Privacy policy

Privacy policy

King Carlos Coffee respects your privacy. This policy explains how Green Commodities Pty Ltd ABN 14 621 141 848 trading as King Carlos Coffee ("we", "us") handles personal information collected through our website, store, wholesale accounts, loyalty program and marketing. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and apply this policy whether or not the Act requires it of a business our size.

What we collect. Depending on how you deal with us: your name, email, phone number, delivery and billing addresses; order history and preferences; payment details, which are processed by Shopify, Square and their payment providers and never stored in full by us; account and loyalty details; subscription settings; communications with us; and for wholesale accounts, business details, ABN, director and guarantor names, residential addresses and contact details, trade references, credit information, bank account details for direct debit, and a copy of the signatory's driver licence or passport.

How we collect it. Directly from you when you order, create an account, join the loyalty program, subscribe, contact us, apply for a wholesale account, sign a supply agreement or visit our store. Through cookies and similar technologies on our website. From third parties where you have authorised it or the law allows, including credit reporting bodies and trade references for wholesale applications.

Why we collect it. To process and deliver orders; manage accounts, subscriptions and loyalty memberships; take payment and recover debts; verify the identity of people who sign agreements or guarantees for us; provide customer service and warranty support; assess and manage wholesale credit; register and enforce security interests; send marketing you have agreed to receive; improve our products, website and service; prevent fraud; and meet legal obligations.

Identification documents. We ask wholesale signatories and guarantors for a copy of a driver licence or passport to verify identity for the agreement they sign. We use it only for that purpose and to enforce the agreement, store it with the signed document under restricted access, and destroy it when the account has been closed and all amounts paid, or 7 years after the agreement ends, whichever is earlier.

Who we disclose it to. Delivery carriers; Shopify, Square and their payment providers; our direct debit provider; our e-signature and form platform; email marketing, analytics and advertising platforms; IT and accounting providers; credit reporting bodies, debt collectors and legal advisers in relation to wholesale accounts; the Personal Property Securities Register where we register a security interest; and government bodies where the law requires. We do not sell, rent or trade personal information. We disclose only what each recipient needs for the purpose.

Overseas disclosure. Some of our service providers store or process information outside Australia. Shopify stores data in the United States and Canada; Square in the United States and Australia; our form and e-signature platform in the European Union; our email marketing, analytics and advertising platforms in the United States. We take reasonable steps to ensure these providers protect your information to a standard comparable to Australian law.

Cookies, analytics and advertising. Our website uses cookies and similar technologies to keep you logged in, remember your cart, secure your session and understand how the site is used. We use analytics tools and advertising pixels, which may collect your IP address, device identifiers, pages viewed and actions taken, and may be used to show you our advertising on other platforms. You can control cookies through your browser and opt out of personalised advertising through the relevant platform's settings. Some features may not work without cookies. Links to other sites are not covered by this policy.

Marketing. We send emails and may send SMS about products, offers and news to people who have subscribed, joined the loyalty program or bought from us. Every message includes an unsubscribe option and you can also opt out by emailing us; we action opt-outs within 5 business days.

Credit reporting (wholesale accounts). When you apply for a wholesale account or sign a supply agreement we may obtain commercial credit information about the business and, with their consent, consumer credit information about guarantors, from credit reporting bodies. If an account defaults we may disclose default information to a credit reporting body as the Privacy Act and the Privacy (Credit Reporting) Code allow. Our wholesale documents contain the notices and consents that apply.

Security and retention. We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including access controls, secure platforms and staff training. We keep personal information for as long as needed for the purposes above and to meet legal obligations, including tax record-keeping, then take reasonable steps to destroy or de-identify it. If a data breach is likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner as the law requires.

Access and correction. Email contact@kingcarloscoffee.com.au to access or correct the personal information we hold about you. We respond within 30 days and may need to verify your identity first. If we decline a request we will tell you why in writing.

Disclosure without consent. We may disclose personal information without consent where required or authorised by law, where reasonably necessary for an enforcement body's activities, or where necessary to lessen or prevent a serious threat to life, health or safety.

Complaints. Email contact@kingcarloscoffee.com.au, write to Green Commodities Pty Ltd, Suite 120, 1 Barratt Street, Hurstville NSW 2220, or call (02) 9580 1300. We acknowledge complaints within 5 business days and aim to resolve them within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes. We may update this policy. The current version, with its date, is always published on this page. Version dated 18-10-2026.