Privacy Policy
Privacy Policy
Effective Date: August 7th, 2025
At By Gray, your privacy matters. This policy outlines how we collect, use, store, and protect your personal information when you visit our website, place an order, or interact with us in any way. We are committed to complying with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. What We Collect
When you visit or shop with us, we may collect:
- Your name, email address, shipping & billing address, phone number
- Payment details (processed securely through Shopify or third-party payment providers)
- Order history
- IP address, device info, browser type, and pages visited (for analytics)
- Any information you voluntarily provide (e.g. customer service enquiries, newsletter sign-up)
2. How We Use Your Information
We collect this information to:
- Process and deliver your orders
- Communicate with you about your order or customer support requests
- Send you marketing emails (only if you opt in)
- Improve your experience on our website through analytics
- Comply with legal or regulatory obligations
3. Sharing Your Information
We never sell your personal information.
We may share data with trusted third parties to help us operate our business, such as:
- Payment processors (e.g. Shopify Payments, PayPal)
- Shipping carriers
- Email marketing services (e.g. Klaviyo, Mailchimp)
- Analytics and website optimisation tools (e.g. Google Analytics)
These providers are required to protect your data and only use it for the purposes outlined above.
Please note that some of these third-party providers may store or process your data outside of Australia, including in the United States. We only work with providers who maintain appropriate data protection standards.
4. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including for legal, accounting, or reporting requirements. Order and customer records are typically retained for 7 years in accordance with Australian tax law. You may request deletion of your data at any time (see Your Rights below).
5. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request corrections or updates to your information
- Request deletion of your data (unless we're required to keep it for legal reasons)
- Opt out of marketing emails at any time by clicking "unsubscribe" in our emails
To exercise any of these rights, contact us at info@bygray.com.au.
6. Cookies
Our website uses cookies to help it function properly, analyse traffic, and provide a better browsing experience. You can adjust your cookie settings in your browser at any time.
7. Data Security
We take your data security seriously and use industry-standard measures to protect your information. All payments are encrypted and processed securely through Shopify's trusted platform.
8. Changes to This Policy
We may update this policy from time to time. The most recent version will always be posted here with the effective date at the top.
9. Contact Us & Complaints
If you have any questions about this policy or how your data is handled, please contact us at info@bygray.com.au. We'll respond within 1–2 business days.
If you feel your privacy concern has not been resolved to your satisfaction, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.