Privacy Policy

Last updated: 27 October 2026

Meraki by Mia is a business name of Maria Gouskos, ABN 57 752 518 032 ("we", "us" or "our"). We are an online skincare business based in New South Wales, Australia. Postal address: PO Box 107, Beverly Hills NSW 2209.

This policy explains how we collect, hold, use and share personal information when you visit merakibymia.com, create an account, subscribe to our newsletter, buy our products, submit a review or contact us.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we send marketing emails in line with the Spam Act 2003 (Cth).

1. Information we collect

What we collect depends on how you deal with us.

•         Newsletter: Your email address, your subscription preferences and a record of your consent.

•         Orders and deliveries: Your name, email address, billing and delivery addresses, phone number if you provide it, the products you buy, payment status, and delivery, return and refund details.

•         Customer accounts: If you create an account, your login email, saved addresses and order history.

•         Enquiries: Your name, email address and anything you include in your message.

•         Product concerns and our 30-day guarantee: Details of your concern, which may include photos of your skin and other health information (see section 4).

•         Reviews: Your name, email address, rating, review and any photos you choose to submit.

•         Website and email activity: Technical information such as your IP address, browser and device, the pages you visit, and whether you open our emails or click links in them.

Payments are processed by Shopify Payments, including Shop Pay, Apple Pay and Google Pay. We receive the details needed to manage your order, but never your full card number.

2. How we collect and hold information

We collect information directly from you when you subscribe, create an account, place an order, contact us or submit a review. We also receive information from the services that help us take payments, send deliveries, collect reviews and send emails. Cookies and similar technologies collect some information automatically when you use our website (see section 8).

You can make general enquiries without giving your name, or using a different name. We do need some details to process orders, deliver them and respond to some enquiries.

We hold personal information electronically, in the secure systems of the services listed in section 6.

3. Why we use information

We use personal information to:

•         process payments and send your order

•         arrange delivery and send tracking updates

•         manage your account, if you have one

•         respond to enquiries, product concerns, guarantee claims, returns and refunds

•         send our newsletter and marketing emails to people who have agreed to receive them

•         remind you about items left in your cart, if you have agreed to receive marketing emails

•         ask for, manage and display reviews

•         understand how people use our website and emails

•         measure and improve our advertising

•         improve our products and customer service

•         prevent fraud, keep our systems secure, keep business records and meet our legal obligations.

4. Product concerns, our guarantee and health information

If you contact us about a skin reaction, make a claim under our 30-day guarantee or raise another concern, we may ask about your experience. This may include the product you used, your symptoms, any relevant allergies, and photos of the affected skin sent to us by email.

Some of these details are health information, which is a type of sensitive information. We only collect it with your consent. By sending it to us, you agree to us using it to look into your concern. Please share only what is relevant.

We use this information to:

•         assess and respond to your concern or guarantee claim

•         handle any return or refund

•         keep records for our product safety and insurance obligations.

Photos and health details you send us for a concern or guarantee claim are kept private. We never publish them or use them in marketing or advertising, and we never share them with Meta. If a reaction is serious, the law may require us to report it to the Australian Competition and Consumer Commission (ACCC). We may also share relevant details with our insurer if a claim is made.

5. Email marketing

We use Kit to manage our newsletter and send marketing emails. We also use Shopify to send cart reminders.

We only send marketing emails to people who have agreed to receive them, or where the law otherwise allows it. Placing an order, creating an account or contacting us does not automatically sign you up to our newsletter.

Every marketing email identifies Meraki by Mia and includes an unsubscribe link. You can also unsubscribe by emailing connect@merakibymia.com. We action unsubscribe requests within five working days, and usually straight away. You can ask us where we got your contact details at any time.

You may still receive necessary emails about your orders, deliveries, refunds or product safety after you unsubscribe.

In future, we may share a scrambled (hashed) version of your email address with Meta. This lets us show our ads to existing customers, or to people with similar interests, on Facebook and Instagram. Meta uses the scrambled address to match it to existing accounts. You can ask us not to include you by emailing connect@merakibymia.com.

6. Who we share information with

We share only the information each service needs to do its job:

•         Shopify and Shopify Payments: Our online store, customer accounts, checkout, payments, fraud checks and order emails.

•         Kit: Our newsletter, marketing emails and email reporting.

•         Interparcel and Australia Post: Shipping, delivery and tracking.

•         Judge.me: Asking for, collecting, managing and displaying reviews.

•         Meta (Facebook and Instagram): Measuring website visits and advertising (see section 8).

•         AI assistant tools (such as Claude by Anthropic): Helping us manage our store, which may involve accessing order and customer details.

