Sign in

Legal

Privacy policy

Last updated: October 11, 2026

This Privacy Policy describes how Grolia Pty Ltd (ABN 28 675 723 805) (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from grolia.com.au (the “Site”) or otherwise communicate with us regarding the Site (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term “personal information”, we are referring to information that identifies, relates to, describes or can be associated with you.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

  • Contact details including your name, address, phone number, and email.
  • Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
  • Account information including your username, password, security questions and other information used for account security purposes.
  • Customer support information including information you choose to include in communications with us.
  • Marketing sign-up information including your first name, email address and, where you choose to give it, your mobile or phone number, when you join a product waitlist, request a guide or complete a quiz on the Site. Giving a phone number is always optional and you can join any of these lists without one.
  • Quiz responses including your answers and, where you choose to give them, your postcode and age range, along with how you first reached the Site (the referring website, the page you landed on and any campaign details in the link you followed). Postcode and age range are always optional and do not change your result.

Some features of the Services may require you to directly provide certain information. You may elect not to provide it, but doing so may prevent you from using or accessing those features.

Information We Collect about Your Usage

We may automatically collect certain information about your interaction with the Services (“Usage Data”). To do this, we may use cookies, pixels and similar technologies (“Cookies”). Usage Data may include device, browser and network information, your IP address, and information regarding your interaction with the Services.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

  • Our payment processors, who collect payment information to process payments and fulfil orders.
  • Google Analytics and Meta, when you allow optional analytics and advertising technologies on this Site.
  • Mailchimp, which helps us deliver and manage marketing email and SMS marketing lists when you choose to subscribe, and email updates about certain orders.
  • Other technology partners that support our Site and Services.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

How We Use Your Personal Information

  • Providing Products and Services. To process payments, fulfil orders, send notifications related to accounts, purchases, returns, exchanges and other transactions, manage accounts, arrange shipping, facilitate returns and exchanges, and provide related functionality.
  • Marketing and Advertising. To send marketing, advertising and promotional communications by email, and to better tailor Services and advertising on our Site and other websites. We only send marketing SMS to people who have expressly opted in to receive it by ticking the SMS consent box on one of our forms; the box is never pre-ticked, and we record what you were shown at the time you agreed. You can withdraw SMS consent at any time by replying STOP or by contacting us, and doing so does not affect any email subscription.
  • Security and Fraud Prevention. To detect, investigate or take action regarding possible fraudulent, illegal or malicious activity.
  • Communicating with You and Service Improvement. To provide customer support and improve our Services.

Cart reminders

If you enter your email at checkout, or add items to your cart while signed in, and leave without completing your order, we may send you one email reminding you what was in your cart, at current prices. We do not send it if you complete your purchase. Every reminder includes a one-click unsubscribe link, and unsubscribing stops all future cart reminders. We keep the record linking your email to your cart for up to 30 days.

Cookies

We use essential browser storage to provide requested Site features and remember choices. On public marketing pages, we also use Google Analytics and Meta Pixel to understand Site use, campaign performance and interactions such as page views and lead submissions. These providers may receive device, browser, network, page and interaction information in accordance with their own privacy terms. We also keep a first-party cookie for 30 days that records how you first arrived (the referring website, the page you landed on and any campaign details in the link), so we can tell which campaigns bring people to Grolia. If you then join a waitlist, request a guide, complete a quiz or place an order, we save that record with it.

When you check out, we may also tell Meta from our server that you started a checkout or completed a purchase, so we can measure and improve our advertising. With that event we send the order value and products, a hashed (one-way scrambled) copy of your email address and phone number, your IP address and browser type, and the Meta browser and ad-click identifiers stored on your device by Meta Pixel. We do not send your name, delivery address or payment details to Meta.

Analytics is separate from a marketing subscription. When you submit a form that clearly includes marketing communications, we may send the submitted contact details — your first name, email address, any phone number you chose to give, and relevant subscription context such as the product you asked about — to Mailchimp from our server. Where you ticked the SMS consent box, we also record that consent, the time you gave it, and the exact wording you were shown. When you buy certain products, such as a Flush cabinet during a sale, we also send your first and last name, email address and any phone number you gave at checkout to Mailchimp from our server, with a tag naming the purchase, so we can email you updates about your order. We do not send your delivery address or payment details to Mailchimp. You receive marketing email from that only if you ticked the box at checkout to receive Grolia news and offers; the box is never pre-ticked, and we record your answer, when you gave it and the exact wording you were shown. If you did not tick it, you are kept as an order-updates-only contact, and if you previously unsubscribed from our marketing emails, buying from us does not subscribe you again. We do not load a Mailchimp tracking pixel on the Site. You can unsubscribe from marketing emails at any time, and stop marketing SMS at any time by replying STOP.

You can remove or reject Cookies through your browser controls. Blocking analytics storage or third-party scripts may limit measurement without preventing you from using the public Site. Removing or blocking essential storage may cause some requested features to work incorrectly or no longer be available.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for contract fulfilment, legitimate purposes and other reasons subject to this Privacy Policy. This may include:

  • Vendors and other third parties who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
  • Business and marketing partners to provide services and advertise to you.
  • Parties you direct, request or otherwise consent to disclose information to.
  • Our affiliates or corporate group, and parties involved in a business transaction or legal process where required.

We do not use or disclose sensitive personal information without your consent or to infer characteristics about you.

Third Party Websites and Links

Our Site may link to third-party websites or online platforms. If you follow those links, you should review their privacy and security policies and terms. We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of those sites.

Children’s Data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children. A parent or guardian may contact us using the details below to request deletion of a child’s information.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee “perfect security”. Information may not be secure while in transit, so please do not use insecure channels to communicate sensitive or confidential information.

How long we retain personal information depends on factors such as whether we need it to maintain an account, provide Services, comply with legal obligations, resolve disputes, or enforce other contracts and policies.

Your Rights

Depending on where you live, you may have rights to access, delete, correct, receive a copy of, restrict processing of, or withdraw consent for personal information we hold. You may also have a right to appeal a decision or manage marketing communication preferences. These rights are not absolute and may apply only in certain circumstances.

You may exercise these rights by contacting us using the details below. We may need to collect information to verify your identity before responding, and we will respond in the timeframe required by applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below. Depending on where you live, you may also have a right to contact your local data protection authority.

International Users

We may transfer, store and process your personal information outside the country you live in. Where required, we rely on recognised transfer mechanisms or equivalent contracts.

Contact

For questions about our privacy practices or this Privacy Policy, or to exercise your rights, email info@grolia.com.au.