Privacy policy

1. About this policy

Holy Grail Box Co. respects your privacy. This policy explains what personal information we collect, why we collect it, how we use and disclose it, and the choices available to you.

2. Information we collect

We may collect your name, email address, phone number, billing and delivery addresses, subscription and order details, chosen sports, communications with us, and information needed to provide customer support.

When you use the site or contact form, we may also receive technical information such as your IP address, approximate country, city and region, timezone, browser, device platform, language, referring page, interactions with the site and request identifiers. We use this information for analytics, improving the site, security, troubleshooting, fraud prevention and customer support.

We use PostHog session recordings to see how visitors navigate, click and scroll on the site so we can diagnose problems and improve the experience.

Payments are processed securely by a third-party payments provider. We do not receive or store your full payment-card number.

3. How we use information

We use personal information to process payments, manage subscriptions, select and deliver boxes, communicate about orders, send service emails, respond to enquiries, prevent misuse, improve the site and meet our legal and accounting obligations.

We do not sell personal information or use it for unrelated third-party advertising.

4. Who we share it with

We disclose information only where reasonably needed to operate the service, including to trusted providers that help us process payments, manage subscriptions, analyse site usage, send service emails, host and secure the website, and deliver orders.

Some providers may process information outside Australia. Their handling of information is also governed by their own privacy terms.

5. Retention and security

We retain information only for as long as reasonably necessary for the purposes described above, including customer support, fraud prevention, tax, accounting and legal requirements. We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security.

6. Access, correction and deletion

You may ask to access or correct the personal information we hold about you, or request deletion where we are not required to retain it. Contact us here. We may need to verify your identity before acting on a request.

7. Questions and complaints

If you have a privacy question or complaint, contact us here. We will investigate and respond within a reasonable time.

8. Changes

We may update this policy as our practices or legal obligations change. The current version and effective date will always appear on this page.