Privacy policy
Last updated 2 October 2026
We collect only what we need to make and deliver your order, keep it in Australia where we can, and never sell it.
What we collect
- Your name, email, phone, and delivery address, to fulfil and track your order.
- What you personalise: names, text and options you enter. On school orders this is usually a child's name, entered by a parent or the school.
- Order and payment records (amounts, items, dates). Card details go straight to Stripe; we never see your full card number.
- Quote requests: your name, email, phone if you give it, what you tell us about the job, and any artwork or photos you upload, so we can price it and reply.
- Launch sign-ups: your email address, if you ask us to tell you when a shop opens.
- Basic site data such as pages visited and device type, to keep the site working and see what sells.
How we use it. To make your items, send order and tracking emails, answer questions, handle refunds, prevent fraud and keep business and tax records. We send marketing emails only if you opt in, and every one has an unsubscribe link.
Children's names. We use names on personalised items only to make and label that order. We do not build profiles of children or use their names for marketing. Personalisation text is removed from our systems 12 months after the order is complete; the order record itself is kept as below.
Who we share it with
| Service | Why | Where data may be held |
|---|---|---|
| Stripe | Payments and fraud checks | Australia, United States and other countries |
| Google Cloud / Firebase | Our website, database and file storage | Sydney, Australia; some Google services may process data overseas |
| Resend | Sending order emails, quote replies and launch emails | United States |
| Australia Post | Delivering your parcel | Australia |
| School or retail partner | Partner orders only: order status and pickup details | Australia |
We take reasonable steps to make sure these services protect your information. We do not sell or rent personal information.
How long we keep it. Order and payment records are kept for 5 years for tax purposes. Personalisation text and print files are deleted sooner, as above. If you ask us to delete your details, we remove everything not needed for those records. Quote requests and uploaded artwork that do not become an order are deleted 12 months after our last reply. Launch sign-up emails are deleted once the launch emails have gone out, or straight away if you unsubscribe.
Your choices. You can ask to see, correct or delete your information by emailing info@gronkie.com. We will reply within 30 days.
Complaints. Contact us first. If you are not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Security. Data is encrypted in transit and at rest, access is limited to the people running the shop, and we keep regular backups.