Privacy policy

Last Updated: 20 October 2025

The Groove Man (“we,” “our,” “us”) values your privacy. This Privacy Policy explains how we collect, store, use, share, and protect personal information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable laws. Read this together with our Website Terms of Use, Cookies Policy, Data Retention Policy, and Cybersecurity & Information Security Policy.


1. Data We Collect

  • Personal Information: name, email, phone number, billing and shipping addresses.
  • Transaction Details: products purchased, order history, invoices; payment details are processed by PCI DSS–compliant providers (we do not store full card numbers).
  • Technical & Usage Data: IP address, device identifiers, browser and OS type/version, referral source, pages viewed, session duration, and on-site interactions.
  • Customer Interaction Data: emails, support messages, chat transcripts, product reviews, and marketing preferences.
  • Cookie/Tracking Data: identifiers set via cookies, pixels, and similar technologies (see our Cookies Policy).

2. How We Collect Information

  • Directly from you: account creation, checkout, newsletter signup, service inquiries, reviews.
  • Automatically: via cookies/analytics when you browse our site (Shopify analytics, Google Analytics, server logs).
  • From third parties: payment gateways, shipping/courier partners, fraud-prevention tools, and marketing platforms (e.g., Meta Pixel, Google Ads, Pinterest Tag) where permitted by law.

3. Why We Use Your Information

  • Process & fulfil orders: verify transactions, arrange delivery, provide updates, handle returns/warranties.
  • Improve our site & services: diagnostics, analytics, feature development, and user experience.
  • Personalise content & marketing (opt-in): recommendations, offers, and reminders; you can unsubscribe anytime.
  • Security & fraud prevention: detect suspicious activity, protect accounts, and maintain platform integrity.
  • Legal & compliance: meet obligations under Australian consumer, taxation, and privacy laws.

4. Legal Bases (for EU/UK visitors)

Where GDPR/UK GDPR applies, we rely on one or more of: contract (to supply goods/services), consent (for marketing/cookies where required), legitimate interests (site security, improvements), and legal obligation (recordkeeping, consumer protection).

5. Storage, Security & Retention

We use encryption, access controls, secure hosting, and other safeguards to protect personal data. Payments are processed by PCI DSS–compliant providers (e.g., Shopify Payments, PayPal, Afterpay). We keep personal information only as long as necessary for the purposes above and as required by law. See our Data Retention Policy and Cybersecurity Policy.

6. Sharing Your Data

We do not sell personal information. We share limited data with:

  • Platform & hosting: Shopify (storefront, checkout, analytics).
  • Payments: Shopify Payments, PayPal, Afterpay (payment processing and fraud prevention).
  • Logistics: couriers and warehousing partners (to deliver your orders).
  • Marketing & analytics (opt-in where required): Google, Meta, Pinterest, email service providers.
  • Professional/Legal: advisors or regulators where required to comply with law or defend legal claims.

7. International Transfers

Our store runs on Shopify, which may process data in Canada, the United States, and other locations. Where data is transferred outside Australia, we take reasonable steps to ensure recipients protect it consistently with the APPs (and, where applicable, GDPR adequacy/appropriate safeguards).

8. Cookies & Tracking

We use cookies and similar technologies for essential functions, performance, personalisation, and advertising. Manage cookies in your browser and via our consent banner where applicable. Details are in our Cookies Policy.

9. Your Rights

  • Access & Correction: request a copy of your personal data or ask us to fix inaccuracies.
  • Deletion: request deletion where we are not required to retain information.
  • Marketing Opt-Out: unsubscribe using email links or contact us.
  • EU/UK visitors: may also have portability and objection rights under GDPR/UK GDPR.

To exercise rights, email info@thegrooveman.com. We may verify your identity before actioning requests.

10. Children

Our site is intended for adults. We do not knowingly collect personal information from children under 16.

11. Changes to This Policy

We may update this policy to reflect legal, technical, or business changes. When we make significant changes, we will post a notice on this page and update the “Last Updated” date.

12. Complaints

If you have a privacy complaint, contact us first using the details below. If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC) via oaic.gov.au.

13. Contact Us

The Groove Man
23 Arthur Terrace, Red Hill, QLD 4059, Australia
Email: info@thegrooveman.com
Phone: 0468 474 556
ABN: 36 672 060 259