Privacy policy

Last updated: July 6, 2026

Pebbly Path ('we', 'us', 'our') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit www.pebblypath.com.au, purchase our products, apply for a wholesale account or otherwise interact with us. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Who We Are

Pebbly Path
247 - 249 Robertson Road
Mudgee NSW 2850
Australia
Email: hello@pebblypath.com.au
Website: https://www.pebblypath.com.au

Information We Collect

We collect personal information that is reasonably necessary to operate our business, fulfil orders, manage customer and wholesale relationships, provide customer support, improve our products and services, and comply with our legal obligations. We only collect personal information by lawful and fair means.

·       Retail customers: name, email address, phone number, billing and delivery addresses, order history and customer support enquiries.

·       Wholesale customers: business name, ABN, trading name, website, social media accounts, business address, job title and other information relevant to assessing and managing wholesale accounts.

·       Technical information such as IP address, browser type, device information, cookies and website usage data.

·       Payment information is processed securely by our payment providers. Pebbly Path does not store full payment card details.

How We Collect Information

We collect information directly from you when you place an order, contact us, subscribe to marketing communications, apply for a wholesale account or otherwise interact with us. We also collect information automatically through cookies and analytics technologies and may receive business information from trusted third-party providers where permitted by law.

How We Use Your Information

·       Process and fulfil orders.

·       Manage customer and wholesale relationships.

·       Respond to enquiries and provide customer support.

·       Improve our products, services and website.

·       Send marketing communications where permitted by law.

·       Meet legal, regulatory and taxation obligations.

·       Prevent fraud and maintain accurate customer records.

HubSpot CRM and Data Enrichment

Pebbly Path uses HubSpot to manage customer relationships, wholesale enquiries and business communications.

HubSpot may help us maintain accurate business contact and company records by supplementing existing information with trusted commercial data providers and publicly available business information relating to businesses and business contacts. This enrichment primarily supports our wholesale enquiries and business relationships, although it may also be used to maintain accurate records for other customer interactions where appropriate.

Where emails are logged to HubSpot, existing contact information may be updated using information contained within those communications to improve the accuracy of our CRM records.

We use enriched information to:

·       maintain accurate customer records

·       respond to enquiries

·       manage wholesale relationships

·       improve customer service

·       personalise communications where appropriate

·       support our sales and marketing activities

We do not use enriched information to make automated decisions that have legal or similarly significant effects on individuals.

Marketing Communications

We use Klaviyo and HubSpot to send marketing communications. We will only send marketing emails where you have consented or where otherwise permitted by law. Every marketing email contains an unsubscribe link. We comply with the Spam Act 2003 (Cth).

Cookies and Tracking Technologies

·       Essential cookies to operate the website.

·       Performance and analytics cookies to understand website usage.

·       Marketing cookies to measure advertising effectiveness.

·       You can manage cookie preferences through our cookie banner where available or through your browser settings.

Disclosure of Personal Information

We may disclose your personal information to trusted third parties where necessary to operate our business or where required by law.

These parties may include:

• Shopify, which powers our online store.
• HubSpot, which manages our customer relationship management (CRM) platform.
• Klaviyo, which manages our email marketing communications.
• Payment providers that securely process transactions.
• Shipping and fulfilment providers to deliver your orders.
• Analytics providers such as Google Analytics and Google Search Console to help us understand website performance.
• Advertising and marketing platforms such as Meta technologies where applicable.
• Fieldfolio for wholesale applications and onboarding.
• Make (automation platform) where required to automate business processes involving customer or wholesale information.
• Professional advisers including accountants, auditors, insurers and legal advisers where required.
• Government agencies, regulators or law enforcement where disclosure is authorised or required by law.
• Potential purchasers, advisers or successors in connection with the sale, merger or restructuring of our business.

We only disclose personal information that is reasonably necessary for these parties to perform their services or to comply with applicable legal requirements.

International Data Transfers

Some of our service providers may process or store personal information in Australia or overseas, including in jurisdictions where they operate their infrastructure.

Where personal information is transferred outside Australia, we take reasonable steps to ensure appropriate safeguards are in place and that our service providers handle personal information in a manner consistent with Australian privacy laws.

Wholesale Customer Accounts

Approved wholesale customers may be provided with access to a secure wholesale account or portal to place orders, view wholesale pricing and manage their business information.

When you create or use a wholesale account, we may collect and store information including your business name, contact details, delivery and billing addresses, account credentials, order history and other information necessary to manage your wholesale relationship.

You are responsible for maintaining the confidentiality of your account credentials and for all activities conducted using your account. Please notify us immediately if you believe your account has been accessed without your authorisation.

Data Quality

We take reasonable steps to ensure the personal information we hold is accurate, complete, relevant and up to date.

This includes reviewing customer information periodically and, where appropriate, using trusted CRM tools and business data providers to maintain accurate business contact information.

If you believe any personal information we hold about you is inaccurate or incomplete, please contact us so we can correct it.

Security

We take reasonable administrative, technical and physical measures to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure. While no online system can guarantee absolute security, we continually work with trusted service providers and implement appropriate safeguards to help protect the information we hold.

Data Breaches

If we become aware of an eligible data breach involving your personal information, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

Where required by law, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

Retention

We retain personal information only for as long as reasonably necessary to provide our services, comply with taxation and legal obligations, resolve disputes, enforce agreements and maintain business records. Information is securely deleted or de-identified where practicable.

Children's Privacy

Our website is not intended for children under 16 years of age, and we do not knowingly collect personal information from children.

Your Privacy Rights

Subject to applicable law, you may request to:

• access the personal information we hold about you
• correct inaccurate or incomplete personal information
• withdraw your consent to receive marketing communications
• request that we delete your personal information where appropriate
• make a complaint about our handling of your personal information

To exercise any of these rights, please contact us using the details provided below.

To protect your privacy, we may ask you to verify your identity before processing your request.

We aim to respond to privacy requests within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices or content.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the revised 'Last updated' date.

Contact Us

Pebbly Path
247 - 249 Robertson Road
Mudgee NSW 2850
Australia
Email: hello@pebblypath.com.au