Privacy policy

Effective date: 2 October 2026

This policy explains how Scribble Snacks handles your personal information when you visit scribblesnacks.com, shop with us, sign up to our emails or get in touch. We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). We have chosen to be covered by the Privacy Act (section 6EA), even though small businesses are usually exempt.

1. Who we are

Scribble Snacks is run by Ben Palmer, a sole trader in Western Australia, Australia (ABN 61 761 967 547). "We", "us" and "our" mean Scribble Snacks. For privacy questions or requests, email contact@scribblesnacks.com.

2. What we collect

  • Order details: your name, email address, phone number, billing and delivery addresses, the items you buy and your order history.
  • Payment details: payments are handled by Shopify Payments, Shop Pay and PayPal. We see confirmation of payment and limited details, such as the card type and last four digits, but never your full card number.
  • Account details: if you create a customer account, your login email and account preferences.
  • Messages: what you send us by email, our contact form or live chat (Shopify Inbox).
  • Marketing preferences: your email address and whether you've subscribed, and how you interact with our emails (for example opens and clicks). If we ever offer text messages and you opt in, your mobile number too; every text will tell you how to stop them.
  • Reviews: if you leave a review through Trustpilot or on our website (Judge.me), your review and the name you choose to show.
  • Website and device information: your IP address, approximate location, browser and device type, pages viewed, items added to cart, how you reached our site, and how you move around and interact with pages (see section 5).

You don't have to give us your details to browse our website. We do need your name, contact details and delivery address to fulfil an order. You can contact us without giving your real name, but we may not be able to help with a specific order.

We don't ask for sensitive information (such as health information) and ask that you don't send it to us.

3. How we collect it

  • Directly from you, when you place an order, sign up to emails, create an account, chat with us or email us.
  • Automatically, through cookies, pixels and similar technologies when you use our website or open our emails.
  • From service providers, for example payment providers confirming a payment, carriers giving delivery updates, or Trustpilot and Judge.me telling us about a review.

4. Why we use it

  • To process, fulfil and deliver your order, and to send order and shipping updates.
  • To answer your questions and handle returns, refunds and complaints.
  • To send marketing emails if you've subscribed (see section 6).
  • To invite you to review your purchase.
  • To understand how people use our website so we can fix problems and improve it.
  • To measure and show our ads on services such as Google, Facebook and Instagram.
  • To prevent fraud and keep our store secure.
  • To meet our legal obligations, for example tax record keeping and consumer law.

We don't sell your personal information.

Automated decisions. We don't make decisions that significantly affect you solely by computer. Shopify's fraud tools may flag an order as risky, and a person then reviews it. We don't cancel orders automatically.

5. Cookies, analytics and session recording

Cookies are small files stored on your device. We and our providers use cookies and similar tools to:

  • Run the store (Shopify): your cart, checkout and preferences. These are needed for the site to work.
  • Understand site use (Google Analytics 4): which pages are visited and how people find us, in summary form.
  • See how pages work for visitors (Microsoft Clarity): this tool records how visitors scroll, click and move around pages, and produces heatmaps and session replays. It masks sensitive text and form entries by default, so we can't see what you type into fields. We use it to find and fix things that are confusing or broken.
  • Advertising (Meta pixel for Facebook and Instagram, and Google, including Google Merchant Center and Shopping): to measure whether our ads work and to show our ads to people who have visited our site or might be interested in our products.
  • Email and sign-up forms (Shopify Messaging and Shopify Forms): to show sign-up forms and to connect website activity, such as viewed products or abandoned carts, to subscribers.

You can block or delete cookies in your browser settings, although some parts of the site may not work properly. You can also:

For visitors in the UK, European Economic Area and Switzerland, analytics, session recording and advertising cookies are only used with your consent, and you can change your choice at any time.

6. Marketing emails

We only send marketing emails if you've signed up, for example through a sign-up form or by ticking the box at checkout. The box is never ticked for you. Our emails are sent with Shopify Messaging.

Every marketing email has an unsubscribe link. You can also email us to unsubscribe. We'll action it within 5 business days. We'll still send messages about your orders, as they're not marketing.

