Privacy policy

Privacy Policy version 1.1 – last updated 6 November 2026

This Privacy Policy explains how Lespa Pty Ltd ATF CCRV Family Trust T/as GroundGrabba, ABN 39 852 670 860 ("GroundGrabba", "we", "us") collects, uses, shares and protects your personal information when you visit or buy from groundgrabba.com.au (the "Site"), contact us, or buy from us in any other way. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Personal information we collect

When you order or try to order: your name, billing and delivery address, email, phone number, the items you order, and payment details. Card payments are processed by Shopify and its payment providers – we never see or store your full card number.

When you contact us: what you tell us through our contact form, phone or live chat, including any photos you send (for example for a return or warranty claim).

When you browse the Site (device information): browser type, IP address, time zone, cookies, pages and products viewed, referring websites or search terms, and how you click and browse. We collect this using cookies, log files, and web beacons, tags and pixels.

If you sign up for emails or SMS: your email address or mobile number and your marketing preferences.

2. How we use your personal information

  • to process, fulfil and deliver your order, and to issue invoices and confirmations
  • to handle returns, exchanges, warranty claims and enquiries
  • to communicate with you about your order or enquiry
  • to check for risk or fraud (including IP checks)
  • to improve the Site and understand how it is used
  • to send marketing, promotions and product updates – only if you have agreed; you can unsubscribe at any time
  • to meet our legal, tax and accounting obligations

3. Who we share it with

We share personal information only with the businesses that help us run our store, and only what they need:

  • Shopify – our online store platform and checkout (Shopify privacy policy).
  • Our warehouse and logistics partner – Specialised Logistics Australia Pty Ltd, which stores, packs and dispatches our orders using its cloud warehouse system. They receive your name, delivery address, phone, email and the items ordered, and use them only to fulfil our orders.
  • Carriers – Australia Post and StarTrack (and any other carrier we use) receive your name, delivery address, phone and email for delivery and tracking.
  • Accounting – Xero, for invoices and our financial records.
  • Email, SMS and chat services – for example Klaviyo (email and SMS marketing) and Tidio (live chat), to send messages you have agreed to and to answer your questions.
  • Analytics and advertising – Google Analytics and advertising platforms such as Google and Meta (Facebook/Instagram), to understand Site use and measure ads (Google privacy policy; Google Analytics opt-out).
  • Legal requirements – where required or authorised by law, such as to respond to a lawful request or prevent fraud.

We never sell your personal information.

4. Overseas storage

Some of these providers (such as Shopify, Google, Klaviyo, Tidio and Xero) store data on servers outside Australia, including in the United States, Canada and other countries. We use reputable providers that protect personal information.

5. Advertising and cookies

We may use your browsing information to show you ads we think are relevant. You can turn off cookies in your browser, and you can manage ad settings with Facebook and Google. We do not change how we collect data when a browser sends a "Do Not Track" signal.

6. Email and SMS marketing

If you sign up, we may send emails or texts about promotions, special offers, abandoned carts and order updates. Signing up is not a condition of purchase. To opt out, use the unsubscribe link in any email or reply STOP to any text. Your consent and opt-in details are never sold.

7. Keeping your information safe and how long we keep it

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. We keep order and invoice records for as long as tax and accounting law requires (generally 5 years) and other information only for as long as we need it, then delete or de-identify it.

8. Access, correction and deletion

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it (except records we must keep by law). Contact us using the details below and we'll respond within 30 days. If you are in the European Union or United Kingdom, you also have rights under the GDPR, including to restrict or object to processing and to data portability.

9. Children

The Site is not intended for people under 16.

10. Complaints

If you have a privacy concern, please contact us first and we'll try to resolve it. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page.

12. Contact us

Lespa Pty Ltd ATF CCRV Family Trust T/as GroundGrabba, ABN 39 852 670 860
PO Box 1114, Kingscliff NSW 2487
Phone: 1300 988 655 (Mon–Fri 9:00am–4:00pm, excluding public holidays)
Contact us: contact form

Privacy Policy version 1.1 – last updated 6 November 2026.