Privacy policy

Updated 2 November 2026.

Kandui Surf Co. (ABN 80 556 940 497), Sippy Downs, Queensland, operates kandui.au. Contact info@kandui.au about this policy.

Information and how we use it

We collect the contact, delivery, account, order and support details you provide. Shopify, payment providers and website technologies also process transaction, payment, device, IP address, browsing and cookie information. We use relevant information to process orders, payments and delivery, provide support, prevent fraud, maintain required records and improve the store. Without necessary details, we may be unable to fulfil an order or enquiry.

Sharing and overseas processing

We share relevant information with Shopify, payment and delivery providers, technology, analytics and marketing services, advisers and authorities where required or permitted by law. Providers may process information outside Australia, including in Canada, the United States, New Zealand and Singapore. We take steps required by applicable law for overseas disclosures.

Where enabled, Shopify Network Intelligence uses information from our store and other Shopify merchants to improve services, personalisation and advertising. See Shopify’s consumer privacy policy for its handling practices and privacy choices.

Cookies, marketing and security

Cookies support checkout, security and preferences and may support analytics or advertising. Manage cookies through your browser and any available store privacy controls; restricting essential cookies can affect shopping.

We send promotional email or SMS with consent as required by law. Unsubscribe through the message or contact us; requests are actioned within five working days. Order and service messages may continue.

We take reasonable steps to protect information and keep it only for business or legal needs, then securely destroy or de-identify it where required.

Access, correction and complaints

Email info@kandui.au to request access, correction or deletion, or raise a privacy complaint. We may verify your identity; legal recordkeeping requirements may limit deletion. We respond within a reasonable time. If unresolved, you may contact the OAIC where it has jurisdiction.

We comply with applicable privacy laws, including the Australian Privacy Act and Australian Privacy Principles where they apply. We update this page when our practices change.