Privacy policy
Last updated 22 October 2026
We collect only what we need to make and deliver your order, keep it in Australia where we can, and never sell it.
What we collect
- Your name, email, phone, and delivery address, to fulfil and track your order. If you create an account, we keep your sign-in email so you can see past orders and order again, and when you signed in. There's no password: we email you a link each time.
- What you personalise: names, text and options you enter, and any photo or artwork you upload in a builder. Removing a photo's background happens on our own servers; the photo isn't sent to another company. On school orders this is usually a child's name, entered by a parent or the school.
- Order and payment records (amounts, items, dates). Card details go straight to Stripe; we never see your full card number.
- Quote requests: your name, email, phone if you give it, what you tell us about the job, and any artwork or photos you upload, so we can price it and reply.
- Launch sign-ups: your email address, if you ask us to tell you when a shop opens.
- Basic technical data our servers log, such as pages requested and device type, to keep the site working and see what sells. We don't use advertising trackers.
How we use it. To make your items, send order and tracking emails, answer questions, handle refunds, prevent fraud and keep business and tax records. We send marketing emails only if you opt in, and every one has an unsubscribe link.
Children's names. We use names on personalised items only to make and label that order. We do not build profiles of children or use their names for marketing. Personalisation text and uploaded photos are removed from our systems 12 months after the order is complete; the order record itself is kept as below.
Who we share it with
| Service | Why | Where data may be held |
|---|---|---|
| Stripe | Payments and fraud checks; Afterpay or Zip if you choose them | Australia, United States and other countries |
| Google Cloud / Firebase | Our website, database and file storage | Sydney, Australia; some Google services may process data overseas |
| Resend | Sending order emails, quote replies and launch emails | United States |
| Australia Post | Delivering your parcel | Australia |
| School or retail partner | Partner orders only: order status and pickup details | Australia |
We take reasonable steps to make sure these services protect your information. We do not sell or rent personal information.
How long we keep it. Order and payment records are kept for 5 years for tax purposes. Personalisation text and print files are deleted sooner, as above. If you ask us to delete your details, we remove everything not needed for those records. Quote requests and uploaded artwork that do not become an order are deleted 12 months after our last reply. Artwork you upload to a sheet builder is deleted 45 days after upload, unless you order it: an ordered design's artwork is kept for 12 months from your latest order of it, so you can order it again. The print files made from it are kept by our builder platform for 180 days, and with your order for 12 months, which covers reprints and payment disputes. If you sign in and remove a photo's background in a builder, we count how many you've used each month against a coded version of your account, kept for 13 months. Your account itself is kept until you ask us to delete it. Launch sign-up emails are deleted once the launch emails have gone out, or straight away if you unsubscribe.
Your choices. You can ask to see, correct or delete your information by emailing info@gronkie.com. We will reply within 30 days.
Complaints. Contact us first. If you are not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Security. Data is encrypted in transit and at rest, access is limited to the people running the shop, and we keep regular backups. Order-tracking links are private: anyone with the link can see that order, so please don't share it. Ask us and we'll cancel a link and send you a new one.