Privacy policy

Last updated 22/09/2026

This Privacy Policy describes how thegujaratikitchen.com (the "Site," "we," "us," or "our") collects, uses, and discloses your personal information when you visit or make a purchase from the Site.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by email at info@thegujaratikitchen.com or by mail using the details below:

The Gujarati Kitchen, 137 Butterfield Street, Herston, Brisbane, QLD 4006, Australia

Personal information we collect

When you visit the Site, we collect certain information about your device, your interaction with the Site, and the information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

Device information
Purpose: to load the Site accurately for you and to perform analytics on Site usage to optimise our Site.
Source: collected automatically when you access our Site, using cookies, log files, web beacons, tags, or pixels.
Disclosed to: our processor, Shopify.
Information collected: browser version, IP address, time zone, cookie information, pages or products viewed, search terms, and how you interact with the Site.

Order information
Purpose: to fulfil our contract with you — process payment, arrange shipping, provide invoices and order confirmations, communicate with you, screen orders for risk or fraud, and, where you've opted in, send you information about our products.
Source: collected from you.
Disclosed to: our processors, which may include Shopify, PayPal, Stripe, and Klaviyo, and — for shipping and delivery — MailPlus, Gosweetspot Australia, and Australia Post.
Information collected: name, billing address, shipping address, payment information, email address, and phone number.

Customer support information
Purpose: to respond to and resolve customer support enquiries.
Source: collected from you when you contact us.
Disclosed to: our processors, which may include Klaviyo and PayPal.
Information collected: name, email address, order details, and the content of your enquiry.

Sharing personal information

We share your personal information with service providers to help us deliver our services and fulfil our contracts with you. For example:

We use Shopify to power our online store. You can read about how Shopify handles your personal information at https://www.shopify.com/legal/privacy.

We use Google Analytics to help us understand how customers use the Site. You can read about how Google uses your information at https://policies.google.com/privacy, and opt out at https://tools.google.com/dlpage/gaoptout.

We may also share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request, or to otherwise protect our rights.

Behavioural advertising

We use your personal information to provide you with advertisements or marketing we believe may be of interest to you. We may share information about your use of the Site, your purchases, and your interaction with our ads with advertising partners, directly or via cookies and similar technologies (which you may be asked to consent to, depending on your location).

You can learn more about how targeted advertising works at the Network Advertising Initiative's educational page: https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising through:

Using personal information

We use your personal information to provide our services to you, including offering products for sale, processing payments, shipping and fulfilling your order, and — where you've agreed to hear from us — keeping you up to date on new products, services, and offers.

Your rights under Australian law

We are committed to handling your personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You have the right to ask what personal information we hold about you, to request access to it, and to ask that it be corrected if it's inaccurate. To do so, contact us using the details above.

If we experience a data breach involving your personal information that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

Automated decision-making

We do not make decisions that have a legal or otherwise significant effect on you using fully automated processing. Our processor, Shopify, uses limited automated decision-making to help prevent fraud, which does not have a legal or significant effect on you. This includes:

  • A temporary block on IP addresses associated with repeated failed transactions, lasting a small number of hours.
  • A temporary block on payment cards associated with blocked IP addresses, lasting a small number of days.

If you are a resident of the European Economic Area, you have the right to object to any processing based solely on automated decision-making (including profiling) that has a legal or otherwise significant effect on you.

GDPR (European Economic Area residents)

If you are a resident of the EEA, we process your personal information on the following legal bases: your consent; performance of our contract with you; compliance with our legal obligations; protection of your vital interests; performance of a task carried out in the public interest; or our legitimate interests, where these do not override your fundamental rights and freedoms.

You have the right to access the personal information we hold about you, to port it to another service, and to ask that it be corrected, updated, or erased. To exercise these rights, contact us using the details above.

Your personal information may be processed outside the EEA, including in Australia, Canada, and the United States. For more on how Shopify's data transfers comply with the GDPR, see https://help.shopify.com/en/manual/your-account/privacy/GDPR.

CCPA/CPRA (California residents)

If you are a California resident, you have the right to know what personal information we hold about you, to request its deletion or correction, to opt out of the sale or sharing of your personal information, to limit the use of sensitive personal information, and to not be discriminated against for exercising these rights. To exercise these rights, or to designate an authorised agent to do so on your behalf, contact us using the details above.

Retention

When you place an order through the Site, we retain your personal information for our records unless and until you ask us to erase it. See "Your rights" above for how to make that request.

Cookies

A cookie is a small amount of information downloaded to your device when you visit our Site. We use functional, performance, advertising, and social media or content cookies to improve your browsing experience and to understand how people use the Site. You can read more about the specific cookies we use at https://www.shopify.com/legal/cookies.

Most of our cookies are persistent and expire between 30 minutes and two years from when they're set. You can control cookies through your browser settings, though blocking cookies may affect your experience on the Site and may not fully prevent information sharing with third parties. See "Behavioural advertising" above for how to opt out of targeted advertising specifically.

Do Not Track

Because there is no consistent industry standard for responding to "Do Not Track" browser signals, we do not currently alter our data practices in response to them.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, or for other operational, legal, or regulatory reasons.

Complaints

If you'd like to make a complaint, contact us by email or mail using the details under "Contact" above.

If you're not satisfied with our response, Australian residents can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au. Residents of other jurisdictions can contact their local data protection authority.