Privacy policy

Last updated: 20 April 2026
Effective date: 20 April 2026

This Privacy Policy explains how TECH ZONE AUSTRALIA PTY LTD (ABN 77 642 383 140 | ACN 642 383 140) — which operates the CaseGrove online store (“CaseGrove”, “we”, “us”, or “our”) — collects, uses, discloses, stores, and protects your personal information when you visit, make a purchase from, or otherwise interact with https://casegrove.com (the “Site”) or communicate with us.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) set out in Schedule 1 of that Act, the Notifiable Data Breaches scheme (Part IIIC), and the Spam Act 2003 (Cth).

By using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect the following categories of personal information:

(a) Information you provide directly

  • Full name
  • Email address
  • Shipping address and billing address
  • Phone number
  • Payment information (processed by our payment processors — we do not store full card numbers)
  • Order history and order preferences (e.g. the phone model and case style you select)
  • Communications you send us (support emails, contact form submissions, product reviews, “Wrong Model” exchange requests)
  • Marketing preferences and consent signals

(b) Information we collect automatically

  • IP address
  • Browser type, version, and language
  • Device type, model, and operating system
  • Pages viewed, links clicked, time spent on pages, scroll depth
  • Referring URL and exit URL
  • Cookies and similar tracking technologies (see Section 6)

(c) Information from third parties

  • Delivery status updates from Australia Post
  • Marketing attribution data from Google Ads
  • Fraud and risk indicators from Shopify’s fraud analysis tools
  • Publicly posted information (e.g. product reviews or tagged social media posts)

We do not knowingly collect sensitive information (as defined in the Privacy Act) through the Site.

2. How We Use Your Information

We use your personal information for the following purposes, each tied to the categories of data listed in Section 1:

  • Order processing and fulfilment — name, address, phone, email, payment, order history
  • Order confirmations, shipping updates, and “Wrong Model” exchange coordination — name, email, phone, order history
  • Customer support — name, email, communications, order history
  • Fraud prevention and risk screening — IP address, device information, payment information, order history
  • Legal and tax compliance (including GST and ATO record-keeping) — order history, billing information
  • Marketing communications (Google Ads, email newsletters) — email, browsing behaviour, order history, marketing preferences — only where you have provided the consent required by law
  • Site analytics and improvement — device information, browsing behaviour
  • Responding to access, correction, and deletion requests — identity verification information you provide

3. How and Why We Collect Your Information

We collect your information when you:

  • Create an account or place an order on the Site
  • Subscribe to our email newsletter
  • Contact us via email, contact form, or social media
  • Submit a “Wrong Model” exchange request
  • Leave a product review
  • Interact with the Site (automatically, via cookies and similar technologies)
  • Participate in promotions, surveys, or competitions we run

Under APP 3, we only collect personal information that is reasonably necessary for one or more of our functions or activities as set out in Section 2.

4. Sharing Your Information

We disclose your personal information only to the following categories of third parties, and only to the extent necessary:

  • E-commerce platform — Shopify Inc. (to operate the Site, process orders, and run Shopify Payments and Shopify Email)
  • Payment processors — Shopify Payments and Shopify’s integrated wallet providers (Apple Pay, Google Pay, Shop Pay) for card processing (Visa, Mastercard, American Express, UnionPay, JCB)
  • Shipping and fulfilment — Australia Post (to deliver your orders)
  • Analytics providers — Google Analytics (to understand how the Site is used)
  • Advertising providers — Google Ads (to serve relevant advertising and measure campaign performance, where you have consented)
  • Email marketing — Shopify Email (for transactional emails and, where you have consented, marketing emails)
  • Fraud prevention — Shopify fraud analysis tools
  • Professional advisors — accountants, lawyers, and auditors, under confidentiality obligations
  • Authorities — where required by law, court order, or to lawfully protect our rights, property, or safety, or the rights, property, or safety of others

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. Overseas Disclosure (APP 8)

Some of the third parties listed in Section 4 are located outside Australia. In particular:

  • Shopify Inc. and its service providers store and process data in Canada, the United States, the European Union, and other jurisdictions
  • Google Analytics and Google Ads process data in the United States and other jurisdictions

Before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles your information in a manner consistent with the Australian Privacy Principles, including by entering into contractual arrangements that require equivalent protection.

