Privacy policy

Privacy Policy

Last updated: 18 May 2026

This Privacy Policy describes how Candy & Frank Pty Ltd (ABN 64 668 297 578) (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from candyandfrank.com (the "Site"). Please read this Privacy Policy carefully. By using the Site, you agree to the collection and use of information in accordance with this Policy.

Information we collect

We collect information that you provide to us directly, including:

  • Contact details: name, email, postal address, phone number
  • Order information: billing and shipping address, items purchased, payment confirmation
  • Account information: if you create an account, your username and password
  • Customer service: any information you provide when contacting us

We also collect information automatically when you visit the Site, including IP address, device and browser type, pages viewed, and referring URLs. This is collected through cookies and similar technologies.

How we use your information

  • To process and fulfil your orders
  • To communicate with you about your order, account, or enquiries
  • To send marketing communications (where you have opted in, and you can unsubscribe at any time)
  • To improve our website, products and customer experience
  • To detect and prevent fraud, and comply with legal obligations

How we share your information

We share personal information only with third parties who help us run our business, including:

  • Shopify (our e commerce platform)
  • Payment processors (Shopify Payments, PayPal)
  • Shipping and fulfilment partners (Australia Post and similar carriers)
  • Email and marketing platforms
  • Analytics providers

We do not sell your personal information to third parties.

Cookies

We use cookies to power the Site, remember your preferences, and analyse traffic. You can disable cookies in your browser settings, but some parts of the Site may not function correctly without them.

Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information (subject to legal record keeping requirements)
  • Opt out of marketing communications at any time
  • Make a complaint about how we handle your personal information

To exercise any of these rights, contact us at wcandy@candyandfrank.com.

Children

Our products are designed for children, but our Site is intended to be used by adults (parents and guardians). We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us and we will delete it.

Data security and retention

We take reasonable steps to protect your personal information. Payment data is handled by PCI compliant processors and we do not store full card numbers on our servers. We retain your information only for as long as needed to fulfil the purposes described in this Policy, or as required by law.

Complaints

If you are not satisfied with our handling of your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Contact

For any questions about this Privacy Policy, contact us at:

Candy & Frank Pty Ltd
Email: wcandy@candyandfrank.com
Phone: +61 421 101 835
ABN: 64 668 297 578