Privacy policy

PRIVACY POLICY

Last updated: 11 October 2026

Drop Store Collectables (ABN 11 726 696 418) ("we", "us", "our") operates dropstore.com.au. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. We handle personal information in line with the Australian Privacy Principles.

What We Collect

When you browse, order or sign up, we may collect:

• Name
• Email address
• Shipping and billing address
• Phone number, if you give us one
• Order and payment history (card details are handled by our payment providers, never stored by us)
• Email marketing preferences and whether you opened or clicked our emails
• Product reviews you choose to submit
• Technical and usage information: IP address, device and browser, pages viewed, referring site, and how you move through and interact with our pages

How We Use It

• To process, fulfil and deliver your orders
• To send order confirmations, dispatch and tracking updates, and pre-order release updates
• To answer your enquiries
• To send marketing emails, where you have asked us to
• To measure and improve the store, including understanding which pages work and which do not
• To advertise our products, including measuring which ads lead to sales
• To detect and prevent fraud, and to meet our legal and tax obligations

Analytics, Session Recording and Advertising

We want to be specific about this rather than hide it under "cookies".

• Microsoft Clarity records how visitors interact with our pages, including mouse movement, scrolling, clicks and taps, and produces session replays and heatmaps. We use it to find things that are broken or confusing. It is not used to identify you personally, and we do not use it to watch individual customers.
• PostHog records how visitors use our pages, including session replays, heatmaps, clicks and scrolling, and it also runs occasional on-site surveys and page experiments. It builds a profile per visitor so repeat visits can be linked. We use it to work out what is confusing or broken. PostHog is served through edge.dropstore.com.au, a subdomain of this site that forwards to PostHog. We mention that because it means blocking third-party cookies alone will not stop it.
• Google Analytics and Google Ads measure site traffic and advertising performance, including which ads and searches lead to orders.
• These tools set cookies and similar identifiers. You can clear or block cookies in your browser settings, and you can opt out of personalised Google advertising through your Google account ad settings. Some parts of the store may not work properly with cookies disabled.

Who We Share It With

We use these service providers to run the store. Each receives only what it needs, and each has its own privacy policy:

• Shopify (e-commerce platform and hosting)
• Shopify Payments, Shop Pay, Apple Pay, Google Pay, PayPal and Afterpay (payment processing and instalment options)
• Australia Post (delivery and tracking)
• Klaviyo (marketing and transactional email)
• Judge.me (product reviews)
• Microsoft Clarity (site analytics and session replay)
• PostHog (product analytics, session replay, heatmaps, surveys and on-site experiments)
• Google (analytics and advertising)

We may also disclose information where the law requires it, or to protect our legal rights.

What We Do Not Do

• We do not sell your personal information
• We do not disclose your information to unrelated third parties for their own marketing
• We do not send marketing emails to people who have not asked for them
• We do not store your card details

Overseas Disclosure

Our providers listed above store and process data on servers outside Australia, including in the United States and the European Union. By using the store you agree to your information being handled overseas by those providers under their own privacy terms.

Marketing: How to Opt Out

Every marketing email has an unsubscribe link at the bottom, and it works immediately. You can also email contact@dropstore.com.au and ask us to remove you. Opting out of marketing does not stop order and delivery emails, which we have to send to complete your order.

How Long We Keep It

We keep order and transaction records for at least seven years, because Australian tax law requires it. Marketing contact details are kept until you unsubscribe or ask us to delete them. Analytics and session data are kept for the retention period of the provider, which for Microsoft Clarity and Google Analytics is set in months rather than years.

Data Security

The store runs on Shopify's PCI-compliant infrastructure and traffic is encrypted in transit with TLS. No system is perfect. If a data breach ever occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

Your Rights

You can ask us to:

• give you a copy of the personal information we hold about you
• correct anything that is wrong or out of date
• delete your information, where we are not required to keep it
• stop analytics and session recording for you, and delete any recordings we hold

Email contact@dropstore.com.au and we will respond within 30 days. We may need to verify who you are first.

Children

Our store is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us their details, email us and we will delete them.

Complaints

If you think we have mishandled your personal information, email contact@dropstore.com.au and tell us what happened. We will investigate and reply in writing. If you are not satisfied with our response, you can take your complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to This Policy

We may update this policy. Changes are posted on this page with a new revision date at the top.

Contact Us

Drop Store Collectables, ABN 11 726 696 418
Email: contact@dropstore.com.au
PO Box 1914, Taylors Lakes VIC 3038, Australia