Under APP 8.1, we remain accountable for any act or practice of an overseas recipient that would breach the APPs if done by us in Australia.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site, remember your preferences, understand how the Site is used, and deliver relevant advertising.

Categories of cookies we use:

  • Strictly necessary — required for the Site to function (cart, checkout, account login, security)
  • Performance and analytics — to measure Site performance (Google Analytics)
  • Marketing — to serve relevant advertising and measure campaign performance (Google Ads)

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Site from functioning correctly.

7. Data Retention

We retain your personal information only for as long as necessary for the purposes described in this Policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

Specifically:

  • Order and tax records — 7 years from the date of the order, to comply with Australian Taxation Office record-keeping requirements
  • Account information — until you request deletion, subject to the order-record retention above
  • Marketing preferences and consent logs — until you withdraw consent, and for 2 years thereafter to demonstrate prior compliance with the Spam Act 2003
  • Support communications — 3 years from the date of the communication
  • Site analytics — per the configured retention setting in Google Analytics (currently 14 months)

When personal information is no longer needed and we are not required by law to retain it, we will destroy or permanently de-identify it in accordance with APP 11.2.

8. Your Rights Under Australian Law

Under the Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you (APP 12)
  • Request correction of personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading (APP 13)
  • Request that we delete your personal information, subject to our legal obligations to retain certain records
  • Withdraw your consent to marketing communications at any time, using the unsubscribe link in any marketing email or by emailing us (Spam Act 2003)
  • Make a complaint about how we have handled your personal information (see Section 13)

To exercise any of these rights, email us at support@casegrove.com with the subject line “Privacy Request”. We will respond within 30 days. We may need to verify your identity before actioning your request.

9. Data Security

We protect your personal information using industry-standard measures:

  • TLS/SSL encryption for all data transmitted between your browser and the Site
  • PCI-DSS compliant payment processors handle all card data — we never see or store full card numbers
  • Access to personal information is limited to authorised team members and service providers on a need-to-know basis
  • Regular security reviews, software updates, and access audits

No system is completely secure. In the event of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988).

10. Children’s Privacy

The Site is not directed at children under the age of 16, and we do not knowingly collect personal information from children under that age without the consent of a parent or guardian.

If you believe we have collected personal information from a child under 16, please contact us at support@casegrove.com and we will take reasonable steps to delete it.

11. Automated Decision-Making

We do not use automated decision-making processes (including profiling) to make decisions that would have a legal or similarly significant effect on you.

We do use automated tools for fraud screening (via Shopify’s fraud analysis), but a human reviews any order that is flagged before the order is cancelled or refunded on the basis of that screening.

If our use of automated decision-making changes, we will update this Policy in advance of any change taking effect, in line with the transparency obligations under APP 1.7 commencing 10 December 2026.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The “Last updated” date at the top reflects the most recent revision.

For material changes, we will provide a prominent notice on the Site and, where you have an account with us, by email, before the change takes effect.

13. How to Contact Us and Make a Complaint

For any privacy question, access request, correction request, deletion request, or complaint, please contact:

CaseGrove
Operated by TECH ZONE AUSTRALIA PTY LTD
ABN 77 642 383 140 | ACN 642 383 140
1/48 Broadway, Punchbowl NSW 2196, Australia

Phone: +61 2 8403 0490
Email: support@casegrove.com
Support hours: Monday – Friday, 9:00 AM – 5:00 PM AEST

We will acknowledge your complaint within 7 days and respond substantively within 30 days.

If you are not satisfied with our response, or you believe we have breached the Australian Privacy Principles, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone (Enquiries Line): 1300 363 992
Email: oaicintake@oaic.gov.au
Post: GPO Box 5288, Sydney NSW 2001