Skip to content
Rovia Sports

Privacy Policy

This policy explains how Rovia Sports Pty Ltd ("Rovia Sports", "we", "us") collects, uses and protects your personal information when you use our website and services, and what cookies and similar storage we use to run them.

What we collect

  • Contact and account details you provide: name, email, phone, delivery address
  • Order, payment and returns history
  • Your email address, if you sign up for our newsletter or a welcome discount
  • Anonymised product-view activity, so we can tell which products are popular. This isn't tied to your name or your account
  • The words you type into our search box, along with how many results came back, so we can see what people look for and cannot find. This is stored on its own, with nothing recording who searched, which account it was, or which device. It is a free-text box though, so please don't type personal information into it
  • Anything you send us directly, like a support enquiry, a custom teamwear brief, or a message to our chat assistant

Payments

We never see your card details at all. They go directly to Stripe, PayPal or Afterpay. Stripe collects your card inside its own secure frame on our checkout page, and PayPal and Afterpay take you to their own site to pay, so your card number, its expiry, its security code, the card brand and the cardholder name are never entered into a Rovia form and never reach our systems. There is nothing for us to store, not even the last four digits.

What we do keep against a payment is the order it belongs to, your user account, the payment reference the gateway gives us, the amount and currency, the payment status, which provider handled it, and any refund amounts.

We do store the billing name and address shown on your order. You give those to our own checkout form so we can issue your invoice and meet our GST obligations. They are not taken from your card.

Our chat assistant

Rovi, the chat assistant on this site, is powered by a third-party AI provider, OpenAI. When you send a message, that message and the earlier messages in the same conversation are sent to OpenAI to generate a reply. They are also checked separately by OpenAI's content-moderation service, which is there to catch abusive or unsafe content. We don't use these conversations to build a profile of you, and your chat history is kept only in your own browser tab.

OpenAI handles this on servers outside Australia, so anything you type into the chat is processed overseas, where Australian privacy law may not apply in the same way. Please don't put sensitive personal information into a chat message. If you need to send us something like that, contact us directly instead.

Who we share your information with

We share personal information only where it's needed to run the service, and only with:

  • Stripe, PayPal and Afterpay, to process your payment
  • Google, if you use address autocomplete at checkout. The partial address you type is sent to Google's Maps service to return suggestions
  • Google, Microsoft or Facebook, if you choose to sign in with one of them. You're redirected to that provider to sign in, they tell us basic account identity such as your name and email address, and they will know you signed in to Rovia
  • Cloudflare, which serves this website and our product images. Cloudflare processes every request to the site, including your IP address
  • Brevo, our email delivery provider, which sends your order confirmations, delivery updates and, if you've asked for them, marketing emails. It receives your name, email address and the order details that go in those emails
  • Australia Post, our usual carrier, or another courier if we send your order a different way. Whoever carries it needs your name, delivery address and contact number
  • OpenAI, for chat assistant messages, as described above

Several of these providers, including Stripe, PayPal, Google, Microsoft, Facebook, Cloudflare, Brevo and OpenAI, store and process data on servers outside Australia. That means some of your personal information is handled overseas, in countries where privacy law may differ from Australia's.

We don't sell your personal information, and we don't share it with advertisers.

Marketing emails

If you sign up through our newsletter form or a welcome-discount offer, we use your email address to send you product news, offers and club teamwear updates. You can unsubscribe at any time using the link in any of those emails, or by contacting us. Unsubscribing doesn't stop the emails we need to send about an order you've placed, like your order confirmation or delivery updates.

Cookies and storage we actually use

  • A secure session cookie that keeps your cart and, if you're logged in, your account signed in between pages. This is essential to checkout and can't be switched off without breaking the site.
  • Browser storage (not a cookie) that holds your in-progress checkout state and, if you use our chat assistant, your chat history. Both are scoped to that browser tab and are cleared when the tab closes or the chat resets.
  • Browser storage that remembers your recent searches, so the search box can offer them back to you. Unlike the two above, this one stays on your device after you close the tab or restart your browser, until you clear it. Clearing your browser's site data removes it.
  • Stripe's own cookies, set only once you reach the payment step of checkout, as part of processing your payment securely.
  • Google Maps cookies, set only if you start entering a delivery address at checkout, to power address autocomplete.

That's the full list. We don't run any advertising pixels or third-party analytics trackers. The usage data we do collect is all first-party and anonymous: the product-view activity and the search terms described above, neither of which is linked to you.

