Privacy Policy

This policy explains how BROOKI PTY LTD, trading as Brooki Bakehouse ("we", "us", "our"), collects, uses, stores and discloses your personal information when you visit our website, contact us, or buy from us.

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

1. Information we collect

Information you provide directly

• Contact information: name, email address, phone number, and shipping and billing address.
• Payment information: your card details are processed securely by a third-party payment provider and are not stored by us. We retain your billing address.
• Account information: if you create an account, your username and password.
• Communications: anything you tell us by email, phone, social media or through a form on our site — including order notes and custom cake requests.

Information we collect automatically

• Usage information: the pages you visit, products you view, and the time and duration of your visit.
• Device information: your IP address, browser type, operating system and device identifiers.
• Cookies and similar technologies: we use cookies, pixels and web beacons to remember your preferences, understand how the site is used, and measure our advertising. You can refuse some or all cookies in your browser settings, though parts of the site may then not work properly.

2. Why we use your information

• To process and fulfil your orders — taking payment, arranging delivery, and keeping you updated on your order.
• To respond to you when you get in touch.
• To operate and improve our website, products and service.
• To send you marketing about our products, offers and store openings, where you have consented. You can unsubscribe at any time using the link in any marketing email.
• To personalise what you see, so it is more relevant to you.
• To understand our customers, using aggregated and de-identified data.
• To protect our business — detecting and preventing fraud, and meeting our legal obligations.

3. Who we share it with

We share personal information with service providers who perform functions on our behalf, including payment processing, website and data hosting, shipping and delivery, email marketing, customer support, loyalty and rewards, and analytics. They may only use your information to perform those functions for us.

We may also disclose information:

• where we are required or authorised to by law, including in response to a subpoena, court order or request from a government agency;
• where necessary to protect our rights, property or safety, or that of others;
• in connection with a merger, acquisition, or sale of all or part of our business or assets.

We do not sell your personal information.

4. Overseas disclosure

Some of our service providers store or process personal information outside Australia, including in the United States, Canada and the European Union. We also operate in the United Arab Emirates.

Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. Privacy laws in those countries may differ from Australian law.

5. How long we keep it

We keep personal information only as long as we need it for the purposes described in this policy, or as required by law — including our tax and business record-keeping obligations. When we no longer need it, we take reasonable steps to delete or de-identify it.

6. Security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

7. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete.

If you have an account, you can log in and update much of it yourself. Otherwise, email us and we will respond within a reasonable period. We may need to verify your identity first. In the limited circumstances permitted by law where we decline a request, we will explain why.

8. Marketing and your choices

You can opt out of marketing emails at any time using the unsubscribe link in any marketing message, or by emailing us. We will still need to send you transactional messages about orders you have placed.

Some browsers offer a "Do Not Track" signal. We do not currently respond to those signals.

9. Children

Our website is not directed at children and we do not knowingly collect personal information from children. If you believe we have collected information about a child, please contact us and we will delete it.

10. Third-party links

Our site may link to other websites. This policy does not apply to them, and we encourage you to read their privacy policies.

11. Complaints

If you think we have mishandled your personal information, please contact us first — we would much rather resolve it directly. Email hello@brookibakehouse.com and we will acknowledge your complaint and respond within a reasonable period.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

12. Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page, and we will update the date below when we make a change.

13. Contact us

Brooki Bakehouse (BROOKI PTY LTD)
15 Marshall Street, Fortitude Valley, Brisbane QLD 4006
hello@brookibakehouse.com

Last updated: 18 August 2026