We may also share information with:

•         our accountant, insurer, lawyers or other professional advisers, where needed to run our business or deal with a claim

•         regulators such as the ACCC, or other authorities, where the law requires it or to protect our legal rights.

We do not sell your personal information.

7. Reviews and customer photos

When you submit a review through Judge.me, we may publish your first name and last initial, your rating, your review and any photos you choose to upload with it. Your email address is used only to manage your review and is never shown.

Please only upload photos you are happy for the public to see, and avoid including contact details or other private information in your review.

Sometimes we invite people, such as product testers or content creators, to share photos of their results. We will only publish these photos with that person's agreement. We will not show their name alongside the photo unless they have shared it publicly themselves, for example on their own Instagram account, and we reshare that post.

You can ask us to remove your review or photos at any time by emailing connect@merakibymia.com.

8. Cookies and Meta Pixel

Our website uses cookies and similar technologies to run the store, support checkout, remember your preferences and understand how visitors use the site.

We use Meta Pixel, a small piece of code from Meta (the company behind Facebook and Instagram). It tells Meta when someone visits a page on our website, so we can measure and improve our advertising. Meta receives information such as your IP address, browser and device details, and the pages you visit. If we add more advertising features in future, this may include the products you view, add to your cart or buy. Meta may link this information to your Facebook or Instagram account and use it under Meta's Privacy Policy, including to personalise ads. We do not send health information to Meta.

You can manage cookies in your browser settings, and change your ad preferences in your Facebook or Instagram account. Blocking some cookies may stop parts of our website from working, and may not stop all information being collected.

9. Automated decisions

Shopify automatically checks orders for signs of fraud. It looks at details such as billing and delivery addresses, payment information, IP address and device. If an order is flagged as high risk, we review it ourselves before deciding whether to cancel it. Orders are not cancelled automatically. If you think your order was cancelled by mistake, please contact us.

Our email and advertising tools also use automated rules to decide which marketing emails or ads you see. These rules do not affect your ability to buy from us or the prices you pay.

10. Information stored outside Australia

We only deliver within Australia, but some of the services we use operate internationally. Your personal information may be stored, accessed or processed outside Australia, including in the United States, Canada, Singapore and the United Kingdom, depending on the service. These services may also use other providers in other countries.

We take reasonable steps to make sure overseas services handle your information in line with Australian privacy law. You can read about their practices here: Shopify, Kit, Judge.me and Meta.

11. Keeping your information safe and how long we keep it

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, change or disclosure. These include using well-known, secure platforms and limiting access to people who need it. No online service can be completely secure.

We keep personal information only for as long as we need it:

•         Orders and payment records: At least 5 years, as required by tax law.

•         Product concerns and guarantee claims: As long as we may need them for insurance, product safety or legal reasons.

•         Newsletter records: While you are subscribed, and afterwards as needed to show that you agreed to receive our emails.

•         Reviews: While they are published, or until you ask us to remove them.

•         Other information, such as enquiries: Only as long as we reasonably need it.

When we no longer need information, we take reasonable steps to delete it or remove anything that identifies you.

If we suspect a data breach, we act quickly to contain it and assess the risk. If a breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner (OAIC), as the law requires.

12. Seeing, correcting or deleting your information

You can ask to see the personal information we hold about you, or ask us to correct anything that is wrong, incomplete or out of date. Email connect@merakibymia.com. We may need to confirm your identity first.

It is free to make a request, and we usually respond within 30 days. If we cannot give you access or make a correction, we will explain why and tell you how to make a complaint.

You can also ask us to delete your information. We may need to keep some records, such as order records for tax purposes, for the periods listed in section 11.

13. Questions and complaints

For privacy questions, requests or complaints, contact:

Meraki by Mia (Maria Gouskos)
Email: connect@merakibymia.com
Post: PO Box 107, Beverly Hills NSW 2209

Please tell us about your concern and what outcome you would like. We will look into it and aim to respond within 30 days. If we need longer, we will explain why and keep you updated.

If you are not happy with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992. The OAIC can tell you whether it can handle your complaint.

14. Children

Our website and products are designed for adults. We do not knowingly collect personal information from children under 15. If you are under 18, please ask a parent or guardian before buying from us, creating an account or signing up to our newsletter.

If you are a parent or guardian and believe your child has given us personal information, please email connect@merakibymia.com. We will delete it, unless the law requires us to keep it (for example, a record of a purchase).

15. Changes to this policy

We may update this policy when our services, the way we handle personal information, or the law changes. The latest version will always be on our website, with the date it was last updated. If we make a significant change to how we use your information, we will let you know or ask for your consent where the law requires it.