Privacy Policy

Last updated: Jan 2026

Galway Trading Pty Ltd (ABN 27 078 006 569) trading as Conni (“we”, “us”, “our”) is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy applies to personal information collected through our websites, online stores, customer service channels, and related digital services.

1. What personal information we collect

We may collect personal information including, but not limited to:

Name
Email address
Postal and delivery address
Phone number
Order and transaction details
Account login details
Communication preferences
Information provided to customer support
Gift recipient details (where applicable)

We do not knowingly collect sensitive information, unless required and lawfully permitted.

2. How we collect personal information

We collect personal information when you:

Place an order or create an account
Contact us via email, phone, live chat or online forms
Subscribe to marketing communications
Participate in surveys or promotions
Browse or interact with our website
Engage with our customer support team

We may also collect information automatically through cookies and analytics tools when you use our website.

3. Why we collect personal information

We collect personal information where it is reasonably necessary to operate our business, including to:

Process and fulfil orders
Deliver products and services
Provide customer support
Manage customer accounts and subscriptions
Communicate about orders, products, or services
Send marketing communications where consent has been provided
Improve our website, products, and customer experience
Meet legal, regulatory, and record-keeping obligations

4. Disclosure of personal information

We may disclose personal information to trusted third parties where necessary to operate our business, including:

Payment processing providers
Website hosting and IT service providers
Email and marketing platforms
Analytics and performance tools
Logistics and delivery partners
Professional advisers where required by law

These parties are required to handle personal information securely and only for authorised purposes.

We do not sell personal information.

5. Overseas disclosure of personal information

Some of our service providers store or process personal information outside Australia, including in countries such as the United States.

Where personal information is disclosed overseas, we take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with Australian privacy obligations.

6. Cookies and analytics

We use cookies and similar technologies to:

Enable website functionality
Remember user preferences
Process shopping cart activity
Analyse website traffic and usage
Improve website performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

7. Marketing communications

If you opt in to receive marketing communications, we may send you information about products, offers, or updates.

You can opt out at any time by:

Using the unsubscribe link included in emails
Updating your preferences in your account
Contacting us directly

Transactional and service-related communications may still be sent where required.

8. Storage and security of personal information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Security measures include:

Secure servers and restricted access controls
Encryption and SSL technologies
Use of reputable third-party platforms

We do not knowingly store credit card details. Payments are processed securely via trusted third-party payment providers.

9. Access and correction

You may request access to personal information we hold about you and request correction of information that is inaccurate, incomplete, or out of date.

Requests can be made by contacting us using the details below. We may require identity verification before responding.

10. Privacy complaints

If you have a privacy concern or complaint, please contact us so we can attempt to resolve the matter.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner
Website: https://www.oaic.gov.au

11. NDIS Participant Complaints

If you are an NDIS participant and feel that you are unable to raise or resolve a complaint directly with us, you may access the independent complaints pathway provided by the NDIS Quality and Safeguards Commission.

The Commission can assist you to make a complaint and provide information about your rights and available support.

Further information, including how to lodge a complaint, is available at:

https://www.ndiscommission.gov.au/contact-us/makeacomplaint

12. Changes to this policy

We may update this Privacy Policy from time to time.
The current version will always be available on our website and applies from the date shown above.