Privacy Policy

Last updated: 27 August 2026

Gourmet Taste Creations Pty Ltd, trading as Lolli’s Artisan Soups (“Lolli’s,” “we,” “us” or “our”), operates this store and website, including its related information, content, features, tools, products and services (collectively, the “Services”).

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit or use our website, purchase our products, submit an enquiry or lead form, communicate with us, or otherwise interact with the Services.

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable. It does not include information that has been anonymised or de-identified so that it can no longer reasonably identify an individual.

Personal information we collect

The personal information we collect depends on how you interact with us and may include:

• Contact information, including your name, email address, telephone number, billing address and shipping address.

• Order and transaction information, including products viewed, added to your cart or wishlist, purchased, returned, exchanged or cancelled.

• Account information, including your username, password, preferences and account settings.

• Payment-related information, including payment method, payment confirmation, billing information and transaction details. Payments are processed by Shopify and applicable payment providers. We generally do not receive or store complete payment-card details.

• Communications, including information you provide when contacting us, submitting an enquiry, requesting support, entering a promotion, completing a lead form or communicating through social media.

• Marketing preferences, including whether you have agreed to receive promotional communications and how you interact with those communications.

• Device and technical information, including your device type, browser, operating system, network connection, IP address, cookie identifiers and other unique identifiers.

• Website-usage information, including pages and products viewed, searches, clicks, scrolling activity, time spent on pages, referring pages, cart activity, checkout activity and interactions with website features.

• Information you provide through reviews, surveys, competitions, promotions or other voluntary submissions.

• Inferences and audience information derived from your interactions with our Services, where permitted by applicable law.

How we collect personal information

We may collect personal information:

• Directly from you when you create an account, place an order, contact us, complete a form, subscribe to marketing, enter a promotion or otherwise provide information.

• Automatically when you visit or use the Services, including through cookies, pixels, server-side technologies and similar tools.

• From Shopify and other service providers that help us operate our store, fulfil orders, process payments, provide customer support, analyse performance or conduct marketing.

• From advertising, analytics, social-media and business partners.

• From publicly available sources where permitted by law.

• When another person provides your information to us, such as when purchasing a gift or arranging delivery on your behalf.

If you provide us with another person’s personal information, you should ensure that you have authority to do so and that the person understands how their information may be handled.

How we use personal information

We may use personal information to:

Provide and improve our Services

• Process and fulfil orders.

• Process payments and confirm transactions.

• Arrange shipping and delivery.

• Manage returns, refunds and exchanges.

• Create and administer customer accounts.

• Remember preferences and items of interest.

• Provide customer support.

• Respond to questions, enquiries and complaints.

• Improve our products, website, customer service and shopping experience.

• Recommend products that may be relevant to you.

Marketing and advertising

• Send marketing and promotional communications where permitted.

• Provide information about products, recipes, offers, promotions and events.

• Measure the effectiveness of our advertising.

• Understand how customers interact with our website and advertising.

• Create and manage advertising audiences.

• Show advertising that may be more relevant to your interests.

• Optimise advertising delivery and campaign performance.

Security and fraud prevention

• Authenticate accounts and transactions.

• Detect, investigate and prevent suspected fraud, misuse, security incidents or unlawful activity.

• Protect our customers, systems, business, rights and property.

• Maintain the security and integrity of the Services.

Legal and business purposes

• Comply with applicable laws, regulations and legal processes.

• Maintain appropriate business and transaction records.

• Enforce our terms, policies and agreements.

• Establish, exercise or defend legal claims.

• Complete audits, business planning and reporting.

• Manage a proposed or completed business sale, restructuring, merger or similar transaction.

Cookies and similar technologies

We and our service providers use cookies, pixels, tags, APIs and similar technologies to operate the website, remember preferences, understand website use, measure performance and support advertising.

These technologies may collect information such as:

• IP address and approximate location.

• Device, browser and operating-system information.

• Cookie and advertising identifiers.

• Referring and destination pages.

• Pages and products viewed.

• Searches and website interactions.

• Cart, checkout and purchase activity.

• Advertisement views and interactions.

• Dates and times of visits.

Some technologies are necessary for the website and checkout to function. Others support analytics, personalisation and advertising.

Where applicable, you can manage your choices through the privacy or cookie controls available on our website. You may also adjust your browser or device settings. Blocking certain technologies may affect website functionality and may not prevent all forms of online advertising.

TikTok advertising and data sharing

We use TikTok advertising technologies, including the TikTok Pixel, TikTok Events API and Advanced Matching, to measure advertising performance, understand how visitors interact with our website, build advertising audiences and improve ad delivery.

Depending on how you interact with the Services, information shared with TikTok may include:

• Pages and products viewed.

• Website searches.

• Cart and checkout activity.

• Purchase information, order identifiers, transaction value and currency.

• Device and browser information.

• IP address.

• Cookie and advertising identifiers.

• Name, email address, telephone number, city, state, postcode and country or region, where available.

Contact identifiers may be securely transformed or hashed before being shared. Hashing changes the information into a coded value for matching purposes, but it is still handled as personal information where applicable.

TikTok may use this information to:

• Attribute purchases and other actions to advertising.

• Measure and report advertising performance.

• Match website visitors with TikTok users.

• Create and manage advertising audiences.

• Improve and optimise advertisement delivery.

• Personalise advertising in accordance with TikTok’s own policies.

