For online stores
Privacy compliance for Australian online stores
Ecommerce privacy compliance, from checkout to pixels: make sure tracking waits for consent, your privacy policy matches your store and every marketing sign-up is recorded.
Why businesses trust Savira
- Australian owned
- Account data and consent records hosted in Australia
- Built for the Australian Privacy Principles
Why it matters for your store
What makes ecommerce different
Most stores track before they ask
Ad and analytics tags often fire before a visitor makes a choice.
Consent has to be real
Pre-ticked boxes and hidden reject buttons do not count as consent.
Data leaves the country
Your platforms, email and payment tools may store data overseas.
Your website collects too
Sign-up forms, reviews and chat all collect personal information.
Want the detail? Read: Privacy compliance for Australian online stores
What Savira does for your store
Your policy, consent and records in one place
- A banner that blocks ad and analytics tags until shoppers agree
- A privacy policy template that names your overseas providers
- Consent records for marketing sign-ups
- Reconfirmation emails for your existing list
Maya's journey
Follow one person through your store
- 1 · Browse
Maya lands on your store.
Savira: Tags wait for her choice.
- 2 · Consent
She accepts analytics, rejects ads.
Savira: Both choices are logged.
- 3 · Buy
She checks out and joins your list.
Savira: Her marketing consent is recorded.
- 4 · Share
Her order goes to your overseas platform.
Savira: Named in your privacy policy.
- 5 · Prove
A customer complains.
Savira: You show what she agreed to, and when.
Your action plan
What to do, and when
- 0 to 3 months
Start here
- Run the free website scan
- Update your privacy policy
- Hold tracking until consent works
- 3 to 12 months
Then
- Write a breach response plan
- Train your team
- List who holds your customer data
- 12 to 18 months
Keep it current
- Review overseas providers
- Prepare for automated decision rules
- Review your policy every year
Ecommerce privacy checklist
A three page PDF you can work through this week. Download it free.
Does my online store need a privacy policy?
If the Privacy Act covers your store, yes, and most stores need one in practice because payment, email and ad platforms ask for it. It must say what you collect at checkout, why, and which overseas platforms receive it.
Do I need consent for the Meta pixel on my online store?
Yes. The Meta pixel sends browsing data to Meta, so hold it until shoppers accept advertising cookies. Firing it on page load means collection happens before anyone has agreed.
Do I need consent for email marketing from my online store?
Yes. Someone entering an email at checkout has not agreed to marketing, and abandoned cart emails are marketing. Ask separately, record the consent and include a working unsubscribe.
Our developer says the cookie banner is fine. How would we know?
Open the store in a private window and watch what loads before you touch the banner. If analytics or ad scripts fire first, the banner is decorative.
Our store platform and email tool are overseas. Is that a problem?
Not automatically, but it is a cross-border disclosure under APP 8 and you stay accountable for the data. Say so in your privacy policy.