Privacy policy

This Privacy Policy describes how HeapsGood Packaging Pty Ltd ("HeapsGood", "we", "us") collects, uses, and discloses your Personal Information when you visit heapsgoodpackaging.com.au (the "Site"), make a purchase from us, or contact our team. We handle Personal Information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Contact

If you have questions about this policy, want more information about our privacy practices, or would like to make a complaint, please contact us:

Email: hello@heapsgoodpackaging.com.au
Mail: 3-5 Dissik St, Cheltenham VIC 3192, Australia

Personal information we collect

"Personal Information" means any information about an identifiable individual. We collect the following:

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse, we also collect information about the pages and products you view, what search terms referred you to the Site, and how you interact with the Site. We refer to this as "Device Information", and we use it to load the Site correctly, screen for fraud, and analyse usage so we can improve the Site. It is shared with Shopify (our e-commerce platform) and our analytics providers.

When you make a purchase or attempt to make a purchase through the Site, we collect your name, business name (if applicable), billing address, shipping/delivery address, payment information, email address, and phone number. We refer to this as "Order Information", and we use it to fulfil your order โ€” processing payment, arranging delivery, and sending invoices and order confirmations โ€” as well as to communicate with you, screen orders for fraud, and (where you've opted in) send you information about our products and offers. It is shared with Shopify, our payment providers, and our freight and delivery partners.

When you create an account or apply for wholesale access, we collect your name, business name, ABN, contact details, order history, and pricing tier. We use this to operate your customer or wholesale account, apply the correct pricing, and manage your trading relationship with us.

When you email us, call us, or use the chat widget on the Site, we collect your name, email address, order details, and the contents of your messages, including live chat transcripts. We use this to respond to your enquiry, provide customer support, maintain quality of service, and improve our support processes and tools. This information is processed on our behalf by Gorgias, our customer support and live chat platform. Chat conversations may be recorded and reviewed.

When you subscribe to our emails, create an account, or make a purchase, we collect your email address, name, and your engagement with our emails so that, with your permission, we can send you emails about new products, restocks, and offers.

How do we use your personal information?

We use your Personal Information to:

- Provide our products and services;
- Process payments and fulfil orders;
- Operate customer and wholesale accounts;
- Communicate with you and provide customer support;
- Screen for potential risk or fraud;
- Improve and optimise the Site; and
- When in line with the preferences you have shared with us, provide you with information relating to our products and offers.

Sharing your personal information

We share Personal Information with service providers who help us run our business, including:

- Shopify, which powers our online store. You can read Shopify's privacy policy at https://www.shopify.com/legal/privacy.
- Gorgias, which powers our customer support inbox and live chat. You can read Gorgias's privacy policy at https://www.gorgias.com/privacy.
- Payment providers (such as Shopify Payments and PayPal) to process transactions.
- Freight and delivery partners to deliver your orders.
- Analytics and marketing platforms as described in this policy.

We may also disclose Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information, or to otherwise protect our rights.

We do not sell your Personal Information.

Overseas disclosure

Some of our service providers store or process data on servers located outside Australia, including in the United States and the European Union (for example, Shopify and Gorgias). Where we disclose Personal Information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles.

Analytics and advertising

We use analytics and advertising tools to understand how customers use the Site and to reach people who may be interested in our products. For example:

- We use Google Analytics to understand how customers use the Site. You can read Google's privacy policy at https://policies.google.com/privacy and opt out at https://tools.google.com/dlpage/gaoptout.
- We may use advertising pixels (such as Meta's) to measure and deliver relevant advertising.

You can opt out of targeted advertising through your account settings on those platforms, or via the Digital Advertising Alliance's opt-out portal at https://optout.aboutads.info/.

Cookies

A cookie is a small amount of information downloaded to your device when you visit the Site. We use functional, performance, advertising, and analytics cookies. Cookies help the Site remember your actions and preferences and tell us how people use the Site.

Session cookies last until you stop browsing; persistent cookies last until they expire or are deleted (most of ours expire between 30 minutes and two years after download). You can control cookies through your browser settings โ€” see your browser's help file or www.allaboutcookies.org for instructions. Blocking cookies may affect parts of your experience on the Site.

Retention

We retain your Personal Information for as long as needed to provide our services, maintain our business records (including for tax and accounting obligations), and comply with our legal obligations โ€” unless and until you ask us to delete it, where we are able to do so.

Security

We take reasonable steps to protect Personal Information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Payment information is processed by our payment providers and is not stored on our systems.

Access, correction, and your rights

Under the Australian Privacy Principles, you have the right to request access to the Personal Information we hold about you and to ask that it be corrected or updated. To make a request, contact us using the details above. We will respond within a reasonable period and will not charge you for making the request.

You can unsubscribe from marketing emails at any time using the link in any email, or by contacting us.

Minors

The Site is not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you believe a child has provided us with Personal Information, please contact us to request deletion.

Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your Personal Information, please contact us first using the details above. We take complaints seriously and will respond within a reasonable period (usually 30 days).

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/privacy/privacy-complaints.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. The current version will always be available on this page.

Last updated: 9 July 2026