Privacy policy

Privacy Policy

Last Updated: January 2026

DPack (ABN 74 855 440 553) is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dpack.com.au or place an order with us.

By using our website, you consent to the practices described in this policy. We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

1. Information We Collect

Information You Provide Directly

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect:

  • Full name
  • Email address
  • Phone number
  • Billing and shipping address
  • Business name and ABN (for wholesale accounts)
  • Payment information (credit card details are processed securely by our payment providers and are not stored on our servers)
  • Order history and preferences
  • Communications with our team (emails, phone calls, chat messages)

Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

  • IP address
  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • Operating system
  • Pages visited and time spent on each page
  • Referring website or search terms used to find us
  • Date and time of your visit
  • Geographic location (city/region level)

2. How We Use Your Information

We use the information we collect for the following purposes:

Order Fulfilment & Customer Service

  • Processing and fulfilling your orders
  • Sending order confirmations, dispatch notifications, and tracking information
  • Managing returns, refunds, and exchanges
  • Responding to your enquiries and providing customer support
  • Managing your wholesale trade account

Marketing & Communications

  • Sending promotional emails and newsletters (with your consent)
  • Notifying you about new products, special offers, and sales
  • Personalising your shopping experience based on purchase history
  • Displaying relevant advertisements on third-party platforms (see Section 4)

Website Improvement & Analytics

  • Understanding how visitors use our website
  • Improving website functionality and user experience
  • Analysing sales trends and product performance
  • Fraud prevention and security monitoring

Legal Compliance

  • Complying with Australian tax obligations (GST reporting)
  • Meeting record-keeping requirements under Australian law
  • Responding to legal requests from authorities

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information with the following service providers who assist us in operating our business:

Payment Processing

  • Shopify Payments — processes credit and debit card payments securely

Our payment provider handles your card details under their own privacy policy and PCI-DSS compliance standards. We do not store your full credit card details on our servers.

Shipping & Delivery

  • Australia Post — we share your name, delivery address, phone number, and email with our shipping carrier to deliver your order and provide tracking information

Analytics

  • Google Analytics — we use Google Analytics to understand how visitors use our website. Google Analytics collects information such as how often you visit, which pages you view, and what other sites you visited before coming to ours. Google may use this data in accordance with their own privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Advertising

  • Google Ads — we use Google Ads conversion tracking and remarketing to measure advertising effectiveness and show relevant ads to people who have visited our website. You can manage your Google ad preferences at Google Ads Settings.
  • Meta (Facebook/Instagram) Pixel — we use Meta Pixel to track conversions from Facebook and Instagram ads, and to show you relevant ads on Meta platforms. Your browsing data on our site may be shared with Meta for advertising purposes. You can manage your ad preferences in your Facebook Ad Preferences.

Email Marketing

  • We may use third-party email marketing platforms (such as Klaviyo or Shopify Email) to send newsletters and promotional communications. You can unsubscribe from marketing emails at any time using the unsubscribe link in any email we send.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us provide and improve our services.

Types of Cookies We Use

Cookie Type Purpose Examples
Essential Required for the website to function (shopping cart, checkout, login) Shopify session cookies
Analytics Help us understand how visitors use our website Google Analytics (_ga, _gid)
Advertising Track ad conversions and enable remarketing Google Ads, Meta Pixel (_fbp, _fbc)
Functional Remember your preferences (e.g., currency, region) Preference cookies

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

  • View and delete existing cookies
  • Block cookies from specific or all websites
  • Set preferences for certain types of cookies

Please note that disabling essential cookies may affect the functionality of our website, including the ability to add items to your cart or complete checkout.

5. Marketing Communications

We may send you marketing communications if you have:

  • Opted in to our newsletter
  • Created an account and consented to marketing
  • Made a purchase and not opted out of marketing

You can opt out at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Emailing us at hello@dpack.com.au with the subject "Unsubscribe"
  • Updating your communication preferences in your account settings

Opting out of marketing will not affect transactional communications (order confirmations, shipping notifications, etc.).

6. Data Security

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, and disclosure. Our security measures include:

  • SSL Encryption: All data transmitted between your browser and our website is encrypted using SSL (Secure Socket Layer) technology
  • PCI-DSS Compliance: Our payment processors are PCI-DSS compliant, ensuring secure handling of credit card information
  • Access Controls: Only authorised personnel have access to personal information, on a need-to-know basis
  • Secure Hosting: Our website is hosted on Shopify's secure servers with enterprise-grade security

While we take all reasonable precautions, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

  • Account data: Retained while your account is active, and for 7 years after closure (Australian tax record-keeping requirements)
  • Order data: Retained for 7 years (Australian tax record-keeping requirements)
  • Marketing data: Retained until you unsubscribe or request deletion
  • Analytics data: Retained for 26 months (Google Analytics default retention period)

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access your personal information that we hold
  • Correct any inaccurate or out-of-date information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Opt out of marketing communications
  • Withdraw consent for data processing where consent was the basis for collection
  • Lodge a complaint if you believe we have breached your privacy

To exercise any of these rights, contact us at hello@dpack.com.au. We will respond to your request within 30 days.

9. Children's Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately at hello@dpack.com.au.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us:

  • Email: hello@dpack.com.au
  • Phone: 041 676 94 92
  • Address: 70 Southbank Bvd, Southbank VIC 3006, Australia

ABN: 74 855 440 553

Complaints

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au