Privacy policy

Who we are

This policy explains how Morabel Pty Ltd (ABN 52 693 507 452, "Morabel", "we", "us") collects, uses and shares your personal information when you visit morabelco.com, buy from us, subscribe to refills, contact us, or receive our marketing. Our store runs on Shopify, and we use a small number of other services to process payments, manage subscriptions, send email and ship orders; each is named below.

We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles, and marketing messages in line with the Spam Act 2003. By using our website or buying from us you accept the practices described here.

Last updated: 31 October 2026.

Information we collect

We collect only what we need to sell to you, deliver to you and answer you.

Contact details: name, email address, phone number, shipping and billing address.
Order and subscription details: what you bought, when, at what price; your refill subscription schedule, skips and cancellations; delivery tracking.
Payment details: handled by Shopify Payments, PayPal, Apple Pay, Google Pay or Shop Pay. We see the payment type, the last four digits of a card and the transaction result. We never see or store your full card number.
Account details: your email and login activity if you create a customer account or manage a subscription.
Communications: what you send us through the contact form, email or social media, including any order number or photos you include for a warranty claim.
Device and usage data: IP address, browser and device type, pages viewed, products viewed, items added to cart, and how you reached our site, collected through cookies and similar technologies.
Marketing preferences: whether you have opted in to email or SMS, and how you interact with our emails (opens and clicks).
Trade applications: business name, ABN, contact details and store information if you apply through our wholesale page.

We collect this directly from you (checkout, forms, emails), automatically when you use the site (cookies and tracking, see below), and from the services that process orders and payments on our behalf. We do not collect sensitive information such as health details, and we ask that you do not send it to us.

How we use your information

To process and deliver orders, bill subscriptions, and send order, shipping and subscription notices.
To answer enquiries, handle returns, warranty claims and complaints.
To send marketing emails and SMS, only where you have opted in, and to show you our ads on Meta and Google, including based on products you viewed or left in your cart.
To understand how the site is used and improve it: which pages are read, where people drop off at checkout, which products sell.
To keep the store secure, detect fraud and failed payments, and meet our legal and tax obligations (for example keeping order records for Australian tax purposes).
To assess wholesale applications.

We do not sell your personal information.

Subscriptions

If you choose Subscribe & save, your refill subscription is managed by Skio, a subscription service that runs inside our Shopify store. Skio processes your name, email address, shipping address, subscription schedule and order history so that a refill capsule is ordered and charged every three months, and so that you can skip, pause, change the address or cancel from your account.

Your payment method is stored securely by Shopify, not by Skio or by us, and is used for each recurring charge with the same protections as your first purchase. You will receive an email before each renewal, and a confirmation each time a renewal order is placed. You can cancel at any time through the Manage subscription link in the website footer or in your customer account; cancelling stops future charges and future processing of your details for the subscription.

Marketing emails and SMS

We send marketing emails, and SMS where offered, only if you opt in, for example by ticking the box at checkout or on our contact form, or by entering your email in the newsletter field. Marketing is sent through Klaviyo, which stores your contact details, your consent record, your order history and how you interact with our emails so we can send relevant messages (such as a reminder when your refill is due).

Every marketing email has an unsubscribe link and every SMS tells you how to opt out; opting out takes effect within five business days as required by the Spam Act. You will still receive non-marketing messages we have to send, such as order confirmations, shipping updates and subscription renewal notices.

Cookies and tracking

Our site uses cookies and similar technologies for three purposes:

Running the store (necessary): Shopify cookies that keep your cart, remember your login and secure checkout. The site does not work without them.
Analytics: Shopify analytics and Google Analytics tell us which pages are visited and where people leave, in aggregate.
Marketing: the Meta Pixel and Google Ads tags let us measure our advertising and show ads to people who visited our site or viewed a product; Klaviyo's onsite tracking records when a known subscriber is active on the site or views a product so we can send a relevant email.

You can control cookies in your browser settings, opt out of Meta's ad targeting in your Facebook or Instagram ad preferences, use Google's Ads Settings to limit personalised ads, and opt out of Google Analytics with Google's browser add-on. Blocking non-essential cookies does not affect your ability to buy from us.

We share personal information only with the services that help us run the store, and only what each one needs. Each acts under its own privacy policy and our instructions.

Service	What it does for us	Information it handles	Where data is stored
Shopify	Hosts the store, checkout and customer accounts	Everything you enter on the site	Canada, United States, Ireland
Shopify Payments, PayPal, Apple Pay, Google Pay, Shop Pay	Process payments	Payment details, billing name and address	Payment provider's own systems (card data never reaches us)
Skio	Manages refill subscriptions	Name, email, address, subscription schedule, order history	United States
Klaviyo	Sends marketing email and SMS; tracks site activity of subscribers	Contact details, consent, order history, email engagement, products viewed	United States
Meta	Advertising and measurement (Meta Pixel)	Device identifiers, pages and products viewed, purchases	United States
Google	Analytics and advertising	Device and usage data	United States
Australia Post, via the SellerDash shipping app	Prints labels and delivers parcels	Name, delivery address, phone, email for tracking notices	Australia
Microsoft 365	Hosts our email, including support@morabelco.com	Anything you email us	Australia

We may also disclose information where the law requires it, to enforce our terms, to protect against fraud, or as part of a sale or restructure of the business (in which case the buyer is bound by this policy).

Overseas disclosure, security and retention

Several of the services above store data outside Australia, mainly in the United States, Canada and Ireland. We choose established providers that commit contractually to protecting personal information to a standard comparable with the Australian Privacy Principles, and we share only what each service needs.

Shopify secures checkout with TLS encryption and is PCI DSS compliant; we never hold card numbers. Access to customer records is limited to the people at Morabel who need it to fulfil orders and answer you, through password-protected accounts with two-factor authentication. No internet service is perfectly secure, so please contact us promptly if you believe your details have been misused.

We keep order and subscription records for seven years to meet Australian tax and consumer-law obligations, marketing data until you unsubscribe plus a short suppression record so we do not email you again, and support correspondence for two years. Analytics data is kept in aggregate.

Your rights and choices

Under the Australian Privacy Principles you can ask us to:

Access the personal information we hold about you.
Correct anything that is inaccurate, out of date or incomplete.
Delete your information, except records we must keep by law (such as order history for tax purposes).
Provide a copy of your information in a usable format.
Stop marketing at any time, using the unsubscribe link, replying STOP to an SMS, or emailing us.
Manage your subscription yourself through your customer account or the Manage subscription link.

Email support@morabelco.com with the request and the email address you used with us. We may ask you to confirm your identity before we act, we will not treat you differently for making a request, and we respond within 30 days. For rights over data that Shopify processes for its own purposes, you can also use the Shopify Privacy Portal.

Complaints

If you think we have mishandled your information, email support@morabelco.com with the details. We will acknowledge the complaint within five business days and aim to resolve it within 30. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

Children

Our products and website are intended for adults. We do not knowingly collect personal information from anyone under 18; if you believe a child has given us their details, contact us and we will delete them.

Changes to this policy

We will post any changes on this page and update the date at the top. If a change materially affects how we use your information, we will let you know by email before it takes effect.

Contact

Morabel Pty Ltd · 108D Albert Street, Osborne Park WA 6017 · support@morabelco.com