7. Who we share it with

We share personal information only as needed with the providers who help us run the store:

  • Shopify: our store platform, checkout, Shop Pay and live chat (Shopify Inbox).
  • Payment providers: Shopify Payments and PayPal.
  • Suppliers and order tools: CJdropshipping and DSers receive your name, delivery address, phone number and order details so that your order can be packed and sent.
  • Carriers and postal services: to deliver your parcel.
  • Track123: our order tracking page and delivery updates.
  • Shopify Messaging, Shopify Forms and Shopify Flow: email marketing, sign-up forms and automated emails.
  • Judge.me: receives your name, email address and order details to send you a review request after delivery, and shows reviews on our website.
  • Google, Meta and Microsoft (Clarity): analytics, advertising and session recording, as set out in section 5.
  • Trustpilot: receives your name, email address and order reference to send you a review invitation.
  • Professional advisers and authorities: such as an accountant, or where the law requires or allows it.

These providers use your information to provide their services and, in some cases, also under their own privacy policies (for example Google, Meta and PayPal).

8. Sending information overseas

Many of our providers are based, or store information, outside Australia. Your information is likely to be disclosed to recipients in:

  • China: our suppliers and their warehouses (mainly CJdropshipping), which pack and send orders, and the order tools we use with them, such as DSers. Some orders may be sent from supplier warehouses in other countries.
  • United States: Google, Meta, Microsoft and PayPal.
  • Canada and other countries where Shopify operates: our store platform.
  • Denmark: Trustpilot.
  • United Kingdom: Judge.me.
  • Your own country, and countries in between, through carriers delivering your parcel.

We choose established providers and take reasonable steps to make sure they protect your information. Privacy laws in some of these countries, including China, are different from Australia's.

9. Keeping it safe, and how long we keep it

We store information in the secure systems of our providers, use strong passwords and two-factor authentication on key accounts, and limit access to what's needed to run the store. No online system is completely secure, but if we have a data breach that's likely to cause serious harm, we'll let you know and, where required, notify the Office of the Australian Information Commissioner (OAIC).

We keep order records for as long as the law requires, generally five years for Australian tax purposes. We keep marketing details until you unsubscribe or ask us to delete them, and chat and email messages for as long as needed to help you. Analytics and session recording data is kept for the periods set by those tools, generally no longer than 14 months. When we no longer need information, we delete it or remove identifying details.

10. Accessing and correcting your information

You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing contact@scribblesnacks.com. We may need to confirm your identity first. We'll reply within 30 days and won't charge you for making a request. If we can't give access or make a correction, we'll explain why.

11. Children

Our store is for adults buying for themselves or as gifts. We don't knowingly collect personal information from children under 16 and our marketing isn't aimed at children. If you think a child has given us their details, contact us and we'll delete them.

12. Customers in the UK and European Union

If you're in the UK or EU, the UK GDPR or EU GDPR may also apply when we handle your information. We rely on these legal bases:

  • Contract: to process and deliver your order.
  • Legal obligation: for example to keep tax records.
  • Legitimate interests: to run and secure our store, prevent fraud, answer enquiries and send review invitations.
  • Consent: for marketing emails, and for analytics, session recording and advertising cookies where your local law requires consent. You can withdraw consent at any time.

You have the right to access, correct or delete your information, to restrict or object to how we use it (including for direct marketing), and to receive a copy of information you gave us in a portable format. To use these rights, email us. We'll reply within one month.

Because we're based in Australia, your information is transferred outside the UK and EU as described in section 8. Where our providers offer contractual safeguards for these transfers, such as standard contractual clauses, we rely on them.

You can complain to the data protection authority where you live or work, such as the Information Commissioner's Office (ICO) in the UK. We'd appreciate the chance to sort things out first.

13. Questions and complaints

If you have a question or concern about your privacy, please email contact@scribblesnacks.com. We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

14. Changes to this policy

We may update this policy when our practices, providers or the law change. We'll post the new version here with a new effective date. If a change significantly affects how we use your information, we'll let subscribers and customers know by email.