Privacy policy

Last updated: 28 October 2026

Grace & Gabrielle respects your privacy. This policy explains how Grace and Gabrielle ("we", "us") collects, uses, discloses and protects your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What personal information we collect

Contact and order details: your name, email address, phone number, billing and delivery address, and the products you buy.
Payment details: payments are handled by our payment providers. We receive confirmation of payment and limited details such as the card type and last four digits, but we never see or store your full card number.
Account details: if you create an account, your login details and order history.
Communications: messages you send us by email or through our contact form.
Technical information: such as your IP address, browser, device and how you use our website, collected through cookies and similar technologies.

We do not intentionally collect sensitive information (such as health information). Please don't send it to us.

How we collect it

We collect personal information directly from you when you place an order, create an account, sign up to our newsletter or contact us, and automatically when you use our website. You can browse our website without giving us your name, but we need your contact and delivery details to fulfil an order.

Why we collect and use it

to process, ship and support your orders, including returns and refunds;
to answer your questions and provide customer service;
to send you newsletters and offers, if you have opted in;
to prevent fraud and keep our website secure;
to understand how our website is used and improve it;
to meet our legal obligations, such as tax and accounting record-keeping.

Who we share it with

We only share personal information where needed for the purposes above, with:

our e-commerce platform (Shopify), which hosts our store and processes orders;
payment providers, such as Shopify Payments, Apple Pay, Google Pay and Shop Pay;
delivery partners and our order tracking service, so your parcel can reach you;
email and marketing service providers, if you have subscribed;
analytics and advertising providers, using cookies (see below);
professional advisers, or authorities where the law requires it.

We do not sell your personal information.

Overseas disclosure

Some of these providers store or process information outside Australia, including in Canada, the United States and countries in the European Union. We take reasonable steps to make sure they handle your information in a way that is consistent with the APPs.

Marketing

We only send marketing emails if you have opted in. Every email includes an unsubscribe link, and you can also ask us to remove you at any time by emailing info@graceandgabrielle.com.

Cookies

We use cookies to run our store (for example, to remember your cart), to understand how visitors use our website and to show relevant ads. You can control or delete cookies in your browser settings; blocking some cookies may affect how the website works.

Keeping your information secure

We take reasonable steps to protect your personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Our website uses encryption (SSL/TLS), and payments are processed by PCI-DSS-compliant providers. We keep personal information only for as long as we need it for the purposes above or as required by law.

Accessing and correcting your information

You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing info@graceandgabrielle.com. We will respond within 30 days. In limited cases the law allows us to refuse access; if so, we will tell you why.

Complaints

If you have a concern about how we have handled your personal information, please contact us first at info@graceandgabrielle.com. If you would prefer to write to us by post, email us for our postal address. We aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The latest version is always available on this page.