Privacy policy

PRIVACY POLICY

Last updated: 19 August 2026

Grace & Wonder respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains how Grace & Wonder (“we,” “us” or “our”) collects, uses, stores and discloses personal information when you visit our website, use our online store, purchase our digital or physical products, communicate with us or otherwise use our products and services (collectively, the “Services”).

Grace & Wonder is powered by Shopify, which provides the ecommerce platform that enables us to operate our online store.

This Privacy Policy should be read together with our Terms of Service and other applicable store policies.

By using our Services, you acknowledge that you have read this Privacy Policy and understand how personal information may be handled as described below.

1. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with Grace & Wonder and the Services.

We may collect information including:

Contact Information

This may include your:

  • name;

  • email address;

  • telephone number;

  • billing address; and

  • shipping or delivery address where applicable.

Order and Transaction Information

This may include:

  • products you view or purchase;

  • items added to your cart;

  • order details;

  • transaction history;

  • returns, refunds or exchanges;

  • payment status; and

  • delivery information where applicable.

Payment Information

Payments may be processed through Shopify and/or third-party payment providers.

Depending on the payment method used, payment providers may collect payment card or financial information necessary to process your transaction.

Grace & Wonder does not necessarily receive or store complete payment-card details where those details are processed directly by our payment providers.

Account Information

If customer accounts are available, we may process information associated with your account, such as your username, preferences, settings and order history.

Communications

If you contact us, we may collect information contained in your enquiry or correspondence, including information you provide when requesting customer support, reporting a problem or asking about an order.

Device and Usage Information

When you use our website, certain information may be collected automatically, including:

  • IP address;

  • browser type;

  • device information;

  • network information;

  • pages viewed;

  • interactions with our website;

  • cookies and similar technologies; and

  • other technical or usage information.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

  • directly from you, including when you make a purchase, create an account, subscribe to communications, contact us or otherwise provide information;

  • automatically through our website, including through cookies and similar technologies;

  • through Shopify, which hosts and supports our ecommerce store;

  • from payment providers involved in processing transactions;

  • from delivery or fulfilment providers, where physical products are offered;

  • from service providers that assist us in operating our business; and

  • from other third parties, where permitted by applicable law.

We aim to collect only information reasonably necessary for our business activities and Services.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

  • provide and operate our Services;

  • process and fulfil orders;

  • provide access to digital purchases;

  • arrange shipping and delivery of physical products where applicable;

  • process payments, returns, refunds and exchanges;

  • communicate with you about your purchases;

  • provide customer service and respond to enquiries;

  • maintain customer accounts;

  • improve our website, products and Services;

  • prevent fraud, misuse and security threats;

  • maintain the security and integrity of our Services;

  • comply with applicable legal and regulatory obligations;

  • enforce our Terms of Service and other policies; and

  • establish, exercise or defend legal rights where necessary.

We will use personal information only for legitimate business purposes and as permitted or required by applicable law.

4. MARKETING COMMUNICATIONS

Where permitted by applicable law, we may use your personal information to send you marketing or promotional communications about Grace & Wonder products, offers or Services.

Where required, we will obtain appropriate consent before sending marketing communications.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the relevant email or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending necessary non-promotional communications relating to your purchases, account, customer-service enquiries or other transactions.

We will comply with applicable Australian laws governing electronic marketing communications.

5. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to operate our business and provide the Services.

This may include disclosure to:

  • Shopify, which provides our ecommerce platform;

  • payment processors and financial-service providers;

  • website hosting and technology providers;

  • digital-product delivery providers;

  • postal, courier, shipping and fulfilment providers where physical products are offered;

  • analytics and website-performance providers;

  • customer-support providers;

  • marketing and advertising providers where applicable;

  • professional advisers such as accountants, legal advisers or insurers where reasonably necessary; and

  • government authorities, regulators or law-enforcement bodies where required or authorised by law.

We may also disclose information in connection with a legitimate sale, transfer, restructure or reorganisation of our business, subject to applicable law.

We do not disclose personal information for purposes unrelated to our legitimate business activities except with your consent or where permitted or required by law.

6. RELATIONSHIP WITH SHOPIFY

Our online store is hosted by Shopify.

Shopify collects and processes certain personal information about your access to and use of our store to provide and improve its ecommerce services.

Information submitted through our store may be transmitted to or processed by Shopify and its service providers.

Shopify may also process information for its own purposes in accordance with its applicable privacy policies and services.

You can learn more through the Shopify Consumer Privacy Policy and Shopify's privacy tools.

Because Shopify and some of its service providers operate internationally, personal information may be processed outside Australia.

