Last updated: 25 August 2026
Sand & See is an online store operated by ABI Galaxy. We operate this website and online store, including all related content, features, tools, products and services (together, the "Services"). Our store is powered by Shopify, which provides the technology that allows us to offer the Services to you.
This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how we protect it, and what rights you have over it.
It is written to meet our obligations under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because ABI Galaxy is established in The Netherlands, the EU General Data Protection Regulation (GDPR) also applies to our handling of your information, and we have set out the lawful basis for each purpose in section 3.
If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies to anything concerning your personal information.
By using the Services, you confirm that you have read and understood this Privacy Policy.
1. Who is responsible for your information
The company responsible for your personal information — the data controller — is:
ABI Galaxy, trading as Sand & See
Keurenplein 41, Amsterdam, North-Holland, 1069 CD, The Netherlands
KvK (Netherlands Chamber of Commerce) number: 88473198
Email: support@sandandsee.com
For any question about this policy or about how we handle your information, contact us at the email address above. We have not appointed a Data Protection Officer, as we are not required to.
2. What personal information we collect
"Personal information" means information that identifies you, or that could reasonably be linked to you. It does not include anonymous or de-identified information. Depending on how you use the Services, we may collect:
- Contact details — your name, email address, phone number, delivery address and billing address.
- Order and transaction information — the items you view, add to your cart, buy, return, exchange or cancel, and your order history with us.
- Payment information — your payment method, transaction details and payment confirmation. We never see or store your full card number. Card details are entered directly into our payment provider's secure systems.
- Account information — if you create an account: your username, encrypted password, saved addresses and preferences.
- Communications — the content of emails, contact form messages, phone calls and reviews you send us, including any information you choose to include.
- Device and technical information — your IP address, browser type, device type, operating system, language settings and other identifiers.
- Usage and journey information — which pages you visit, what you click, how long you stay, how you arrived at our store, and which advertisement or link brought you here. This may be linked across more than one visit so we can measure whether our advertising works.
- Session recordings and interaction data — how you move through a page: your mouse movements, clicks, scrolls and taps, together with a reconstruction of what the page looked like to you. See section 5 for exactly how this works and what is excluded.
- Marketing preferences — whether you have subscribed to our emails and how you interact with them.
Sensitive information. We do not collect sensitive information as defined by the Privacy Act — such as health information, racial or ethnic origin, religious beliefs, political opinions or biometric data. Please do not send us this kind of information.
Government identifiers. We do not collect, use or store government-related identifiers such as your Tax File Number, Medicare number, driver's licence number or passport number.
Anonymity. You can browse our store without telling us who you are. However, we cannot process an order, deliver a parcel or handle a return without your contact and delivery details.
3. Why we use your information, and our lawful basis
We only use your personal information for the purposes below. For each one we have set out the lawful basis we rely on under the GDPR. Under the Australian Privacy Principles, we use your information only for the purpose we collected it for, or for a purpose you would reasonably expect.
| What we do | Lawful basis |
|---|---|
| Process and confirm your order, take payment, arrange delivery with Australia Post, keep you updated on your parcel, and handle returns, refunds and exchanges | Performance of our contract with you |
| Create and manage your account | Performance of our contract with you |
| Answer your questions and provide customer support | Contract, or our legitimate interest in running a responsive business |
| Detect and prevent fraud, verify orders and keep the store secure | Our legitimate interest in protecting you and us from fraud |
| Understand how our store is used, including through session recordings and heatmaps, so we can fix problems and improve it | Your consent, or our legitimate interest in improving our Services |
| Measure whether our advertising works and show you relevant advertising elsewhere online | Your consent, or our legitimate interest in measuring our own marketing |
| Send you marketing emails | Your consent, which you can withdraw at any time |
| Keep tax and transaction records, and respond to regulators or law enforcement | Compliance with a legal obligation |
We will not use or disclose your personal information for an unrelated purpose unless you would reasonably expect it, you have consented, or the law requires or permits it.
4. Automated decisions
We use automated tools in a small number of places: to screen orders for signs of fraud, and to suggest products that may interest you.
These tools do not make decisions that have a legal or similarly significant effect on you without a person being involved. If an order of yours is ever declined or held because of an automated fraud check, you can contact us and ask a member of our team to review it manually. We will always explain the outcome.
