Privacy.
WoodenGrass · ABN 76 322 525 156
Last updated 4 November 2026
What we collect
When you create an account or place an order, we receive your name, email address, account identifier, shipping details, selected products and variants, order totals and payment status. Our authentication provider processes your sign-in credentials. Support emails contain the information you choose to send us.
Why we use it
We use this information to manage your account, process and deliver orders, issue and redeem gift cards, handle returns, prevent misuse and respond to enquiries. We retain transaction records needed for accounting, disputes and legal obligations.
Payments and service providers
Stripe processes card payments; full card details are entered into Stripe’s payment interface rather than stored in our shop database. Cloudflare hosts the website and store database. Supabase provides account sign-in. Google/Gmail delivers account and order emails. Australia Post receives the delivery details needed when we arrange shipping. Our Supabase authentication project is hosted in Frankfurt, Germany. Cloudflare, Stripe and Google operate internationally, so service processing can also occur outside Australia, including in the United States. Supabase also processes some operational information outside the project region. Their current location and privacy information is available from Supabase, Cloudflare, Stripe and Google. Contact us with questions about how your store information is handled.
Cookies and browsing information
We use secure cookies for account sessions and browser storage for your bag, currency preference and checkout recovery. First-party analytics records page visits, bag additions and checkout activity using a pseudonymous visitor identifier. Checkout activity can be linked to an order and its submitted country. This helps us understand visits and unfinished checkouts. The tracking endpoint respects your browser’s Do Not Track setting. Hosting and payment providers also receive technical connection information needed to operate and protect their services.
Your information and choices
You can browse without an account; sign-in is required to place an order. Contact woodengrass.co@gmail.com to request access, correction or deletion of your information, or to raise a privacy concern. We may need to verify your identity. Some order and payment records must be retained for legal obligations or to resolve a dispute. Clearing browser storage removes your locally saved bag and preferences, but does not delete completed orders.
Keeping information safe
We use encrypted connections, restricted administrator access and account-based access controls. Keep your password and gift-card codes private. If you suspect unauthorised access, contact us promptly.