Privacy Policy

Last updated: 20 September 2026

Chameleon Coffee ("we", "us") sells refurbished and new coffee machines, coffee beans and accessories, and provides coffee machine repairs and servicing, through chameleoncoffee.au, chameleon-coffee.net and in person. We respect your privacy and handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). This policy explains what we collect, why, who we share it with, and your choices.

1. Personal information we collect

  • Contact details – name, email, phone number, billing and delivery addresses.
  • Order and payment details – items purchased, order history, returns and warranty claims. Card payments are processed by Shopify Payments, PayPal or Afterpay; we do not see or store your full card number.
  • Repair and service details – your machine's make, model and serial number, fault descriptions, photos or videos you send, and booking details.
  • Enquiries – information you give us through contact, quote, back-in-stock or office enquiry forms, email, phone, social media or chat.
  • Account and preferences – subscription (Roasters Club) details and marketing preferences.
  • Device and usage information – IP address, browser and device type, pages viewed, items added to cart, and how you arrived at our sites, collected through cookies and similar technologies.

You don't have to give us personal information, but if you don't we may not be able to process an order, repair or enquiry. You can browse our sites without identifying yourself.

2. How we collect it

Directly from you (when you order, book a repair, fill in a form, contact us or visit us), automatically through our websites, and from service providers who act for us (for example payment, delivery and review providers).

3. Why we use it

  • To process and deliver orders, subscriptions, returns, refunds and warranty claims.
  • To book, carry out and follow up repairs and servicing.
  • To answer enquiries and provide customer support.
  • To send order, shipping and service updates.
  • To send marketing emails or texts where you have agreed or where the law allows. Every marketing message includes a way to unsubscribe, in line with the Spam Act 2003.
  • To measure and improve our websites and advertising, including showing relevant ads on platforms such as Google, Facebook and Instagram.
  • To prevent fraud, keep our systems secure and meet our legal obligations.

4. Cookies, analytics and advertising

Our websites use cookies and similar tools from Shopify, Google (Analytics, Ads, Tag Manager and Merchant Center), and Meta (Facebook and Instagram pixel and Conversions API). These help us understand how our sites are used, measure ad performance and show you relevant ads. Where we send information to advertising platforms it is limited to what's needed for measurement, and email addresses or phone numbers are hashed before being shared.

We also use Microsoft Clarity, an analytics service provided by Microsoft Corporation, to understand how visitors use our sites. Clarity records the pages you view, clicks, taps, scrolling and mouse movement, the page that referred you, an approximate location derived from your IP address, and your browser and device type, and reconstructs this as session recordings and aggregated heatmaps so we can find broken pages, confusing layouts and checkout problems. Microsoft automatically masks the contents of fields commonly used for sensitive input. We do not use Clarity to collect payment card details or passwords, we do not sell this information, and we do not use it to identify you personally. Microsoft processes it on our behalf and also for its own purposes as set out in the Microsoft Privacy Statement at privacy.microsoft.com/privacystatement.

You can control cookies in your browser settings, adjust ad preferences in your Google and Meta accounts, opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and block analytics and session-recording scripts with a browser extension. Blocking these technologies will not stop you browsing our sites or placing an order.

5. Who we share it with

  • Our ecommerce and website providers (Shopify, WordPress hosting) and email, booking and customer management tools.
  • Payment providers (Shopify Payments, PayPal, Afterpay), who handle payment information under their own privacy policies.
  • Couriers and freight companies, to deliver or collect your order or machine.
  • Google, Meta and Microsoft for analytics and advertising, and Google Customer Reviews if you choose to take part in a post-purchase survey.
  • Professional advisers, and government or law enforcement bodies where required or authorised by law.

We don't sell your personal information.

6. Overseas disclosure

Some of our service providers store or process information outside Australia, including in the United States, Canada, Ireland and other countries where Shopify, Google, Meta, Microsoft and PayPal operate. We take reasonable steps to use providers that protect personal information to a standard comparable to the Australian Privacy Principles.

7. Security and retention

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access or disclosure, including secure platforms, access controls and limiting access to people who need it. No method of transmission or storage is completely secure. We keep information only as long as we need it for the purposes above and to meet legal, tax and warranty record-keeping obligations, then delete or de-identify it.

8. Access, correction and your choices

You can ask to access or correct the personal information we hold about you, or ask us to stop sending marketing, by contacting us. We'll respond within a reasonable time, usually within 30 days. We may need to verify your identity first, and in limited cases the law allows us to refuse access – if so, we'll tell you why.

9. Complaints

If you have a concern about how we've handled your personal information, please contact us first and we'll try to resolve it within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992.

10. Children

Our products and services are not directed at children and we don't knowingly collect personal information from anyone under 16.

11. Changes

We may update this policy from time to time. The current version will always be on our website with the date it was last updated.

12. Contact us

Chameleon Coffee
10 Farmers Way, Point Cook VIC 3030, Australia
Email: chameleoncoffee@gmail.com
Phone: 0431 852 898

Shopify, which hosts our online store, also processes some information as described in the Shopify Consumer Privacy Policy.