Privacy Policy

Operator and contact

Zero Sophia is operated by Xirophi Pty Ltd (Sydney, Australia). We are responsible for the personal information collected through zerosophia.com. For privacy enquiries, to access or correct your information, or to make a complaint, contact office@zerosophia.com. We acknowledge complaints within 7 days and aim to resolve them within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

What we collect

We collect only the information needed to fulfil your order and run the studio:

• Your name, email address, and shipping address
• The items you order and your order history
• Account details, if you create an account (handled by our identity provider, Supabase)
• Messages you send us by email

Payment information

Payments are processed securely by Stripe. Your card details are entered directly with Stripe and are never stored on, or seen by, Zero Sophia's servers. We receive only confirmation of payment and the billing details needed to complete your order.

How we use your information

We use your personal information solely to process and ship your order, respond to your enquiries, handle returns or issues, and meet our legal and tax obligations. We do not sell, rent, or trade your personal information, and we do not share it with advertising networks.

Who we share it with

We share personal information only with the service providers (sub-processors) needed to operate the studio, and only to the extent required:

• Stripe — payment processing
• Supabase — order database and account authentication
• Vercel — website hosting and delivery
• Postal and courier services — to deliver your order

Overseas disclosure

Some of our providers, including Stripe, Supabase, and Vercel, may store or process information on servers outside Australia, including in the United States and Europe. By placing an order you consent to your information being transferred to and stored in these jurisdictions. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

Security

All data in transit is protected with industry-standard TLS encryption. We apply reasonable administrative, technical, and physical safeguards to protect the confidentiality and integrity of your personal information.

Your rights

You may, at any time:

• Request access to the personal information we hold about you
• Ask us to correct information that is inaccurate or out of date
• Request deletion of your account and associated personal information
• Withdraw consent for future processing

Retention

We retain personal information only for as long as needed to provide the service or as required by law (for example, tax records). You may request deletion at any time via office@zerosophia.com. Some information may remain in backups for a reasonable period after deletion.