Privacy policy

 

Last updated: 28/10/2026

About this policy

This Privacy Policy explains how Morgan & Co Pty Ltd ACN 657 424 836 ("Morgan & Co", "we", "us" or "our") collects, uses, stores and discloses personal information. We are committed to handling personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website, making an enquiry, booking an appointment or buying from us, you acknowledge that your personal information will be handled as described in this policy.

What personal information we collect

The information we collect depends on how you deal with us. It may include:

  • Contact details, such as your name, email address, phone number and postal or delivery address.

  • Enquiry and booking details, such as the appointment or service you book, your preferred date and time, your budget, ring size, design preferences and anything else you tell us in a form, email, call or consultation. When you book online, your name, email address, phone number, booking details and how you found us are saved in our enquiry records so we can follow up with you and see which of our marketing works.

  • Order and payment details, such as the products you buy, billing and delivery details and transaction records. Card payments are processed by our payment providers and we do not store your full card number.

  • How you found us, such as the ad, search engine, social media site, email or website that brought you to our website (see "Website tracking" below).

  • Website and device information, such as pages visited, links clicked, browser and device type, IP address and approximate location.

  • Recruitment information, if you apply for a role with us, such as your resume, qualifications, work history and referees.

We will not ask for sensitive information (such as health information) unless it is needed, you consent, or the law allows or requires it.

How we collect personal information

We collect personal information directly from you when you:

  • submit an enquiry or contact form, or book an appointment online;

  • place an order or visit our studio;

  • email, call or message us, including through social media;

  • subscribe to our emails or enter a competition or promotion.

We also collect some information automatically when you use our website, using cookies, pixels, local storage and similar technologies, and we may receive information from our advertising and analytics partners.

Website tracking, cookies and how you found us

Our website uses cookies, pixels, local storage and similar technologies, provided by us and by partners including Shopify, Google (Google Analytics and Google Ads) and Meta (Facebook and Instagram). These help our website work, show us how visitors use it, measure the results of our advertising and show you relevant ads on other sites and apps. This includes showing you ads for products you looked at on our website, such as a ring you viewed, using our product catalogue with Meta and Google.

How you found us. When you visit our website we record how you arrived, such as the ad, campaign, search engine, social media site or website you came from, plus the page you landed on, the date and the number of visits. This is stored in your browser for up to 90 days. If you send us an enquiry or make a booking, this information is attached to it so we can understand which of our marketing is working. We do not use it to identify you before you contact us.

You can control this by:

  • clearing your browser data for our website, or blocking or deleting cookies in your browser settings (some parts of the website may not work as intended);

  • using the Google Analytics Opt-out Browser Add-on;

  • managing ad preferences in your Google account (Ads Settings) and in your Facebook and Instagram settings (Ad Preferences).

Why we use personal information

We use personal information to:

  • respond to enquiries and manage consultations and bookings;

  • design, make, sell and deliver our products and services, and provide aftercare;

  • process payments and keep business records;

  • understand which marketing brings people to us and improve our website, advertising and services;

  • create advertising audiences, such as showing ads to people who have visited our website or viewed our products, and finding new people similar to our customers;

  • send you marketing, news and offers where you have agreed or the law allows (you can unsubscribe at any time);

  • run competitions and promotions;

  • assess job applications;

  • meet our legal obligations.

We will only use your information for another purpose if you consent or the law allows it.

Who we share personal information with

We do not sell your personal information. We share it only where needed with:

  • service providers who help us run our business, such as our website and online store platform (Shopify), our online booking system (Tipo), our customer relationship management system (Pipedrive), cloud storage, calendar and email providers (Google Workspace), payment providers, email marketing providers, couriers and IT providers;

  • artificial intelligence (AI) and automation tools, used by us and by our marketing agency to manage our advertising, keep enquiry records up to date, run reporting dashboards, prepare reports and help draft content;

  • advertising and analytics partners, such as Google and Meta, including customer lists in a scrambled (hashed) form, as explained under Customer lists and advertising audiences;

  • our marketing agency, which helps us manage our website, advertising and enquiry reporting;

  • our related companies;

  • professional advisers, such as accountants, lawyers and insurers;

  • government bodies or others where required or authorised by law.

Customer lists and advertising audiences

We may share the email addresses and phone numbers of our customers, and of people who have enquired or booked with us, with Meta (Facebook and Instagram) and Google. Before this information leaves our systems it is turned into a scrambled code (this is called hashing), so these partners cannot read it. They use it only to match it with people who already use their services, so that we can show our ads to past customers and people who have enquired, avoid showing ads to people who have already booked, and find new people with similar interests to our customers (known as lookalike or similar audiences).

Meta and Google handle this information under their business terms, which limit how they can use it. You can ask us at any time not to include your details in these lists by emailing us at the address below. You can also manage the ads you see in your Facebook, Instagram and Google ad settings.

Overseas storage and disclosure

Some of our service providers store or process information outside Australia, including in the United States, Canada, Europe and other countries where they or their data centres operate. When we use overseas providers we take reasonable steps to make sure they handle your information in a way that is consistent with the Australian Privacy Principles. This includes the artificial intelligence (AI) and automation tools described above, such as ChatGPT (provided by OpenAI in the United States). We set up these tools so that your personal information is not used to train their general AI models.

Storage and security

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, change or disclosure, including using reputable providers, access controls and secure connections. No method of sending or storing information over the internet is completely secure, so we cannot guarantee it. We keep personal information only for as long as we need it for the purposes above or as required by law, then we delete or de-identify it. We also take reasonable steps to make sure the personal information we hold is accurate, complete and up to date. Please let us know if your details change.

Dealing with us anonymously

Where practical, you can browse our website or ask general questions without telling us who you are. If you do not give us the information we need, we may not be able to provide a booking, product or service.

Government identifiers

We do not use government related identifiers (such as a Medicare or tax file number) to identify you.

Access and correction

You can ask to access the personal information we hold about you or ask us to correct it. Please contact us using the details below. We may need to confirm your identity first. We will respond within a reasonable time and will not charge you to make a request, although we may charge a reasonable fee to cover the cost of providing access in some cases.

Marketing

You can opt out of marketing emails at any time by using the unsubscribe link in any email or by contacting us. You can also ask us not to include your details in the customer lists described under Customer lists and advertising audiences, and we will leave you out of future uploads.

Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details below and we will try to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

Links to other websites

Our website may link to other websites. We are not responsible for their privacy practices, so please read their privacy policies.

Changes to this policy

We may update this policy from time to time by posting the new version on our website. The version on our website applies from the date it is posted.

Contact us

Morgan & Co Pty Ltd
8/2 Main Street, Buderim QLD 4556
Email: morgan@morgancojewellery.com.au