Privacy policy

At Grand Box Lab, we understand that trust is an important part of shopping online. When you place an order for a magnetic car phone mount, an in-car tissue holder, or a car rubbish bag, you may need to provide information that allows us to confirm your purchase, arrange delivery, and assist you if something goes wrong.

This Privacy Policy explains how J F D INDUSTRIES PTY. LIMITED, trading as Grand Box Lab, may collect, use, store, and disclose personal information through https://www.grandboxlab.online/ and related customer service interactions.

Our business is based in New South Wales, Australia. Where the Privacy Act 1988 (Cth) applies to our business, we handle personal information in accordance with the Australian Privacy Principles and other applicable privacy requirements.

1. Information We Collect

The information we collect depends on how you use our website and interact with our store.

Personal and Contact Information

When you place an order or contact us, we may collect:

  • Full name.

  • Email address.

  • Telephone number, if requested or provided.

  • Billing address.

  • Shipping address.

  • Delivery instructions.

  • Order number and purchase history.

  • Information you provide in customer service correspondence.

This information helps us identify your order, communicate with you, and arrange the services you request.

Order and Transaction Information

We may retain information relating to products purchased, quantities, order dates, payment status, transaction references, shipping details, and refund history.

For example, if you contact us about a magnetic mount that does not fit your phone case, a damaged tissue holder, or a problem with a car rubbish bag, we may use relevant order information to investigate and respond.

Payment Information

Payments may be processed through third-party payment service providers. These providers may collect payment card details, billing information, security verification data, and other information necessary to complete a transaction.

We may receive payment confirmations, transaction references, payment status, and limited payment-method information. We do not intend to store complete payment card security details on our own systems when payment processing is handled by an external provider.

Technical and Browsing Information

When you visit our website, certain technical information may be collected automatically, including:

  • IP address.

  • Browser type and version.

  • Device type and operating system.

  • Pages viewed and website navigation activity.

  • Date and time of access.

  • Referring website or source.

  • Website performance and error information.

  • Cookie identifiers and similar technical data.

This information may help us maintain website functionality, understand visitor activity, and identify potential security problems.

2. How We Collect Information

We may collect information:

  • Directly from you when you place an order.

  • When you complete a contact form or send us an email.

  • Through cookies and similar website technologies.

  • From payment providers when they provide transaction confirmations.

  • From delivery providers when they supply tracking or delivery updates.

  • Through service providers that support website hosting, security, analytics, and order management.

Where required by applicable law, we will provide appropriate notice about the collection of personal information.

3. How We Use Personal Information

We use personal information for purposes reasonably connected with operating Grand Box Lab and providing customer services.

Processing Orders: To confirm purchases, verify payment status, prepare orders, and maintain transaction records.

Delivery Coordination: To provide the necessary delivery information to carriers and help ensure that parcels reach the intended destination.

Customer Service: To respond to product questions, investigate complaints, manage returns, and provide updates about existing orders.

Website Improvement: To understand how visitors use the website, identify technical issues, and improve page performance and shopping navigation.

Fraud Prevention and Security: To identify suspicious transactions, prevent unauthorised activity, and protect our customers and business systems.

Legal and Administrative Requirements: To maintain accounting records, meet tax obligations, respond to lawful requests, and manage disputes.

Marketing: Where permitted by law, we may send promotional messages about products, special offers, or store updates. You can opt out of marketing communications using the unsubscribe instructions in the message or by contacting us.

We do not intend to use personal information for unrelated purposes without providing any notice or obtaining consent where required by law.

4. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, and similar technologies to support its operation.

These technologies may help us:

  • Maintain shopping-cart contents.

  • Support checkout and session functions.

  • Remember selected website preferences.

  • Understand website traffic and visitor behaviour.

  • Monitor website performance.

  • Identify suspicious activity.

  • Measure advertising performance, if advertising tools are enabled.

Some cookies are necessary for core website functions. Other cookies may be used for optional analytics or marketing purposes.

You may manage cookies through your browser settings. Disabling certain cookies may affect shopping-cart functionality, checkout, or other website features.

Where applicable law requires consent or additional choices for optional tracking technologies, we will provide those choices.

5. Sharing Personal Information

We do not treat customer information as public information. We may disclose limited information to third parties where reasonably necessary to operate our store or fulfil a customer request.

These third parties may include:

Payment Providers: To process transactions, verify payments, and manage payment-related issues.

