Privacy policy

This Privacy Policy explains how Joy.io Pty Ltd, trading as Chaandbali ("we", "us", "our"), collects, uses and discloses your personal information when you visit chaandbali.com (the "Site") or buy from us. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Key points

We collect only what we need to take and deliver your order, provide support and, with your consent, send you marketing. We never see or store your full card details. You can ask to access or correct your information, or unsubscribe from marketing, at any time by emailing info@chaandbali.com.

1. Who we are and how to contact us

Chaandbali is a brand of Joy.io Pty Ltd (ABN 26 650 140 211), the holding company that owns and operates this Site, at 7 Malua Road, Bonnie Brook VIC 3335, Australia. For privacy questions, requests or complaints, email info@chaandbali.com. See also our Company Information page.

2. Information we collect

  • Order information: your name, billing and shipping address, email address, phone number and order details. Payment is handled by Shopify and its payment partners; we do not receive or store your full card number.
  • Account information: if you create an account, your login details and saved addresses.
  • Customer support information: what you tell us when you email or message us, including photos or videos of an item you report as faulty.
  • Device and usage information: your IP address, browser type, time zone, cookie information, the pages and products you view, search terms and how you interact with the Site. This is collected automatically using cookies, log files, pixels and similar technologies.
  • Marketing preferences: your email address and whether you have subscribed to or unsubscribed from our emails.

3. Why we collect it

  • To process payments, arrange shipping and deliver your order, and send order confirmations, invoices and tracking.
  • To provide customer support and handle returns, refunds and complaints.
  • To screen orders for fraud and protect our customers and business.
  • To improve the Site and understand how it is used.
  • To send you news, offers and new arrivals where you have subscribed or otherwise consented. You can unsubscribe at any time using the link in any email.
  • To comply with our legal obligations.

4. Who we share it with

We share personal information with service providers who help us run the Site and fulfil orders, only as needed to do their job. These include:

  • Shopify, which hosts our store and processes payments and fraud screening (Shopify Privacy Policy).
  • Shipping and delivery carriers.
  • Email marketing, reviews, customer chat and video providers we use on the Site, such as Klaviyo, Loox and Shopify Inbox.
  • Analytics and advertising providers, such as Google and Meta (see section 6).
  • Professional advisers, and government or law enforcement bodies where we are required or permitted by law to do so.

We do not sell your personal information.

5. Overseas disclosure

Some of our service providers store or process information outside Australia, including in the United States, Canada and Ireland. Where we disclose your information overseas, we take reasonable steps to make sure the recipient handles it in a way that is consistent with the Australian Privacy Principles.

6. Cookies, analytics and advertising

We use cookies and similar technologies to keep your cart working, remember your preferences, understand how the Site is used and show you relevant ads. Cookies used by our Shopify store are listed at shopify.com/legal/cookies.

  • We use Google Analytics to understand Site usage. You can opt out at tools.google.com/dlpage/gaoptout.
  • We share information about how you use the Site, your purchases and your interaction with our ads with advertising partners such as Meta, in some cases using cookies and pixels.
  • We may use Shopify Audiences to show relevant ads to people who may be interested in what we offer.

You can control targeted advertising through your Facebook ad settings, Google ad settings or the Digital Advertising Alliance opt-out, and by adjusting your browser's cookie settings. Blocking cookies may affect how the Site works. We do not respond to "Do Not Track" signals.

7. Marketing

We send marketing emails and messages only with your consent, and every message includes a way to unsubscribe. Unsubscribing does not stop order and service messages.

8. Security and retention

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. Card payments are encrypted and handled by Shopify's payment systems. We keep order records for as long as needed for our business and legal obligations, including tax and accounting requirements, and then delete or de-identify them.

9. Access, correction and deletion

You can ask us to access the personal information we hold about you, correct it, or delete it where the law allows. Email info@chaandbali.com. We may need to verify your identity first and will respond within a reasonable time.

10. Complaints

If you think we have breached the Australian Privacy Principles, email info@chaandbali.com with the details. We will acknowledge your complaint within 2 business days and respond as soon as we can. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Customers outside Australia

If you are in the European Economic Area or United Kingdom, we process your information to perform our contract with you, on the basis of your consent, for our legitimate interests (such as fraud prevention and improving the Site) and to meet legal obligations, and you may have additional rights of access, portability, correction, erasure and objection. If you are in California, you may have the right to know what personal information we hold about you and to ask us to correct or delete it. To exercise these rights, contact us at info@chaandbali.com.

12. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or the law. The latest version is always on this page. Last updated: 29 September 2026.