Skip to content

Privacy policy

Last updated: 9 October 2026

GRADA operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the Services). GRADA is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

Please read this Privacy Policy carefully. By using grada.au, you agree to us collecting and using your information as this policy describes.

Personal information we collect or process

Personal information means data that identifies or can reasonably be linked to you. It does not include anonymous or de-identified data. Depending on how you interact with us, we may collect:

  • Contact details: name, address, billing and shipping information, phone, email
  • Financial details: card information, payment method, transaction data
  • Account information: username, password, preferences
  • Purchase data: items viewed, added to cart, ordered, returned or exchanged
  • Communications: messages you send us, such as support enquiries
  • Device data: IP address, browser type, operating system, connection data
  • Usage information: how and when you interact with the Services

Sources of personal information

  • You directly, for example when you place an order, subscribe or contact us
  • Your device, for example through cookies and similar technologies
  • Service providers, for example payment processors and delivery partners
  • Third-party partners, for example the analytics, advertising and email tools described below

How we use personal information

  • To process orders and payments, ship products and manage returns
  • To verify that buyers and recipients are 18 or over
  • To operate your account and send order and account updates
  • To send marketing email if you have subscribed
  • To measure our advertising and show you ads on our site and on others
  • To personalise your shopping experience and recommend products
  • To detect and prevent fraud and keep your data and payments secure
  • To respond to your questions, meet our legal obligations and respond to lawful requests

Analytics, advertising and email

We use a small number of third-party tools to run the store, understand how it is used, and send email. Here is what each one collects.

Klaviyo runs our email marketing. When you subscribe, place an order or interact with our emails, Klaviyo stores your email address, your name if you gave it, your order history with us, which of our emails you opened or clicked, and the pages you viewed on our site. We use it to send you order updates and, if you have subscribed, marketing email. You can unsubscribe from any marketing email using the link at the bottom of it.

Meta Pixel (Facebook and Instagram) collects your IP address, browser and device information, the pages you view on our site, and the actions you take such as viewing a product, adding to cart and completing a purchase. Meta uses this to measure our advertising and to show you ads on Facebook and Instagram. Some of this is sent from our server as well as from your browser.

Google (Google Analytics 4 and our Google and YouTube sales channel) collects your IP address, device and browser information, how you reached our site, which pages you view, and the actions you take including purchases. We use it to understand how the store is used and to measure our ads on Google and YouTube.

Shopify hosts this store and processes your order and payment information. Shopify may use your data in combination with data from other merchants, and in those cases Shopify is responsible for that processing. See Shopify's privacy policy at https://www.shopify.com/legal/privacy and its Privacy Portal at https://privacy.shopify.com/en.

How we disclose personal information

We may disclose your personal information to Shopify, to the service providers above, to our delivery partners so they can deliver your order, to related companies, when you authorise it, as required by law, or as part of a business transfer such as a merger or acquisition.

Third-party links

Our Services may link to third-party websites. These sites are not under our control, and we are not responsible for their content, privacy or security practices.

Children

Our Services are not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us their information, contact us and we will delete it.

Security and retention

We take reasonable steps to protect your personal information, but no system is completely secure. We keep personal information for as long as we need it to fulfil orders, operate your account, comply with the law, resolve disputes and enforce our policies.

Your choices and rights

You can opt out of marketing email at any time. You can ask us what personal information we hold about you, and ask us to correct or delete it, by emailing drink@grada.au.

Complaints

If you have concerns about how we handle your information, contact us using the details below. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

Overseas storage

Some of the tools we use, including Shopify, Klaviyo, Meta and Google, store or process information outside Australia, including in the United States.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above.

Contact

GRADA Group Holdings Pty Ltd (ACN 621 759 671, ABN 46 621 759 671)
c/- EG Funds, Level 21, Governor Phillip Tower, 1 Farrer Place, Sydney NSW 2000
Email: drink@grada.au