Privacy Policy

Who We Are

Grace & Glam is an online shop for jewellery and keepsake gifts at graceandglame.com. Grace & Glam is operated by Muhammad Adnan, a sole trader trading as GRACEANDGLAME (ABN 36 423 841 640). In this policy, “we”, “us” and “our” mean Muhammad Adnan trading as GRACEANDGLAME. For any privacy question, email graceandglame.au@gmail.com or message us on WhatsApp (+61 494 794 408).

What We Collect

• Contact and account details: your name, email address, phone number and password. If you choose “Continue with Google”, we receive the name and email address Google shares with us.
• Order details: the items you buy, any personalisation text, photos you upload for a custom piece, your delivery address and your order history.
• Payment confirmation: you enter your card details on our payment provider's secure page. We receive confirmation of the payment, never your full card number.
• Messages: what you send us by email or WhatsApp.
• Technical information: your IP address, browser and device type and the pages you visit, collected through our web server and the cookies, Meta Pixel and Google Analytics described below.
• How you found us: if you arrive from an ad or another website, your browser keeps the ad's campaign tags or click code, the name of the referring site and the page you landed on, for up to 30 days. If you order, we save these with your order so we know which ads and sites bring our customers.

Why We Use It

• To process, take payment for and deliver your orders
• To send order confirmations, shipping updates and tracking numbers
• To answer your questions and handle returns and refunds
• To prevent fraud and misuse of our website
• To measure and improve our website and our ads
• To meet our legal obligations, such as tax and accounting records
• To send marketing emails, only if you have asked for them; you can unsubscribe at any time

Who We Share It With

We share only what each provider needs for its task. We do not sell or rent your personal information.

• Card payments: processed by Square, a PCI-DSS certified payment provider. You enter your card details, or pay with Apple Pay or Google Pay, in Square's secure payment form on our checkout page; the details go straight to Square, and we never see or store full card numbers. Square also uses payment information to prevent fraud, under its own privacy policy.
• Fulfilment partner: receives your name, delivery address, phone number and order items, including any personalisation text or photo, so it can prepare and ship your order.
• Delivery carriers: receive your name, address and phone number to deliver your parcel.
• Cloud database and web hosting: your account and order details are stored with our cloud database provider (Google Firebase), and our website runs on our web hosting provider's servers.
• Email: order and shipping emails, and emails you send us, pass through our email service provider.
• Meta (Facebook and Instagram): through the Meta Pixel, described below.
• Google: through Google Analytics, described below, and if you choose “Continue with Google” to sign in.
• Authorities: where the law requires us to.

Meta Pixel (Facebook & Instagram Ads)

We use the Meta Pixel, a tool from Meta Platforms, to measure and improve our Facebook and Instagram ads. When you browse our site it sends Meta the pages you visit, the products you view or add to your cart, when you start checkout, and the value and currency of a purchase, together with cookie and device identifiers. We do not send Meta your name, email, address or card details. Meta may process this information outside Australia and use it to show you ads. You can manage this in your Facebook or Instagram ad settings, or block these cookies in your browser.

Google Analytics

We use Google Analytics, a tool from Google, to see how shoppers use our site. It sends Google the pages you visit, when you add an item to your cart or start checkout, and the items, value and currency of a purchase, together with cookie and device identifiers. We do not send Google your name, email, address or card details. Google may process this information outside Australia. You can block these cookies in your browser, or use Google's opt-out browser add-on.

Cookies

• Essential: a sign-in cookie keeps you signed in to your account, and your cart and favourites are saved in your own browser's storage.
• Advertising and measurement: the Meta Pixel and Google Analytics cookies described above, and the record of how you found us kept in your browser's storage.

You can block or delete cookies in your browser settings. Without the essential ones, signing in and the cart may not work.

Storage & Overseas Disclosure

Some of the providers above are located, or store information, outside Australia: our fulfilment partner and its international warehouse, some delivery carriers, our payment provider, our cloud database and email providers, and Meta. Your information may therefore be held or processed overseas. We give each of them only what it needs for its task. Photos you upload for a custom piece are used only to make that piece.

How Long We Keep It

• Order and payment records: for as long as tax and accounting laws require us to keep them.
• Account details: until you ask us to delete your account.
• Messages and uploaded photos: kept with your order for as long as we need them to make your order and help you with it.

When we no longer need information, we delete it or make it anonymous.

Security

Our website uses HTTPS encryption. Account passwords are stored only as one-way hashes, never as plain text. Card details are handled by our PCI-DSS certified payment provider, not by us, and order information is available only through our password-protected admin panel. No system is completely secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access. If a data breach is likely to cause you serious harm, we will tell you.

Your Rights: Access, Correction & Deletion

You can update your name, phone and addresses in your account at any time. To get a copy of the information we hold about you, correct it, or ask us to delete your account, email graceandglame.au@gmail.com. We will reply within 30 days and may first need to confirm who you are. We may keep order records where the law requires us to.

If you have a privacy complaint, please contact us first so we can try to fix it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

Our shop is meant for adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.

Contact Us

Email graceandglame.au@gmail.com or message us on WhatsApp (+61 494 794 408).