GHAALI respects your privacy and is committed to protecting your personal information.
GHAALI is a specialist Australian business offering a curated collection of highly collectible antique, vintage and fine handmade rugs. Our collection is intended for collectors, interior designers, private clients and customers in Australia and internationally.
This Privacy Policy explains how GHAALI collects, holds, uses, discloses and protects personal information when you visit our website, purchase or enquire about a rug, communicate with us, visit our showroom or otherwise interact with GHAALI.
In this Privacy Policy, “GHAALI”, “we”, “us” and “our” refer to the business entity that operates the GHAALI website and business.
Legal entity: GHAALI
Our GHAALI showroom is located at:
517 High Street
Prahran VIC 3181
Australia
For privacy enquiries:
Depending on how you interact with GHAALI, we may collect and hold:
Because GHAALI specialises in collectible and higher-value rugs, we may also need additional information in certain transactions to facilitate payment, delivery, insurance, customs, fraud prevention or other legitimate business requirements.
We generally do not need to collect sensitive information about our customers.
Please do not provide sensitive personal information unless it is reasonably necessary for the purpose for which you are dealing with us.
We may collect personal information when you:
We may also collect certain information automatically through cookies, analytics technologies and similar technologies when you use our website.
We may receive information from third-party service providers involved in payment processing, delivery, website operation, marketing, analytics, fraud prevention and other legitimate business functions.
We may collect, hold, use and disclose personal information where reasonably necessary to:
We will generally only use or disclose personal information for the purpose for which it was collected, for a related purpose that you would reasonably expect, with your consent, or where otherwise permitted or required by law.
The GHAALI online store is operated using Shopify.
Shopify and other third-party service providers may process personal information on our behalf in connection with:
Information processed through Shopify may be stored or processed in Australia or overseas, depending on the services and infrastructure used.
Shopify's own privacy practices are governed by its applicable privacy documentation.
Payments made through the GHAALI website may be processed by Shopify Payments or other payment providers made available through our online store.
We do not generally have access to or store complete credit or debit card numbers ourselves.
Payment providers may collect and process payment information in accordance with their own privacy policies and applicable laws.
The GHAALI website may use cookies, pixels, analytics tools and similar technologies.
These technologies may be used to:
Third-party providers may also use cookies or similar technologies in connection with services provided to GHAALI.
You may control or disable cookies through your browser settings. Some website functionality may not operate correctly if certain cookies are disabled.
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.
Depending on the circumstances, we may disclose information to:
We do not sell your personal information to third parties.
GHAALI serves customers internationally and uses technology and service providers that may operate outside Australia.
Your personal information may therefore be disclosed to overseas recipients.
Depending on the services used, overseas recipients may be located in countries including the United States and other countries in which Shopify or our other service providers operate.
For international orders, information may also need to be provided to overseas couriers, freight companies, customs authorities, insurers or other logistics providers to complete the transaction.
The countries involved may change as our service providers and international operations change.
Where required by Australian privacy law, GHAALI will take reasonable steps concerning overseas disclosures to ensure appropriate privacy protections apply.
Australian Privacy Principle 8 specifically addresses the disclosure of personal information to overseas recipients.
Where permitted by law, GHAALI may use your personal information to send you communications about:
We will comply with applicable Australian direct marketing and electronic communications laws.
You may opt out of marketing communications at any time using the unsubscribe mechanism included in the communication or by contacting us.
We take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.
These measures may include:
No online system can be guaranteed to be completely secure.
If GHAALI becomes aware of a data breach involving personal information, we will assess and respond to the incident in accordance with applicable Australian privacy laws.
Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will comply with applicable notification requirements.
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:
When information is no longer reasonably required, we will take reasonable steps to securely destroy or de-identify it, subject to legal or regulatory requirements.
You may request access to personal information that GHAALI holds about you.
You may also ask how your information is being used or disclosed.
Requests should be made using the contact details in section 20.
We will deal with requests in accordance with applicable privacy law.
In some circumstances, access may lawfully be refused. Where required, we will explain the reason for refusal and available complaint mechanisms.
We take reasonable steps to ensure personal information we hold is accurate, complete, up to date and relevant.
If you believe information we hold about you is inaccurate, incomplete, out of date or misleading, you may request that we correct it.
We will consider and respond to correction requests in accordance with applicable privacy law.
Where lawful and practicable, you may interact with GHAALI without identifying yourself or by using a pseudonym.
However, identification may be necessary where required to:
The GHAALI website may contain links to third-party websites, including social media, payment providers, shipping providers and other external websites.
GHAALI is not responsible for the privacy practices or security of those third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
GHAALI does not currently use personal information to make automated decisions that are reasonably expected to significantly affect an individual's rights or interests.
If this changes, we will update this Privacy Policy as required by applicable law.
This section also takes account of amendments to APP 1 scheduled to commence on 10 December 2026 concerning certain automated decision-making arrangements.
If you believe GHAALI has mishandled your personal information or breached applicable privacy law, please contact us first so that we can investigate and attempt to resolve your concern.
Please provide sufficient information for us to understand and investigate your complaint.
We will handle privacy complaints in a reasonable manner and in accordance with applicable privacy requirements.
If you are not satisfied with our response, or your complaint remains unresolved, you may be able to complain to the Office of the Australian Information Commissioner (OAIC).
The OAIC recommends that privacy concerns generally be raised with the organisation first.
For privacy enquiries, access requests, correction requests or privacy complaints, please contact:
GHAALI
517 High Street
Prahran VIC 3181
Australia
Email: ghaalirugs@gmail.com
We may update this Privacy Policy from time to time to reflect:
We encourage you to review this Privacy Policy periodically.