This Privacy Policy describes how Goodly Gosh (“Goodly Gosh”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from www.goodlygosh.com.au (the “Site”).

We are committed to protecting your privacy. Because we welcome customers from the European Union as well as Australia, we aim to meet the higher standard set by the EU General Data Protection Regulation (GDPR) for all visitors, not only where locally required.

1. Personal Information We Collect

We collect personal information directly from you, automatically through your use of the Site, and from the third-party apps and services listed in Section 3.

Device Information

When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and cookies installed on your device, and information about your interaction with the Site (pages viewed, links clicked, and similar actions).

Order Information

When you make or attempt to make a purchase, we collect your name, billing and shipping address, payment information (including credit card numbers, processed securely via Shopify’s payment infrastructure and not stored by us), email address, and phone number.

Customer Support Information

If you contact us directly (by email, phone, or through a form on the Site), we collect the information you provide, such as your name, contact details, and the content of your message, in order to respond to you.

Newsletter and Marketing Sign-Up Information

If you subscribe to our newsletter, we collect your email address. Subscribing currently triggers an automated welcome email offering a discount code. We are not currently running broader email marketing campaigns, but we may do so in future using the same information, always with the ability for you to unsubscribe at any time.

Reviews

If you submit a product review, we collect your name, email address, and the content of your review (and any photos you choose to include).

2. How We Use Your Personal Information

We use the personal information we collect to:

• Fulfil orders, including processing payment, arranging shipping, and providing invoices or order confirmations.

• Respond to customer support requests.

• Send you a welcome discount when you subscribe to our newsletter, and, where you have agreed, other marketing communications in future.

• Screen orders for potential risk or fraud.

• Improve and optimise the Site, including through analytics and search functionality.

• Display product reviews and recommendations.

• Comply with applicable legal obligations.

3. Sharing Your Personal Information

We share your personal information with trusted third-party service providers to help us operate the Site and run our business. We do not sell your personal information. The table below reflects the apps currently connected to our store:

We may also share personal information to comply with applicable laws, to respond to a subpoena, search warrant, or other lawful request, or to otherwise protect our rights.

4. Behavioural Advertising and Advertising Data

We do not currently run Google Ads or Meta (Facebook/Instagram) advertising, and no advertising pixel is connected to our store. Our Google Shopping Feed app sends product catalogue information to Google Merchant Center so our products can appear in Google Shopping listings; this is primarily product data rather than data about you as an individual. If this changes in future, we will update this policy and, where required, ensure our cookie banner allows you to opt out of advertising cookies specifically.

5. Your Rights and Choices

If you are located in the European Economic Area (EEA), you have the right to access, correct, update, or request deletion of your personal information. You may also have the right to object to or restrict certain processing, to data portability, and to lodge a complaint with your local data protection authority.

If you would like to exercise any of these rights, please contact us using the details in Section 9.

6. Automated Decision-Making

We do not currently engage in automated decision-making that produces legal or similarly significant effects on you. Shopify’s built-in fraud analysis tools may flag orders for manual review, but this does not result in automated decisions being made about you without human involvement.

7. Cookies

A cookie is a small amount of information downloaded to your device when you visit our Site. Cookies make browsing better by remembering your actions and preferences, and they let us understand how visitors use the Site. We use the following cookies, which are Shopify’s default cookie set for stores on its platform:

Cookies Necessary for the Functioning of the Store

Reporting and Analytics

These cookies are set automatically by Shopify to power our store’s built-in analytics (sessions, traffic sources, returning visitors). We do not currently have a separate third-party analytics tool such as Google Analytics configured.

Advertising and Marketing

We do not currently use any advertising or marketing cookies, as no ad pixel (e.g. Meta Pixel, Google Ads) is connected to our store. If this changes in future, we will update this policy and this section to list the relevant cookies.

Managing Cookies

The necessary cookies above cannot be disabled without affecting the store’s functioning (cart, checkout, login). The reporting and analytics cookies can be controlled through your browser settings, for example by blocking or deleting cookies, though this may affect parts of your browsing experience.

Where required, we will provide a dedicated cookie consent banner allowing you to accept or decline non-essential cookie categories, and to change your preferences at any time. At present, our Site does not yet have a dedicated cookie consent banner; this is something we are working towards implementing.

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” browser signals, we do not currently alter our data collection practices when such a signal is detected.

8. Data Retention

We retain your order information for our records unless and until you ask us to delete this information. We retain newsletter subscriber information until you unsubscribe or ask us to delete it.

9. Minors

Our products are suitable for all ages and are not age-restricted, provided they are used as intended. Where local legislation in your country restricts online shopping or data collection below a certain age, that restriction applies and we ask that a parent or guardian complete any purchase or sign-up on the minor’s behalf.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The “Last updated” date at the top of this page reflects the most recent revision.

11. Complaints

If you are an EU resident and believe we have not adequately resolved a concern about your personal information, you have the right to lodge a complaint with your local data protection authority. A list of EU data protection authorities is available via the European Data Protection Board (edpb.europa.eu).

12. Contact Us

For more information about our privacy practices, or if you have questions or would like to make a complaint, please contact us by email.