You can learn more about TikTok’s privacy practices in the TikTok Privacy Policy.

Shopify

Our store is hosted by Shopify. Shopify collects and processes information about your access to and use of the Services to provide and improve its platform, checkout, fraud-prevention, payment and commerce services.

Information submitted through our store may be transmitted to and processed by Shopify and its service providers. Shopify may also process information obtained from your interactions with our store and other Shopify merchants when providing features such as analytics, fraud prevention and personalised commerce services.

You can learn more in the Shopify Consumer Privacy Policy and exercise applicable Shopify privacy choices through the Shopify Privacy Portal.

When we disclose personal information

We may disclose personal information:

• To Shopify and providers that host or support our website and ecommerce operations.

• To payment processors and financial institutions involved in processing transactions.

• To delivery, logistics, warehousing and fulfilment providers.

• To IT, cloud-storage, security and fraud-prevention providers.

• To customer-service, email, SMS and communications providers.

• To analytics, advertising and marketing partners, including TikTok.

• To professional advisers, including accountants, auditors, insurers and legal advisers.

• To government agencies, regulators, courts or law-enforcement bodies where required or permitted by law.

• To another organisation in connection with a proposed or completed merger, acquisition, restructuring, financing, insolvency or sale of all or part of our business.

• When you direct us to disclose information or otherwise provide your consent.

• To our related entities or within our corporate group where reasonably necessary.

Our service providers and business partners may process information under their own privacy policies and terms.

Overseas disclosure and processing

Some of our service providers and business partners operate outside Australia. Personal information may therefore be disclosed to, stored in or accessed from other countries.

These countries may include Canada, Singapore, Malaysia, the United States and other countries in which Shopify, TikTok and their service providers or corporate affiliates operate.

Privacy protections in other countries may differ from those applying in Australia. Where required, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements. However, some overseas providers process information under their own privacy obligations and contractual arrangements.

Marketing communications

We may send you promotional emails, SMS messages or other marketing communications where permitted by law.

You can unsubscribe from promotional emails using the unsubscribe link contained in those emails. You may opt out of SMS marketing by following the instructions in the message or contacting us.

Opting out of marketing does not prevent us from sending non-promotional communications relating to orders, accounts, customer service, safety, legal notices or transactions.

Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Maintain customer accounts.

• Complete and document transactions.

• Provide the Services.

• Meet tax, accounting and legal obligations.

• Resolve disputes.

• Prevent fraud and security incidents.

• Enforce agreements.

• Establish, exercise or defend legal claims.

Retention periods vary according to the type of information, the purpose for which it was collected, applicable legal requirements and whether an ongoing business or legal need exists.

When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to legal and technical limitations.

Information security

We use reasonable administrative, technical and physical safeguards designed to protect personal information against loss, misuse, interference, unauthorised access, modification and disclosure.

No system or method of transmission is completely secure. We cannot guarantee absolute security, and information transmitted over the internet may be subject to risks outside our control.

You are responsible for maintaining the confidentiality of account credentials and should not share passwords or access details with other people.

Children’s privacy

The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information directly from children without appropriate authorisation.

If you are a parent or guardian and believe a child has provided us with personal information, please contact us so that we can review and, where appropriate, delete the information.

Accessing and correcting personal information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact us using the details below. We may need to verify your identity before completing the request.

In some circumstances, applicable law permits us to refuse access or correction. If we refuse a request, we will provide an explanation where required by law and explain any available complaint options.

Other privacy rights

Depending on where you live, you may have additional rights relating to your personal information. These may include rights to:

• Request deletion of personal information.

• Receive a portable copy of certain information.

• Object to or restrict certain processing.

• Withdraw consent where processing relies on consent.

• Opt out of certain targeted advertising or information-sharing activities.

• Authorise another person to submit a request on your behalf.

These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity or the authority of a representative before responding.

If you reside in the European Economic Area or United Kingdom, additional rights may apply under local data-protection laws. You may also have the right to lodge a complaint with your applicable supervisory authority.

Privacy enquiries and complaints

If you have a question, would like to access or correct your personal information, or wish to make a complaint about how we have handled it, please contact us using the details below.

Please provide enough information for us to understand and investigate your request. We will acknowledge and investigate privacy complaints and respond within a reasonable period.

If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner:

Website: www.oaic.gov.au
Telephone: 1300 363 992

Individuals outside Australia may also have the right to contact their relevant local privacy or data-protection authority.

Third-party websites and services

The Services may contain links to websites, social-media platforms or other services operated by third parties.

We do not control and are not responsible for the privacy, security, accuracy or practices of third-party services. You should review the privacy policies and terms of those services before providing personal information.

Information posted in public or semi-public areas, including reviews or social-media platforms, may be visible to other people and may be used outside our control.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technologies, information-handling practices or legal obligations.

When we update the policy, we will publish the revised version on our website and update the “Last updated” date. We will provide additional notice where required by law.

Contact us

For privacy enquiries, requests or complaints, please contact:

Gourmet Taste Creations Pty Ltd, trading as Lolli’s Artisan Soups
Address: 1/164 South Pine Road, Brendale QLD 4500, Australia
Email: orders@lollisartisansoups.com.au
Telephone: +61 427 001 599

For the purposes of applicable data-protection laws, Gourmet Taste Creations Pty Ltd is the entity responsible for the personal information described in this Privacy Policy.