conversations. If you interact with one of our advertisements, OpenAI may measure that interaction and related activity on our Sites (such as a visit or purchase) using its pixel or similar technology, and may provide us with aggregated or de-identified reporting about the performance of our advertising.

Where required by applicable law, advertising and measurement technologies will only be activated after appropriate consent has been obtained.

HOW WE USE YOUR PERSONAL INFORMATION

We may use personal information we collect for purposes including:

• processing and fulfilling purchases and transactions;
• processing payments, refunds and returns;
• arranging delivery of products;
• administering customer accounts;
• communicating with you about orders, enquiries or requests;
• providing customer support;
• operating AI-powered customer service and chatbot functionality;
• providing product information and recommendations;
• responding to reviews, feedback or complaints;
• providing and improving our Sites, products and services;
• personalising your experience where appropriate;
• conducting analytics and understanding customer behaviour;
• measuring, attributing and optimising advertising campaigns;
• understanding how customers interact with our Sites, products, communications and advertising;
• sending marketing communications where permitted;
• administering competitions, promotions, surveys, loyalty programs and other initiatives;
• developing and managing Eco Tan's business, staff and operations;
• maintaining and updating our records;
• verifying your identity or information where necessary;
• detecting, investigating and preventing fraud, security incidents, misuse or other unlawful activity;
• protecting Eco Tan, our customers and third parties;
• enforcing our agreements and policies;
• developing, testing and improving automated systems and business processes where permitted by law;
• complying with applicable legal, regulatory and reporting requirements; and
• any other purpose for which you have provided consent or which is otherwise permitted or required by law.

If we do not receive certain personal information, we may be unable to provide some products, services or functionality to you. For example, we may be unable to process an order, deliver a product or respond to an enquiry without the information necessary to do so.

DIRECT MARKETING

Where permitted by applicable law, we may use your personal information to send you information about Eco Tan products, promotions, offers, events or other information we believe may be relevant to you.

Marketing communications may be sent by email, SMS or other electronic channels.

You may opt out of receiving promotional communications at any time by using the unsubscribe function included in the relevant communication or by contacting us.

Unsubscribing from promotional communications will not prevent us from sending you service-related communications that are necessary to administer your account, process transactions or communicate with you about an order or enquiry.

DISCLOSURE OF YOUR INFORMATION

We may disclose personal information to third parties where reasonably necessary to operate our business, provide our products and services or fulfil the purposes described in this Privacy Policy.

These third parties may include:

• our related companies, subsidiaries and affiliates;
• ecommerce and website platform providers;
• website hosting and cloud service providers;
• payment processors and financial service providers;
• fulfilment centres, warehouses and logistics providers;
• postal, courier and delivery providers;
• customer service providers;
• email, SMS and communications providers;
• analytics providers;
• advertising and marketing platforms;
• artificial intelligence and machine learning providers;
• chatbot and automation providers;
• information technology and cybersecurity providers;
• professional advisers including lawyers, accountants and consultants;
• agencies, contractors and other service providers acting on our behalf; and
• government, regulatory, law enforcement or other authorities where required or permitted by law.

We seek to provide service providers only with the information reasonably necessary for them to perform their services.

We do not sell personal information to third parties for their own independent direct marketing purposes. However, some privacy laws, including certain United States state privacy laws, treat allowing advertising partners to collect information through cookies and pixels on our Sites for targeted advertising as a “sale” or “sharing” of personal information.

Where required by applicable law, we will obtain appropriate consent before disclosing personal information to third parties for purposes requiring such consent.

OVERSEAS PROCESSING AND DISCLOSURE

Eco Tan operates internationally and uses service providers that may operate in, or process information from, countries outside Australia.

As a result, personal information may be disclosed to or processed by recipients located outside your country of residence.

These recipients may include ecommerce, cloud hosting, customer service, communications, analytics, advertising, AI, technology, payment and other service providers.

The countries in which personal information is likely to be disclosed or processed include the United States, Canada, New Zealand, the United Kingdom and member states of the European Union. The specific countries may vary depending on the providers and services being used.

Where required by applicable privacy laws, Eco Tan takes reasonable steps to ensure overseas disclosures and processing are handled appropriately and that relevant privacy protections are in place.

Where personal data is transferred from the EU or UK to a country that has not been recognised as providing an adequate level of data protection (including Australia and, in some cases, the United States), we rely on appropriate safeguards where required, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum. You may contact us to request more information about these safeguards.

SENSITIVE INFORMATION

We generally do not seek to collect sensitive information through our Sites unless it is reasonably necessary for a particular purpose and permitted by law.

Please avoid providing health information or other sensitive personal information through website forms, product reviews, AI chatbots or other communications unless it is reasonably necessary for your enquiry.

If we receive sensitive information, we will handle it in accordance with applicable privacy laws.

