Privacy Policy

Grace Sydney

Website: grace-sydney.com
Last updated: 13 July 2026

Grace Sydney respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you visit our website, purchase from us, contact us or otherwise interact with Grace Sydney.

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable.

1. Who We Are

Grace Sydney operates the website grace-sydney.com.

For privacy questions or requests, contact us at:

Email: info@grace-sydney.com
Business name: [Insert registered legal business name]
Business address: [Insert business or correspondence address]
ABN: [Insert ABN, if applicable]

In this policy, “Grace Sydney”, “we”, “us” and “our” refer to the business operating grace-sydney.com.

2. Application of Australian Privacy Law

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Some small businesses may be exempt from parts of the Privacy Act. Regardless of whether an exemption applies to us, we aim to handle personal information consistently with the principles described in this policy.

This policy does not create rights beyond those provided under applicable law.

3. Personal Information We Collect

Depending on how you interact with us, we may collect:

• Your name.

• Email address.

• Telephone number.

• Billing and delivery addresses.

• Account login information.

• Order and purchase history.

• Product preferences and size selections.

• Payment status and limited payment-related information.

• Correspondence with our customer support team.

• Return, refund and chargeback information.

• Reviews, survey responses and feedback.

• Marketing preferences.

• Device, browser and operating-system information.

• IP address.

• Approximate location based on your IP address.

• Website activity, including pages viewed, products selected and links clicked.

• Referring website or advertising source.

• Cookie and tracking identifiers.

• Fraud-prevention and security information.

• Any photographs or videos you send in connection with a damaged, faulty or incorrect item.

We do not generally collect sensitive information, such as information about your health, ethnicity, religion or political views. Please do not provide sensitive information unless it is reasonably necessary and we have requested it.

4. How We Collect Personal Information

We may collect information directly from you when you:

• Visit or browse our website.

• Create an account.

• Place an order.

• Join our mailing list.

• Contact customer support.

• Request a return, refund or exchange.

• Submit a review.

• Enter a competition, promotion or survey.

• Communicate with us through email or social media.

• Interact with our advertisements.

We may also collect information automatically through cookies, pixels, analytics technologies and similar tools.

In some circumstances, we may receive information from third parties such as:

• Ecommerce and website-platform providers.

• Payment processors.

• Shipping and fulfilment providers.

• Advertising platforms.

• Analytics providers.

• Fraud-prevention services.

• Customer-support platforms.

• Social-media platforms.

• Providers assisting with reviews, email or SMS communications.

5. Why We Collect and Use Personal Information

We may collect, hold, use and disclose personal information to:

• Process and fulfil orders.

• Take and verify payments.

• Deliver products.

• Provide order and shipping updates.

• Create and manage customer accounts.

• Respond to questions and support requests.

• Process returns, refunds, exchanges and warranty claims.

• Detect or prevent fraud, misuse and security incidents.

• Resolve payment disputes and chargebacks.

• Improve our products, website and customer experience.

• Understand how visitors use our website.

• Maintain website performance and security.

• Personalise website content and product recommendations.

• Request feedback or product reviews.

• Conduct marketing, advertising and remarketing.

• Administer promotions, surveys and competitions.

• Maintain our business, tax and transaction records.

• Comply with legal and regulatory requirements.

• Enforce our website terms and other policies.

• Establish, exercise or defend legal claims.

We may also use information for another purpose where you have consented or where the use is otherwise permitted or required by law.

6. Information Needed to Process Orders

When you place an order, we require certain information to process your transaction and deliver your purchase.

If you do not provide the necessary information, we may be unable to:

• Accept or process your order.

• Deliver your products.

• Provide customer support.

• Process a return or refund.

• Create or maintain your customer account.

7. Payment Information

Payments are processed by third-party payment providers.

Depending on the payment options available through our website, these providers may include:

• Shopify Payments.

• PayPal.

• Afterpay.

• Klarna.

• Apple Pay.

• Google Pay.

• Credit- or debit-card processors.

Grace Sydney generally does not receive or retain your complete payment-card number. Payment information is submitted directly to the relevant payment provider, which handles it under its own privacy policy and security practices.

Payment providers may collect information for identity verification, fraud prevention, credit assessment or regulatory compliance.

Only list payment methods in this policy that are actually offered on the website.

8. Website Hosting and Ecommerce Platform

Our website may be hosted or operated using a third-party ecommerce platform, such as Shopify.

The platform may process information including:

• Customer and account details.

• Order information.

• Website activity.

• Device and network information.

• Payment and fraud-prevention information.

The platform may process or store data in Australia and other countries under its own privacy terms and contractual arrangements with us.

9. Fulfilment, Shipping and Returns

We may share necessary personal information with warehouses, suppliers, fulfilment partners, postal operators and couriers to:

• Prepare orders.

• Deliver parcels.

• Provide tracking.

• Investigate missing deliveries.

• Process returns or replacements.

• Handle customs or import requirements.

Because we may use international suppliers or fulfilment facilities, your name, delivery address, telephone number, email address and order details may be disclosed to service providers outside Australia.