How we use your information

  • To process and deliver your orders, and handle returns
  • To contact you about an order, such as a delivery question from the courier, or letting you know an order is ready to collect
  • To respond to enquiries and provide customer support
  • To send marketing emails, if you've signed up for them
  • To improve our products, range and website

How we protect your information

We take reasonable steps to protect your personal information from misuse, loss and unauthorised access. No website can promise perfect security, but these are the measures we have in place.

  • Your password is hashed with Argon2id before it is stored, so it is never held in a readable form and we cannot tell you what it is. If you created your account using Google, Microsoft or Facebook sign-in, there is no password stored with us at all.
  • The connection between your browser and this website is encrypted using HTTPS.
  • Access to personal information is limited to the people who need it to run the business.

How long we keep your information

  • Order and transaction records: 7 years. This period is set by Australian tax and business record-keeping obligations rather than by our own preference, so it overrides the shorter periods below.
  • Your account: for as long as it is in use. After 5 years without activity we delete it, or remove the details that identify you.
  • Marketing subscriptions: until you unsubscribe. We then keep a permanent record of that unsubscribe. That sounds contradictory, so to be clear about why: the record exists so we can honour your decision and never contact you again. Deleting it would risk you being added back.
  • Chat assistant conversations: we don't keep them. Your chat history stays in your own browser tab, as described above, and we hold no per-customer record of it. Our server does keep a shared, temporary cache of question-and-answer pairs so that common questions can be answered faster, and nothing in that cache records who asked.

If there is a data breach

If a data breach happens that is likely to cause you serious harm, we will tell the customers affected and report it to the Office of the Australian Information Commissioner. This is a commitment we are choosing to make. A business our size may not be legally required to notify anyone, and we would rather tell you than rely on that.

Where your information is stored

Our database, and the order and account records in it, are hosted in Australia. The site as a whole is not, and we would rather be precise about that than round it off. Images and site assets are served from a global content delivery network, our image storage is not tied to any one country, and Cloudflare passes every request to this site through its own global network. Several of the providers named above also process data overseas, as set out in that section.

Your rights

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, at any time by contacting us. We'll reply as soon as we can. Asking us to delete your information takes one extra step, because it cannot be undone.

Before we remove anything, we'll email you a link and wait for you to click it. Nothing is deleted until you do. The link works for 5 days, and if it expires you can just ask us again and we'll send you a new one. This step exists so that a request made by mistake, or by someone who isn't you, can't take your account with it.

The page you land on after clicking that link is the only confirmation you will get. We don't send an email once it is done, because by that point your email address has been removed along with everything else, so there is no address left for us to write to. If you want a record of it, please save or print that page before you close it.

One thing can hold a request up. We can't finish removing your details while you have an order in progress, because we still need your name and address to fulfil it. That covers an order that is unpaid, or paid but not yet delivered or collected. Your confirmation link keeps working, so open it again once the order arrives and we'll remove your details then. If the link has expired by that point, just ask us again. If you'd rather not wait, ask us to cancel an unpaid order first.

If you ask us to delete your information, we permanently remove the details that identify you: your name, your email address, your phone number, and your delivery and billing addresses. Any orders you have placed stay on record, because Australian tax and business record-keeping law requires us to keep them for 7 years, as set out above. What is left is the transaction with your name no longer attached to it, which is what "anonymised" means if you have seen the term used elsewhere.

There is one exception, and it is about the goods rather than about you. If you ordered something personalised, like a name or a number printed on a shirt, we keep a record of what was made, because that is our production record of the item itself. Your name as the customer, your email address and your delivery address are removed exactly as described above. What stays is the description of the product we manufactured, which means a name printed on a garment does survive a deletion request. We would rather tell you that than have you find it out later.

If you have written a product review, we keep it. We never publish reviewer names, so a review of yours is not labelled with who wrote it, either before or after your details are removed.

This cannot be undone. We cannot restore a deleted account or bring back the details that were on it, so if you want a copy of your order history, please ask us for that before you ask us to delete your information.

Making a complaint

If you think we have mishandled your personal information, tell us and we will look into it. Email info@roviasports.com.au with what happened and any order or account details that help us find it. We will acknowledge your complaint as soon as we can, and give you our response within 30 days.

If you are not satisfied with how we handle your complaint, you can take it to the Office of the Australian Information Commissioner. They can be reached at oaic.gov.au or on 1300 363 992.

Contact

Questions about this policy, or a data request? Email info@roviasports.com.au.

Last updated: 8 August 2026.