This Privacy Policy explains how Cart & Co (“we”, “us”, “our”) collects, uses, stores, shares and looks after your personal information when you use our website and services. We are an online store that sells to customers in Australia.
By using this site you agree to this Policy. If you do not agree, please do not use the site.
1. Who we are
Cart & Co is an Australian-facing online store. For privacy questions, contact us via our Contact Us page or email cart.and.co.au@gmail.com.
2. The information we collect
When you use our site we may collect:
- Identity and contact details: name, email, phone, billing address and delivery address.
- Order and payment details. We do not store full card numbers on our servers. Payments are handled by authorised payment providers.
- Technical details: IP address, browser type, device and operating system, approximate location, and how you use the site (including cookies).
- Anything else you choose to send us (for example a support message or mailing-list signup).
3. How we use your information
- To take, pack and deliver your order, and to send tracking updates.
- To handle customer service, returns and warranty questions.
- To send updates, offers and marketing — only where you have agreed (for example, joining our mailing list for 10% off your first order). You can opt out at any time.
- To meet our legal and tax obligations in Australia (including GST records).
- To keep the site secure and to improve how it works.
4. Who we share information with
We only share what is needed to run the store:
- Payment, hosting, email and analytics providers.
- Warehousing, freight and customs partners so we can ship your order. Some of these partners are outside Australia (for example in China, the United States or the EU).
- Regulators or law enforcement if the law requires it.
When information is sent overseas, we take reasonable steps so it is handled in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
5. How long we keep it
We keep personal information only as long as we need it for the reasons above, or as Australian law requires (for example, tax and GST records are generally kept for five years). We then delete or de-identify it where we reasonably can.
6. Security
We use reasonable safeguards such as HTTPS/SSL, access controls and trusted payment providers. No website is completely risk-free, so we cannot promise that information will never be accessed, lost or misused.
7. Your rights
Under the Privacy Act 1988 (Cth) you can ask us to:
- Access the personal information we hold about you.
- Correct information that is wrong, out of date or incomplete.
- Stop marketing emails (and we will honour that promptly).
If you are not happy with how we handle a privacy issue, you can complain to us first. If we cannot sort it out, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Children
Our store is aimed at adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, please contact us and we will take it down.
9. Changes to this Policy
We may update this Policy from time to time. The latest version will always be on this page. If you keep using the site after a change, you are taken to have accepted the updated Policy. Last updated: 8 September 2026.