Our fulfilment or returns partners may be located in countries including:

• China.

• Hong Kong.

• Singapore.

• The United States.

• Canada.

• European countries.

• Other countries used by our logistics or technology providers.

The exact countries may vary depending on the product, courier and service provider.

10. Overseas Disclosure

Some of our service providers may operate or store information outside Australia.

Overseas recipients may include ecommerce platforms, payment providers, fulfilment partners, couriers, cloud-storage providers, analytics services, advertising platforms and customer-support providers.

Where the Australian Privacy Principles apply, we take reasonable steps to ensure overseas disclosures are handled consistently with applicable privacy requirements. However, overseas recipients may also be subject to the laws of their own country.

By using our website or providing information to us, you acknowledge that your information may be processed in countries outside Australia as described in this policy.

11. Cookies and Similar Technologies

Our website uses cookies, pixels, tags and similar technologies.

Cookies are small data files stored on your browser or device. They may help us:

• Keep products in your shopping cart.

• Remember your preferences.

• Enable account and checkout functions.

• Protect the website from fraud or abuse.

• Measure website traffic and performance.

• Understand how visitors use the website.

• Personalise content.

• Measure advertising performance.

• Display advertising that may be more relevant to you.

Cookies may be:

• Strictly necessary cookies, which are required for the website to function.

• Preference cookies, which remember settings and choices.

• Analytics cookies, which help us understand website use.

• Advertising cookies, which support advertising and remarketing.

Some cookies expire when you close your browser, while others remain for a defined period.

You can manage or disable cookies through your browser settings. Disabling certain cookies may prevent parts of the website from functioning correctly.

Where required, we may display a cookie-consent tool allowing you to manage non-essential cookies.

12. Analytics

We may use analytics services such as Google Analytics or analytics tools provided by our ecommerce platform.

These services may collect information about:

• Pages viewed.

• Time spent on the website.

• Products viewed or added to a cart.

• Approximate geographic area.

• Browser and device type.

• Referral source.

• Website interactions.

• Purchases and conversion activity.

We use this information to understand performance, improve the website and measure customer interest.

Analytics providers may process data on servers outside Australia and may combine information with other data held by them, subject to their own privacy policies.

13. Advertising and Remarketing

We may use advertising services such as:

• Meta, including Facebook and Instagram.

• Google Ads.

• TikTok.

• Pinterest.

• Microsoft Advertising.

• Other advertising networks or platforms.

These services may use cookies, pixels or similar technologies to:

• Measure advertising performance.

• Understand whether an advertisement led to a purchase.

• Build advertising audiences.

• Display advertisements to previous website visitors.

• Find customers with similar interests.

• Limit repetitive advertisements.

• Personalise advertisements.

Advertising providers may receive information such as cookie identifiers, device information, website activity, purchase events and hashed contact information.

You can manage advertising preferences through the relevant platform settings, your browser settings or our cookie-preference tool where available.

14. Email and SMS Marketing

We may send promotional emails or SMS messages where:

• You have consented.

• Consent can reasonably be inferred under applicable law.

• We are otherwise permitted to contact you.

Marketing communications may include:

• Product launches.

• New collections.

• Offers and discounts.

• Abandoned-cart reminders.

• Back-in-stock messages.

• Product recommendations.

• Surveys or review invitations.

Our commercial electronic messages will identify the sender and include a method of unsubscribing where required.

You may unsubscribe at any time by:

• Clicking the unsubscribe link in an email.

• Following the opt-out instructions in an SMS.

• Contacting us at info@grace-sydney.com.

We will process unsubscribe requests as required by applicable law. Even after you unsubscribe from marketing, we may continue sending necessary service messages such as order confirmations, delivery updates and responses to customer-support requests.

We do not require customers to agree to marketing as a condition of purchasing, except where clearly stated and legally permitted.

15. Abandoned Checkout Communications

Where permitted by law and your communication preferences, we may contact you when you begin but do not complete a checkout.

These messages may remind you about products left in your cart or provide assistance with completing your purchase.

You can unsubscribe from promotional abandoned-cart messages using the option provided in the communication.

16. Reviews and Customer Content

If you submit a product review, testimonial, photograph, video or social-media content, we may use it:

• On our website.

• In marketing communications.

• On social media.

• In advertisements.

• For internal product and service improvement.

We will use identifiable customer content for promotional purposes only where we have an appropriate basis to do so, such as your consent or permission.

You should not include personal information about another person unless you have their permission.

17. Social Media

Our website may include links or buttons for social-media services.

When you click or interact with these features, the relevant social-media provider may collect information under its own privacy policy.

We may also receive information when you:

• Follow our account.

• Comment on our posts.

• Send us a direct message.

• Tag or mention Grace Sydney.

• Interact with our social-media advertisements.

Information posted publicly on social media may be visible to other users.

18. Fraud Prevention and Security

We may use information to identify, investigate and prevent suspected fraud, unauthorised transactions, abuse, chargebacks or security incidents.

We may share relevant information with:

• Payment providers.

• Banks and card issuers.