Because our products are skincare, tanning and cosmetic products, you may choose to tell us about skin conditions, allergies, sensitivities, pregnancy or other health-related matters when asking about our products, including through our AI chat assistant. If you choose to provide this information, you consent to us collecting and using it only to respond to your enquiry and to handle any related request, complaint or product safety matter. We do not use health information for marketing, advertising or audience targeting, and we do not disclose it to advertising platforms.

PROTECTION AND SECURITY OF YOUR INFORMATION

Eco Tan takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

We use a combination of physical, technological and administrative safeguards appropriate to the information we hold and the way it is processed.

We also seek to use reputable service providers and limit access to personal information to people and providers who reasonably require it for their role or service.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of information transmitted through the internet or stored electronically.

If you have questions about the security of personal information collected by Eco Tan, please contact us at hello@ecotan.com.au.

RETENTION OF YOUR PERSONAL INFORMATION

Eco Tan retains personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, operate our business, comply with our legal and regulatory obligations, resolve disputes and enforce our agreements.

Retention periods may vary depending on the nature of the information and the reason it was collected.

Personal information may be held electronically or in hard copy by Eco Tan or by service providers acting on our behalf.

When personal information is no longer required and we are not legally required to retain it, we will take reasonable steps to destroy or permanently de-identify it.

YOUR CHOICES AND MARKETING PREFERENCES

You may choose not to provide certain personal information to us. However, this may affect our ability to provide particular products, services or website functionality.

Where it is lawful and practicable, you may deal with us anonymously or by using a pseudonym, for example when asking general product questions through our chat assistant. We will need your personal information to process an order or respond to a request about your account.

You can unsubscribe from promotional email or SMS communications using the unsubscribe function provided in those communications.

Where available, you may also manage certain cookie, analytics and advertising preferences through the privacy or cookie preference tools provided on our Sites.

You may also use settings provided by your browser, device or relevant third-party platforms to manage certain tracking and advertising preferences.

ACCESS TO AND CORRECTION OF PERSONAL INFORMATION

Eco Tan takes reasonable steps to ensure that personal information we hold is accurate, complete and up to date.

Subject to applicable law and certain permitted exceptions, you may request access to personal information that we hold about you.

You may also ask us to correct personal information if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before processing an access or correction request.

To request access to or correction of your personal information, please contact our Privacy Officer using the details provided below.

We will respond to access and correction requests within a reasonable period, generally within 30 days.

PRIVACY COMPLAINTS

If you believe that Eco Tan has interfered with your privacy or has not handled your personal information appropriately, please contact our Privacy Officer.

Please provide sufficient information for us to understand and investigate your concern.

We take privacy complaints seriously. We will acknowledge your complaint, investigate the circumstances and aim to respond within 30 days.

We may request additional information from you and may need to consult with third parties or service providers in order to investigate and resolve your complaint.

We will maintain appropriate records relating to privacy complaints and their resolution.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant privacy or data protection authority, including the Office of the Australian Information Commissioner (www.oaic.gov.au), the New Zealand Office of the Privacy Commissioner (www.privacy.org.nz), the Office of the Privacy Commissioner of Canada (www.priv.gc.ca), the UK Information Commissioner's Office (www.ico.org.uk) or the data protection authority in your EU member state.

CHILDREN'S PRIVACY

Our products and Sites are intended for a general audience and we do not knowingly seek to collect personal information from children where parental or guardian consent would be required under applicable law.

If you believe that a child has provided us with personal information in circumstances where appropriate consent was required, please contact us so that we can review the information and take appropriate action.

REVIEWS AND TESTIMONIALS

Reviews and testimonials displayed on our Sites reflect the individual experiences and opinions of the customers or individuals who submitted them.

Individual experiences and results may vary.

We may moderate reviews where appropriate, including to remove unlawful, offensive, fraudulent, irrelevant or inappropriate content, or personal information that should not be publicly displayed.

Where a review, testimonial, endorsement or other content has been incentivised, sponsored or is otherwise subject to a material commercial connection, we will disclose this where required by applicable law.

THIRD-PARTY WEBSITES AND SERVICES

Our Sites may contain links to websites, social media platforms, payment services or other services operated by third parties.

These third parties have their own privacy practices and policies. Eco Tan is not responsible for the privacy practices, security or content of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business, technology, practices, legal requirements or the services we use.

The current version of this Privacy Policy will be published on our Sites and the "Last updated" date will be revised when changes are made.

Where required by applicable law, we will provide additional notice or obtain consent before using or disclosing personal information for a materially different purpose.

We encourage you to review this Privacy Policy periodically.

CONTACT US

If you have questions about this Privacy Policy, wish to request access to or correction of your personal information, or wish to make a privacy complaint, please contact:

Eco Tan Pty Ltd
Attention: Privacy Officer / Customer Service
27 Taree Street
Burleigh Heads QLD 4220
Australia

Email: hello@ecotan.com.au
Phone: 1300 596 118
International: +61 7 5568 0189