Privacy Policy

1. Who we are

2. What personal information we collect

We only collect what we need to sell you grit and get it to your door.

Information	Why we have it
Your name (first and last)	To identify your order and address the parcel.
Delivery address (street, suburb, state, postcode)	To calculate postage and deliver your order.
Mobile number	To contact you about your order and for delivery notifications.
Email address	To send order confirmations and updates.
Order details (products, quantities, price, order number)	To fulfil the order and keep business and tax records.
Enquiry details	Anything you choose to tell us when you contact us.
Technical information (e.g. IP address, browser type)	Collected automatically by our hosting provider for security and to keep the site running.

We do not collect sensitive information (such as health, racial or political information), and we do not knowingly collect information from children.

3. How we collect it

• Directly from you — when you place an order at checkout, submit an enquiry form, or contact us by phone or email.
• Automatically — limited technical information is logged by our website host when you visit the site.
• Where practical, we collect personal information directly from you rather than from anyone else.

4. Why we collect it

• To process, pack and deliver your order.
• To calculate postage to your address.
• To contact you about your order, or to answer your enquiry.
• To handle returns, refunds and warranty claims.
• To keep financial and tax records as required by law.
• To protect the security of our website and prevent fraud.

If you do not provide the information we ask for at checkout, we will not be able to process or deliver your order.

5. Payment information

6. Who we share it with

We share your personal information only where it is necessary to fulfil your order or where the law requires it. We do not sell, rent or trade your personal information.

Who	What they get, and why
Australia Post	Your name and delivery address, so your parcel can be delivered.
eWAY (payment gateway)	Your payment details, submitted directly by you, to process the payment.
Cloudflare (website hosting & order storage)	Stores our website and order records on our behalf.
Our accountant / advisers	Order and transaction records, for bookkeeping and tax.
Law enforcement or regulators	Only where we are required or authorised by law.

7. Overseas storage

Our website and order records are hosted on Cloudflare's global network. This means your personal information may be stored or processed on servers located outside Australia, including in the United States. We take reasonable steps to ensure any overseas recipient handles your information consistently with the Australian Privacy Principles.

8. Cookies & your browser

• Your shopping cart is saved in your own browser's local storage so it survives a refresh. It stays on your device and is not sent to us until you place an order.
• Our host may set essential cookies for security and site performance.
• We do not use third-party website analytics (such as Google Analytics), and we do not track you across other websites.
• You can block or delete cookies in your browser settings, though parts of the site may not work properly if you do.

9. Marketing

• We do not currently send marketing emails or newsletters. We contact you only about an order you have placed or an enquiry you have made.
• We will never add you to a marketing list without your consent, and every marketing message will include a way to unsubscribe.
• Unsubscribing does not stop essential messages about an order you have placed.

10. How we protect it

• Our website is served over an encrypted connection (HTTPS).
• Order records are stored in access-controlled storage, and our order portal is password-protected and not publicly listed.
• Card details are handled by eWAY, not by us.
• We limit access to personal information to those who need it to do their job.

11. How long we keep it

• We keep order and transaction records for 7 years, as required for tax and business records.
• Enquiries that do not lead to an order are kept only as long as needed to deal with them.
• When we no longer need your personal information, we take reasonable steps to destroy or de-identify it.

12. Access & correction

• You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong or out of date.
• Contact us using the details in section 15. We may need to verify your identity first.
• We will respond within a reasonable time, normally within 30 days. Access is free; if a request is complex we may charge a reasonable cost, and we will tell you before we do.
• If we refuse access or correction, we will tell you why in writing.

13. Complaints

• If you think we have mishandled your personal information, please contact us first — we will acknowledge your complaint and aim to resolve it within 30 days.
• If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au · 1300 363 992.

14. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the "last updated" date at the top. Please check back occasionally.

15. Contact us