• Fraud-prevention services.

• Ecommerce platforms.

• Couriers.

• Legal advisers.

• Law-enforcement or regulatory bodies where permitted or required.

We do not use automated decision-making that produces legal or similarly significant effects unless this is disclosed and permitted by applicable law.

However, payment, ecommerce or fraud-prevention providers may use automated tools to assess transaction risk.

19. Disclosure of Personal Information

We may disclose personal information to:

• Ecommerce and website providers.

• Payment processors.

• Banks and financial institutions.

• Suppliers and manufacturers.

• Warehouses and fulfilment providers.

• Couriers and postal services.

• Customer-support providers.

• Email and SMS platforms.

• Advertising and analytics providers.

• IT, hosting and cloud-service providers.

• Fraud-prevention and cybersecurity providers.

• Accountants, insurers, auditors and professional advisers.

• Regulators, courts, law-enforcement agencies and government authorities.

• A buyer, investor or adviser involved in a proposed sale, merger, restructure or transfer of the business.

We do not sell personal information for money in the ordinary meaning of the word “sell”.

Some privacy laws may define certain advertising-related disclosures more broadly. Where required, we will provide relevant choices or disclosures regarding those practices.

20. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Measures may include:

• SSL or TLS encryption.

• Access restrictions.

• Password and account controls.

• Secure third-party payment processing.

• Service-provider security assessments.

• System monitoring.

• Staff and contractor access limitations.

• Appropriate data-retention and deletion practices.

You can generally identify an encrypted website connection by “https://” and the padlock symbol in your browser.

No method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security.

You are responsible for keeping your account password confidential and should contact us if you believe your account has been accessed without permission.

21. Data Breaches

Where applicable, we will assess suspected data breaches and comply with relevant notification requirements, including the Notifiable Data Breaches scheme under the Privacy Act.

Where legally required, we may notify affected individuals and the Office of the Australian Information Commissioner.

22. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy or as required by law.

Retention periods may depend on:

• The type of information.

• The duration of your account.

• Customer-service requirements.

• Warranty and return periods.

• Fraud and chargeback risks.

• Tax, accounting and legal obligations.

• Actual or anticipated disputes.

Australian taxation and business-record laws may require certain transaction records to be retained for several years.

When information is no longer required, we will take reasonable steps to delete, destroy or de-identify it, subject to legal and technical limitations.

23. Accessing and Correcting Your Information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

To make a request, contact:

Email: info@grace-sydney.com

We may need to verify your identity before responding.

In some circumstances, we may decline or limit a request where permitted by law. If we do so, we will generally explain the reason unless we are legally prevented from providing it.

We will not normally charge for making an access or correction request, although reasonable administrative costs may apply where permitted by law.

24. Deleting Your Account or Information

You may ask us to close your customer account or delete certain personal information.

We will consider the request in accordance with applicable law.

We may need to retain some information where necessary to:

• Meet tax or record-keeping obligations.

• Complete an outstanding order.

• Process a return or refund.

• Prevent fraud.

• Resolve disputes.

• Establish or defend legal claims.

• Comply with another legal requirement.

Deleting your account may not remove information from completed transaction records or secure backups immediately.

25. Withdrawing Consent

Where we rely on consent, you may withdraw it at any time by contacting us or using the available preference or unsubscribe controls.

Withdrawal does not affect processing that occurred before consent was withdrawn.

Withdrawing consent may affect our ability to provide certain optional features but will not affect your statutory consumer rights.

26. Privacy Complaints

If you believe we have mishandled your personal information, please contact us first so we can investigate.

Include:

• Your name and contact details.

• A description of your concern.

• Relevant dates or order numbers.

• Any supporting information.

Contact:

Email: info@grace-sydney.com

We will acknowledge and investigate your complaint within a reasonable period.

Where the Privacy Act applies and you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner.

27. Children’s Privacy

Our website is intended for adults and is not directed to children under 16.

We do not knowingly collect personal information directly from children under 16 without appropriate permission.

If you believe a child has provided personal information to us, contact us so we can review and, where appropriate, delete it.

28. International Visitors

Our business is primarily directed to customers in Australia.

If you access our website from another country, your information may be transferred to and processed in Australia and other countries in which our service providers operate.

Additional privacy rights may apply to customers in certain jurisdictions. Where those laws apply to us, we will handle relevant requests in accordance with those requirements.

We do not represent that the European Union General Data Protection Regulation or any other foreign privacy regime automatically applies to every visitor.

29. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy, content or security practices of third parties. You should review their privacy policies before providing information to them.

30. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices.

• Website functionality.

• Service providers.

• Legal requirements.

• Advertising and analytics tools.

The current version will be published on grace-sydney.com with the updated effective date.

Material changes may also be communicated through the website or by email where appropriate.

31. Contact Us

For privacy questions, access or correction requests, complaints or marketing preferences, contact:

Grace Sydney
Email: info@grace-sydney.com
Website: grace-sydney.com
Business name: [Insert registered legal business name]
Business address: [Insert business or correspondence address]
ABN: [Insert ABN, if applicable]