Privacy policy
Privacy Policy
Last updated: 1 September 2026
Original Goodness Australia runs ogaustralia.com. This policy sets out what personal information we collect, why, who we share it with, where it goes, and what you can do about it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
If anything here is unclear, or you want a copy in another format, email privacy@ogaustralia.com and we will sort it out.
What we collect
When you order: your name, email, phone number, delivery and billing address, what you bought, and the card type and last four digits. We never see or store your full card number — the payment provider handles that end of it.
When you sign up for emails: your email address, and the fact that you ticked the consent box, when, and what it said at the time.
When you contact us or send a wholesale enquiry: your name, business name, email, phone number, and whatever you write in the message.
When you browse: your IP address, device and browser, the pages you look at, what goes in your cart, and how you arrived.
We do not ask for sensitive information — health, racial or ethnic origin, religious beliefs and the like. Please do not tell us about a medical condition when you write to us. We do not need it to help you, and we would rather not hold it. If you do send it, we will use it only to answer you and delete it once we have.
How we collect it
Mostly straight from you, when you type it into a form or send us an email. Some of it is collected automatically while you browse, through cookies and the tools described below. Occasionally we receive information from someone else, such as a courier confirming a delivery.
Why we collect it
- To take, pack, deliver and invoice your order, and to handle returns and refunds
- To answer your questions and deal with complaints
- To send you marketing email, if you have asked for it
- To understand how the site is used and improve it
- To keep the records the law requires, including tax records
- To detect and prevent fraud
If you do not give us your name, address and contact details we cannot process or deliver an order. Everything else is optional.
Marketing, and how to stop it
We only send marketing to people who have ticked a box asking for it. Every marketing email carries an unsubscribe link, and any marketing SMS tells you how to stop. We action unsubscribes within five working days at the outside, and usually straight away.
Unsubscribing does not stop the emails we have to send about an order you have already placed — order confirmations, dispatch notices, that sort of thing.
We do not sell personal information, and we do not swap or rent it.
Cookies and tracking
The site uses cookies to keep your cart, remember your language choice and measure traffic. Two sets of tools are involved:
- Shopify — runs the store and the checkout, and provides the traffic and sales reporting we use.
- Tolstoy — the shoppable video player that appears on our pages.
We do not currently run Meta Pixel, Google Analytics or Google Ads tracking on this site. If that changes, we will update this section before turning anything on.
You can block or delete cookies in your browser settings. Some of the site — the cart in particular — will not work properly if you do.
Who we share it with, and where it goes
We share personal information with the businesses that help us run the store: Shopify, our payment provider, our courier, Tolstoy, and our accountants. We also disclose information where the law requires it, and would disclose it to a buyer if we ever sold the business.
Yes, your personal information is likely to be stored overseas. Shopify hosts our store and holds information in Canada, the United States, Ireland and Singapore. Our other providers may hold information in the United States. Before we send personal information to a business outside Australia we take reasonable steps to make sure it is handled consistently with the Australian Privacy Principles, normally through a written contract. If you want the current list of providers and the countries they operate in, email us and we will send it.
Keeping it safe
Access to customer information is limited to the people who need it to do their job. The site and the checkout run over an encrypted connection, and card payments are handled by the payment provider rather than by us. Our providers publish their own security practices, which we review when we choose them but do not control.
No website is completely secure, and we are not going to pretend otherwise. If something goes wrong and your information is caught up in it, we will tell you what happened, what it means for you and what to do about it.
How long we keep it
Order and tax records are kept for seven years because the law requires it. Everything else — enquiries, support messages, unsubscribed marketing contacts, abandoned carts — is deleted or de-identified once the reason we collected it has run out.
Dealing with us anonymously
You can browse the site and ask a general question without telling us who you are. We cannot process an order anonymously, because we need a name and an address to send it to.
Getting a copy of your information, or fixing it
You can ask for a copy of the personal information we hold about you, and you can ask us to correct anything wrong, out of date or incomplete. Email privacy@ogaustralia.com.
We will ask you to confirm who you are, then come back to you within 30 days. There is no charge for making the request and no charge for a correction. If we have to refuse, we will put the reasons in writing and tell you how to complain about it. If we have already given the wrong information to someone else, we will let them know about the correction if you ask us to.
Children
This site is not aimed at children and we do not knowingly collect personal information from them. If you think a child has given us their information, email us and we will delete it.
Complaints
If you think we have mishandled your personal information, tell us first. Email privacy@ogaustralia.com with what happened and what you would like us to do about it.
We will acknowledge your complaint within five working days and give you a written response within 30 days. If we need longer we will tell you why and agree a new date with you.
If you are not satisfied with how we handle it — or you do not hear back within 30 days — you can take it to the Office of the Australian Information Commissioner:
- Online: oaic.gov.au/privacy/privacy-complaints
- Phone: 1300 363 992
- Post: GPO Box 5288, Sydney NSW 2001
The Commissioner will usually expect you to have complained to us first and given us 30 days to respond.
Changes to this policy
We update this policy when what we do changes. The date at the top tells you when it last changed. If a change materially affects how we use information we already hold, we will say so rather than quietly reissue the page.
Contact
Original Goodness Australia
Level 24, Three International Towers
300 Barangaroo Avenue
Sydney NSW 2000
Australia
Privacy enquiries: privacy@ogaustralia.com
Everything else: sales@ogaustralia.com