7. COOKIES AND SIMILAR TECHNOLOGIES

Our website and Shopify may use cookies and similar technologies to operate the store, remember preferences, understand how visitors interact with the website, maintain security and, where applicable, support analytics and advertising.

Some cookies may be necessary for the website and checkout to function correctly.

Other cookies or similar technologies may be used for analytics, personalisation or advertising, subject to applicable law and available consent controls.

You may be able to manage certain cookie preferences through your browser settings or privacy controls made available through the Services.

Disabling certain cookies may affect the functionality of parts of the website.

8. THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links to websites, social-media platforms or other online services operated by third parties.

Third-party services have their own privacy practices and policies.

Grace & Wonder is not responsible for the privacy or security practices of independent third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

9. CHILDREN'S PRIVACY

Our online store and Services are intended for customers who are legally capable of making purchases or who use the Services with appropriate parental or guardian involvement.

We do not knowingly seek to collect personal information directly from children where doing so would be inappropriate or unlawful.

If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact Grace & Wonder using the details below.

Where appropriate and legally required, we will take reasonable steps to address the request.

10. SECURITY OF PERSONAL INFORMATION

We take reasonable steps appropriate to our circumstances to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

We also rely on Shopify and other service providers to maintain security measures appropriate to the services they provide.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

You should avoid sending sensitive or confidential information through unsecured communication channels.

Where applicable law requires us to respond to or notify affected individuals or regulators about an eligible data breach, we will take appropriate steps in accordance with those requirements.

11. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required for legitimate business or legal purposes.

Retention periods may depend on factors including:

  • the nature of the information;

  • whether you maintain a customer account;

  • transaction and order-record requirements;

  • accounting and taxation requirements;

  • fraud prevention and security;

  • resolving disputes; and

  • applicable legal obligations.

When personal information is no longer required, we will take reasonable steps to delete, destroy or de-identify it where appropriate and required by applicable law.

12. ACCESSING AND CORRECTING YOUR INFORMATION

Depending on applicable law, you may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, please contact us using the details provided at the end of this Privacy Policy.

We may need to verify your identity before providing access to or correcting personal information.

In some circumstances, applicable law may permit or require us to refuse a request. Where required, we will explain the reason for doing so.

You may also have privacy rights directly in relation to information processed independently by Shopify.

13. YOUR COMMUNICATION CHOICES

You may opt out of Grace & Wonder promotional emails at any time by using the unsubscribe link provided in those communications.

Even if you unsubscribe from promotional communications, we may still contact you where necessary regarding:

  • your orders;

  • digital-product delivery;

  • physical-product delivery;

  • refunds or returns;

  • account administration;

  • security matters; or

  • customer-service enquiries.

14. INTERNATIONAL PROCESSING AND DISCLOSURE

Grace & Wonder uses Shopify and may use other service providers that operate or process information in countries outside Australia.

As a result, personal information may in some circumstances be processed, stored or disclosed overseas.

Where Australian privacy laws applicable to Grace & Wonder impose requirements concerning overseas disclosure of personal information, we will take reasonable steps to comply with those requirements.

The countries in which information is processed may vary depending on the service providers and technologies used to operate our store.

For further information about Shopify's handling of personal information internationally, please review Shopify's applicable privacy information.

15. PRIVACY COMPLAINTS

If you have a concern or complaint about how Grace & Wonder has handled your personal information, please contact us using the details below.

Please provide sufficient information for us to understand and investigate your concern.

We will take reasonable steps to:

  1. acknowledge your complaint;

  2. investigate the circumstances;

  3. respond within a reasonable period; and

  4. take appropriate action where necessary.

If Australian privacy legislation applies to the matter and you are not satisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner (OAIC) or another appropriate regulator.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to:

  • our products and Services;

  • our business practices;

  • Shopify or other service providers;

  • technology;

  • legal or regulatory requirements; or

  • the way we handle personal information.

When we update this Privacy Policy, we will publish the revised version on our website and update the “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes.

17. CONTACT INFORMATION

If you have questions about this Privacy Policy, wish to make a privacy request or would like to make a complaint about how your personal information has been handled, please contact:

Business Name: Grace & Wonder
ABN: 29 989 760 880
Postal Address: PO Box 42, Buddina QLD 4575, Australia
Email: graceandwonder.au@gmail.com
Phone: 0485 603 541
Country: Australia

AUSTRALIAN PRIVACY

Grace & Wonder will handle personal information in accordance with Australian privacy laws that apply to our business.

Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to Grace & Wonder, we will handle personal information in accordance with those requirements.

Nothing in this Privacy Policy is intended to limit any privacy right available to an individual under applicable law.