1. Privacy Policy

Effective date: 10 August 2026

Grail and Gambit (ABN 13 226 309 293) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit www.grailandgambit.com.au, create an account, place an order, contact us, submit a review, or interact with our marketing and advertising.

1.1 Who we are

Grail and Gambit is an Australian online business based at 99 Turnbull Road, Wamuran QLD 4512, Australia. You can contact us about privacy matters at julie@grailandgambit.com.au or 0412 605 192.

1.2 Personal information we may collect

Depending on how you use our website, we may collect:

·       Identity and contact details, such as your name, billing and delivery address, email address and telephone number.

·       Order and transaction information, including products purchased, order history, payment status, refunds or adjustments, and delivery details.

·       Account information where you create or use a customer account.

·       Payment-related information. Payments may be processed by Shopify Payments, PayPal, Afterpay, Apple Pay and Google Pay. We generally do not receive or store your complete card number.

·       Communications you send to us, including enquiries, support requests and correspondence.

·       Reviews, ratings or other content that you choose to submit through a reviews application.

·       Technical and usage information such as IP address, browser type, device information, pages viewed, referring pages, interactions with the site and cookie or similar identifiers.

·       Marketing information, including subscription status, campaign interactions and preferences collected through Klaviyo or other enabled marketing tools.

·       Analytics and advertising information collected through tools such as Google Analytics and the Meta (Facebook/Instagram) Pixel.

1.3 How we collect personal information

·       Directly from you when you place an order, create an account, contact us, sign up for marketing, submit a review or otherwise provide information to us.

·       Automatically when you browse or interact with our website through cookies, pixels, analytics and similar technologies.

·       From service providers that help us operate the store, process payments, deliver orders, provide marketing, analytics, reviews, fraud prevention, website hosting or customer account functionality.

1.4 Why we use personal information

·       To operate and administer our online store and customer accounts.

·       To process payments, orders and deliveries and communicate with you about them.

·       To provide customer service and respond to enquiries or complaints.

·       To detect, investigate and reduce fraud, security incidents or misuse of our website.

·       To maintain records, comply with legal obligations and exercise or defend legal rights.

·       To understand website performance and customer interactions through analytics.

·       To send marketing communications where permitted by law and in accordance with your preferences.

·       To personalise or measure advertising and marketing performance where applicable.

1.5 Marketing communications

We may send marketing emails or other commercial electronic messages where we have your consent or are otherwise permitted to do so. Our marketing communications will identify us and provide a way to unsubscribe. You can unsubscribe using the link in a marketing email or by contacting us. Transactional or service messages relating to an order or account may still be sent where necessary.

1.6 Cookies, analytics and advertising technologies

Our Shopify store and third-party services may use cookies, pixels, local storage and similar technologies. These technologies can be used for essential store functions, security, customer accounts, remembering preferences, analytics, measuring campaign performance and advertising. We currently use or may use Shopify technologies, Google Analytics, Meta Pixel, Klaviyo and a reviews application. See the Cookie & Tracking Notice in this policy pack for more detail.

1.7 Disclosure to service providers

We may disclose personal information to service providers where reasonably necessary to operate the business. These may include Shopify and its service providers, payment processors, PayPal, Afterpay, Apple Pay, Google Pay, Australia Post, Klaviyo, Google Analytics, Meta, reviews providers, technology providers, accountants, professional advisers and other suppliers that support our store.

Some service providers may process or store information outside Australia. The countries involved can change according to the provider’s infrastructure and sub-processors. Where applicable, those providers handle information under their own privacy terms and contractual arrangements.

1.8 Shopify

Our store is hosted on Shopify. Shopify processes personal information to provide the ecommerce platform, checkout, payments, fraud prevention, hosting, customer account and related services. Shopify may also process information in accordance with its own privacy documentation. You should review Shopify’s privacy information for details about its processing practices.

1.9 Data security and retention

We take reasonable steps appropriate to our business to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, maintaining business and tax records, resolving disputes, complying with legal obligations, enforcing agreements and preventing fraud. When information is no longer required, we will take reasonable steps to delete it or de-identify it where appropriate.

1.10 Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details below. We may need to verify your identity before actioning a request and may refuse access where permitted by law, in which case we will explain the basis for the refusal where required.

1.11 Privacy complaints

If you have a privacy concern or complaint, contact us first at julie@grailandgambit.com.au. Please describe the issue and provide enough information for us to investigate. We will respond within a reasonable time. If you are not satisfied with our response and the Privacy Act 1988 (Cth) applies to the matter, you may be able to contact the Office of the Australian Information Commissioner (OAIC).

1.12 Children

Our website is intended for general retail customers and is not directed specifically to children. If you are under the age required to enter a binding transaction in your jurisdiction, a parent or guardian should assist with any purchase or account creation.

1.13 Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, service providers or legal requirements. The updated version will be published on our website with a revised effective date.

1.14 Contact

Grail and Gambit
99 Turnbull Road, Wamuran QLD 4512, Australia
Email: julie@grailandgambit.com.au
Phone: 0412 605 192
ABN: 13 226 309 293