Privacy policy

Last updated: 7 May 2026.

This is the privacy policy for The Grumpy Unicorn Co Pty Ltd (ACN 622 552 685), trading as The Grumpy Unicorn. We run an online shop at thegrumpyunicorn.co selling enamel pins, stickers, and related goods. This policy covers the personal information we collect, why we collect it, who we share it with, and what you can do about it. We try to keep it short and readable.

We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). If you live in the EU, UK, or California, you have additional rights described later in this policy.

What we collect

Most of what we collect is what you give us when you place an order or sign up for the email list:

  • Contact details: name, email address, shipping address, billing address, phone number (optional).
  • Order details: what you bought, when, for how much, where it shipped to, any notes you left at checkout.
  • Payment details: handled by our payment processors (Shopify Payments, PayPal, Apple Pay, Google Pay). We do not see or store your full card number.
  • Account details: if you create a Shopify customer account, we store the login email and any addresses or preferences you save.
  • Marketing preferences: whether you have opted in to email marketing and which lists you are on.
  • Browsing data: pages you view on our site, what you add to cart, what you abandon at checkout. Collected via cookies and similar technologies. See the cookies section below.
  • Communications: any emails or messages you send us.

Why we collect it

  • To process your orders and ship them to you.
  • To handle returns, refunds, and customer service.
  • To send you marketing emails if you have opted in (you can opt out at any time).
  • To send you transactional emails about orders, including abandoned-cart reminders if you started a checkout.
  • To detect and prevent fraud or abuse.
  • To improve the site and figure out which products people actually want.
  • To comply with our legal obligations (tax records, consumer law, accounting).

Who we share it with

We only share personal information with service providers we need to run the shop. These include:

  • Shopify (Shopify Inc., Canada). Hosts the storefront, processes orders, stores customer accounts. Privacy policy.
  • Klaviyo (Klaviyo Inc., USA). Sends marketing and transactional emails. Privacy policy.
  • Payment processors: Shopify Payments, PayPal, Apple Pay, Google Pay, Shop Pay. They handle your payment details directly.
  • Carriers: Australia Post and any international postal partners they hand off to. They get your shipping address to deliver your parcel.
  • Analytics providers: we use Shopify analytics and may use Google Analytics. These collect anonymised browsing data.
  • Government and tax authorities, where required by law (for example, the Australian Tax Office, customs authorities).

We do not sell your personal information. We will not share it with anyone for their own marketing purposes.

Where your information is stored

Some of our service providers are based outside Australia (Shopify in Canada, Klaviyo in the USA). When your information is sent to these providers, it leaves Australia. We use providers that meet recognised privacy standards. By using our site or placing an order, you consent to this overseas transfer.

Cookies and similar tech

We use cookies and similar technologies to keep you logged in, remember your cart, run the site, and measure how it performs. Some cookies are essential (you cannot turn these off without breaking the site). Others are analytics or marketing cookies, which you can decline through your browser settings or our cookie banner if shown.

How long we keep it

We keep order records for at least seven years to comply with Australian tax and accounting law. We keep marketing-list data until you unsubscribe, then a short grace period. We keep customer-account data while your account is active. If you ask us to delete your data and we have no legal reason to keep it, we will.

Marketing emails

We only send marketing emails to people who have opted in (signed up via the email list, or ticked the marketing box at checkout). Every marketing email has an unsubscribe link at the bottom. Unsubscribing is immediate. Transactional emails (order confirmations, shipping updates, abandoned-cart reminders) are sent based on your interaction with the shop, not your marketing preferences.

Your rights

You can ask us to:

  • Tell you what personal information we hold about you.
  • Correct anything that is wrong.
  • Delete your information (where we have no legal reason to keep it).
  • Stop sending you marketing.
  • Provide a copy of your information in a portable format.

Email info@thegrumpyunicorn.co with the subject line "Privacy" and we will respond within 30 days.

EU and UK customers

If you live in the EU or UK, the GDPR applies to your data. The legal bases we rely on are: contract (to fulfil your order), legitimate interests (to run the shop and prevent fraud), consent (for marketing), and legal obligation (for tax). You have the right to lodge a complaint with your local data-protection authority.

California customers

If you live in California, the CCPA gives you specific rights. We do not sell your personal information. You can request a copy of what we hold and request deletion. Email us as above.

Children

The shop is not intended for children under 16. We do not knowingly collect personal information from children. If you think we have, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The version date at the top will change. Material changes will be flagged on the site or by email if you are on the list.

Contact and complaints

The Grumpy Unicorn Co Pty Ltd (ACN 622 552 685)
PO Box 3, Gordon VIC 3345, Australia
info@thegrumpyunicorn.co

If you are not satisfied with how we have handled your information, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.