Privacy Policy
This Privacy Policy explains how GWAY PTY LTD ("GWAY", "we", "us", "our") collects, uses, stores and discloses personal information when you visit or make a purchase from gway.com.au (the "Site"), or otherwise deal with us. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Personal information we collect
Information you provide to us. When you place an order, create an account, contact us, or subscribe to our communications, we may collect your name, email address, phone number, billing address, delivery address, order details, and payment information. Payment card details are processed by our payment providers and are not stored on our own systems.
Information collected automatically. When you browse the Site, we automatically collect device and usage information such as your IP address, browser type, time zone, pages viewed, referring websites and search terms, and interactions with the Site. This is collected through cookies, log files and similar technologies. You can manage or disable cookies in your browser settings, though some Site features may not function correctly without them.
2. How we use personal information
- To process and fulfil orders, including payment processing, delivery, invoicing and order confirmations;
- To communicate with you about your orders, enquiries and warranty or support requests;
- To screen orders for potential risk or fraud;
- To maintain our business records, including accounting, bookkeeping and taxation records as required by Australian law;
- To improve and optimise the Site, including through analytics about how customers browse and interact with it;
- Where you have opted in, to send you marketing communications about our products and services. Every marketing email we send identifies us as the sender and contains a functional unsubscribe facility, in accordance with the Spam Act 2003 (Cth). You may opt out at any time.
3. Who we share personal information with
We share personal information only with service providers that help us operate our business, and only to the extent necessary for them to provide their services to us. These include:
- E-commerce platform: our online store is powered by Shopify. You can read Shopify's privacy policy at shopify.com/legal/privacy;
- Payment providers: to process payments securely;
- Delivery and freight partners: to deliver your orders;
- Analytics providers: we use Google Analytics to understand how customers use the Site. You can read Google's privacy policy at policies.google.com/privacy and opt out at tools.google.com/dlpage/gaoptout;
- Accounting and business systems: order and transaction information may be processed in our accounting software and internal business management systems for bookkeeping, reconciliation, reporting and tax compliance purposes.
We may also disclose personal information where required or authorised by law, including to comply with a lawful request from a regulator, law enforcement agency, court or tribunal, or to protect our legal rights.
We do not sell personal information to any third party.
4. Overseas disclosure
Some of our service providers (including our e-commerce platform and analytics providers) store or process data on servers located outside Australia, including in the United States and Canada. Where personal information is disclosed to overseas recipients, we take reasonable steps to ensure it is handled in a manner consistent with the Australian Privacy Principles.
5. Data security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Measures include encrypted (HTTPS/TLS) connections across the Site and our systems, access controls limiting information to authorised personnel, secure cloud infrastructure, and regular software updates and monitoring.
6. Data retention
We retain personal information for as long as it is needed for the purposes described above, including for the periods required by Australian taxation, corporations and consumer law. When personal information is no longer required, we take reasonable steps to delete or de-identify it.
7. Access, correction and complaints
You may request access to, or correction of, the personal information we hold about you by contacting us using the details below. We will respond within a reasonable period. If you have a concern or complaint about how we have handled your personal information, please contact us first so we can attempt to resolve it. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. The updated version will be published on this page with a revised "Last updated" date.