Shipping and Delivery Companies: To prepare shipping labels, transport parcels, and provide delivery updates.

Website and Hosting Providers: To maintain website availability, store relevant information, and provide technical assistance.

Analytics and Marketing Providers: To understand website performance or measure promotional activities, where such services are used and legally permitted.

Professional Advisers: Such as accountants, auditors, legal advisers, and insurers when reasonably necessary for business administration.

Government and Legal Authorities: Where disclosure is required or authorised by law, court order, or another lawful process.

We seek to share only information reasonably necessary for the relevant purpose.

6. Overseas Disclosure and Storage

Some service providers may operate systems or infrastructure outside Australia. As a result, personal information may be stored or processed in overseas locations depending on the providers used by our business.

Where the Privacy Act applies and an overseas disclosure is made, we will take the steps required by the Australian Privacy Principles, including Australian Privacy Principle 8 where relevant.

The countries involved may vary depending on the services and providers used. We will not claim that information is stored exclusively in Australia unless that is confirmed by our actual service arrangements.

7. Marketing Preferences

We may send promotional communications where permitted under applicable law.

If you no longer wish to receive marketing emails, you may:

  • Use the unsubscribe link included in a promotional email, where available.

  • Email [email protected] with the subject “Unsubscribe from Marketing.”

Even if you opt out of marketing, we may still send necessary transactional messages about an order, payment, delivery, security issue, or customer service request.

Commercial electronic messages will be handled in accordance with applicable Australian requirements, including the Spam Act 2003 (Cth), where relevant.

8. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

Depending on the systems involved, safeguards may include:

  • Access restrictions.

  • Secure website and service-provider arrangements.

  • Password and account controls.

  • Internal handling procedures.

  • Monitoring for unusual activity.

  • Appropriate storage and disposal practices.

No electronic transmission or storage method can be guaranteed to be completely secure. Customers should also take care when using shared devices and should never send passwords or complete payment card credentials through ordinary email.

9. Retention of Personal Information

We retain information for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal and business requirements.

Order and financial records may need to be retained for accounting, tax, or dispute-resolution purposes. Customer-service correspondence may be retained to help resolve outstanding matters and maintain an appropriate record of previous communications.

When information is no longer required and no legal retention obligation applies, we will take reasonable steps to destroy or de-identify it.

10. Access and Correction Requests

Where the Privacy Act applies to our business and the relevant information, individuals may request access to personal information we hold about them and request correction of information that is inaccurate, incomplete, out of date, or misleading.

To make a request, contact:

Email: [email protected]
Subject: Personal Information Request

Please describe the information you wish to access or correct. We may request reasonable information to verify your identity and protect personal information from unauthorised disclosure.

We will respond in accordance with applicable legal requirements.

11. Privacy Complaints

If you believe we have mishandled your personal information, please contact us and explain your concern.

We will review the complaint, make reasonable enquiries, and provide a response outlining the outcome or any appropriate next steps.

If the Privacy Act applies and you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Website: https://www.oaic.gov.au/

12. Privacy Act Coverage

The Privacy Act 1988 (Cth) generally covers organisations with annual turnover above AUD $3 million, as well as certain smaller businesses that fall within statutory exceptions. These exceptions may include businesses that trade in personal information, provide health services, or perform certain government-related services.

Whether the Act applies to J F D INDUSTRIES PTY. LIMITED depends on the company's actual circumstances and activities. This policy describes our intended information-handling practices and should be read consistently with the privacy obligations that legally apply to the business. https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/small-business

13. Children's Privacy

Our website is intended for general retail customers and is not designed to knowingly collect personal information directly from children without appropriate authority or consent where required by law.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate steps.

14. Third-Party Websites

Our website may contain links to third-party websites or services. Those websites may have their own privacy policies, cookies, and data-handling practices.

We do not control the independent privacy practices of external websites. Please review their privacy information before submitting personal information to them.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website technologies, service providers, or legal obligations change.

The latest version will be published on our website with a revised effective date. Where required by law, we will provide additional notice or obtain consent before making a material change.

16. Contact Information

For privacy enquiries, access requests, correction requests, or complaints, contact:

J F D INDUSTRIES PTY. LIMITED
Trading as: Grand Box Lab
Attn: Suzie Johansen
14 Tanami Pl
Bow Bowing NSW 2566
Australia
Email: [email protected]
Website: https://www.grandboxlab.online/