Privacy policy
PRIVACY POLICY
Koraliki
Operated by J & E May Pty Ltd (ACN 630008445)
Last Updated: 21 February 2026
1. Who We Are
Koraliki is operated by J & E May Pty Ltd (ACN 630008445) (“we”, “us”, “our”).
For the purposes of the Privacy Act 1988 (Cth), we are the data controller of your personal information.
Email: sales@koraliki.com.au
This Privacy Policy explains how we collect, use, disclose and store personal information in accordance with the Australian Privacy Principles (APPs).
2. What Is Personal Information
“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable.
It does not include information that has been anonymised or de-identified.
3. What Personal Information We Collect
We may collect:
• Name
• Billing and shipping address
• Email address
• Phone number
• Order history
• Account login details
• IP address
• Device and browser information
• Website usage behaviour
• Marketing preferences
• Communications with us
Payment details are processed securely via Shopify and third-party payment providers. We do not store full credit card numbers.
4. How We Collect Personal Information
We collect personal information:
• Directly from you when you place an order, subscribe, or contact us
• Automatically via cookies and similar technologies
• From Shopify as our e-commerce platform provider
• From advertising and analytics partners
5. Shopify Relationship
Our store is hosted by Shopify Inc. Shopify provides the online e-commerce platform that allows us to sell our products.
When you access or use our website:
• Certain data is collected and processed by Shopify
• Shopify may process personal information in countries outside Australia
Shopify’s privacy practices are governed by Shopify’s own Privacy Policy, available at:
https://privacy.shopify.com
Where Shopify processes personal information on our behalf, we rely on Shopify’s contractual commitments to ensure compliance with Australian privacy standards.
6. Why We Collect Personal Information
We collect and use personal information to:
• Process and fulfil orders
• Deliver products
• Provide customer service
• Manage returns and refunds
• Send order confirmations and updates
• Send marketing communications (where consent is provided)
• Improve website functionality
• Conduct analytics
• Prevent fraud
• Comply with legal obligations
7. Direct Marketing and Email Communications
If you subscribe to our mailing list or make a purchase, we may send you marketing communications about new releases, Sunday drops and related updates.
We comply with the Spam Act 2003 (Cth).
You may unsubscribe at any time by:
• Clicking the unsubscribe link in our emails; or
• Contacting us directly.
We will not send marketing communications without consent where required by law.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
• Enable website functionality
• Analyse traffic
• Improve performance
• Deliver relevant advertising
We may use:
• Shopify Analytics
• Google Analytics
• Meta (Facebook / Instagram) Pixel
These services may collect:
• IP address
• Device information
• Browser type
• Pages visited
• Interaction data
You may disable cookies through your browser settings, though this may impact functionality.
9. Disclosure of Personal Information
We may disclose personal information to:
• Shopify
• Payment processors
• Shipping providers
• IT and hosting providers
• Marketing and analytics platforms
• Professional advisers
• Government authorities where required by law
Some of these recipients may be located overseas, including in the United States or other jurisdictions.
Where personal information is disclosed overseas, we take reasonable steps to ensure recipients handle it in accordance with the Australian Privacy Principles.
10. Overseas Disclosure
By using our website or providing personal information to us, you acknowledge and consent to your personal information being disclosed to overseas recipients where required for the operation of our store and associated services.
11. Data Security
We take reasonable steps to protect personal information from:
• Misuse
• Interference
• Loss
• Unauthorised access
• Modification
• Disclosure
Security measures include:
• SSL encryption
• Secure hosting
• Restricted system access
• Password protection
However, no system is completely secure and we cannot guarantee absolute security.
12. Data Retention
We retain personal information only for as long as necessary to:
• Fulfil the purposes outlined in this Policy
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
When no longer required, personal information is securely destroyed or de-identified.
13. Access and Correction
You may request:
• Access to personal information we hold about you
• Correction of inaccurate or outdated information
Requests can be made by contacting us using the details below.
We will respond within a reasonable timeframe.
14. Children
Our website is not intended for children under 18 years of age. We do not knowingly collect personal information from children.
If you believe a child has provided us with personal information, please contact us.
15. Complaints
If you believe we have breached the Australian Privacy Principles, you may contact us at:
sales@koraliki.com.au
We will investigate your complaint and respond within a reasonable timeframe.
If you are not satisfied with our response, you may contact:
Office of the Australian Information Commissioner (OAIC)
www.oaic.gov.au
16. Changes to This Policy
We may update this Privacy Policy from time to time.
The updated version will be published on our website with the revised “Last Updated” date.