5. Cookies, session recordings and tracking technologies
We and our partners use cookies, pixels and similar technologies on our store. These are small files stored on your device. We use three kinds:
| Type | What it does | Who sets it |
|---|---|---|
| Essential | Keeps your shopping cart working, remembers that you are signed in, and secures your checkout. The store cannot work without these. | Shopify, Shop Pay |
| Analytics | Tells us how visitors use our store, which pages work and where people leave, so we can improve it. | Shopify, Microsoft Clarity, TrackBee Connect |
| Advertising | Measures whether our advertising leads to a sale, and allows relevant ads to be shown to you on other websites. | Google (Google Ads), Pinterest, Microsoft |
Session recordings and heatmaps
We use Microsoft Clarity to understand how people actually use our store. We want to be straightforward about what this involves, because it goes further than ordinary analytics.
What it records: your mouse movements, clicks, taps and scrolling, the order in which you move through pages, your screen size and device type, and a reconstruction of how each page looked to you. Clarity also builds heatmaps showing where visitors click and how far they scroll.
What it does not record: password fields and payment fields are masked automatically and are never captured. We do not use these recordings to identify you personally, and we do not link them to your name or your order history.
Why we use it: to find broken layouts, confusing steps and pages where people get stuck, so we can fix them.
Cookies it sets: Clarity uses cookies named _clck and _clsk, and a Microsoft identifier called MUID. That MUID identifier is used across Microsoft services, including Microsoft Advertising and Bing, which means Microsoft may also use this information for its own purposes under its own privacy statement.
How to stop it: you can block or delete these cookies in your browser settings, or use Microsoft's own privacy controls at privacy.microsoft.com. Blocking them does not affect your ability to browse or buy from us.
Your other choices
You can control or delete cookies in your browser settings. You can also opt out of personalised advertising directly with each platform — for example through Google My Ad Center or your Pinterest privacy settings. Blocking essential cookies may stop parts of our store from working.
6. Marketing and your right to opt out
We only send marketing emails to people who have asked to receive them. Every marketing email we send contains a working unsubscribe link, and unsubscribing takes effect immediately.
You can also ask us to stop sending you marketing at any time, or ask us where we obtained your details, by emailing support@sandandsee.com. This is free of charge.
Even if you opt out of marketing, we will still send you essential service messages about orders you have placed — such as your order confirmation, dispatch notice and refund confirmation.
7. Who we share your personal information with
We never sell or rent your personal information. We share it only where it is necessary to run our store, and only with parties who are contractually required to protect it and to use it solely for the purposes we set. These are the companies involved:
| Who | Why | What they receive |
|---|---|---|
| Shopify | Hosts our store and processes your order (see section 8) | Your order, account and browsing information |
| Our payment providers | Process your payment securely and screen for fraud | Your payment and billing details |
| Australia Post and our warehouse in Welshpool, WA | Pick, pack, deliver your order and handle returns | Your name, delivery address and phone number |
| ParcelPanel | Powers the order tracking page on our store | Your order number, tracking number and delivery details |
| Microsoft (Microsoft Clarity) | Session recordings and heatmaps, so we can find and fix usability problems | Your interactions with our pages, device and browser information, and Microsoft cookie identifiers |
| Google (Google Ads and the Google & YouTube sales channel) | Lists our products on Google, measures whether our advertising leads to a sale, and enables relevant advertising | Cookie and device identifiers, pages viewed, and whether a purchase was made |
| Lists our products on Pinterest and measures our advertising there | Cookie and device identifiers, pages viewed | |
| TrackBee Connect | Measures which marketing channels bring visitors to our store, by linking the steps of a visit together | Cookie and device identifiers, pages viewed, referral source and order value |
| Professional advisers | Accountants, auditors and lawyers, where necessary | Only what is needed for the matter at hand |
| Regulators, courts and law enforcement | Where we are required or permitted by law to disclose information | Only what the law requires |
| A buyer or successor | If our business is sold, merged or reorganised | Customer records may transfer as part of that transaction |
Each of these partners handles your information under its own privacy policy as well as under our agreement with them.
8. Our relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.
In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over the use of your personal information for these purposes.
To learn more, see the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights directly through the Shopify Privacy Portal.
9. Sending information overseas
Yes — we are likely to disclose your personal information to recipients located outside Australia.
ABI Galaxy is based in The Netherlands, and the service providers listed in section 7 operate internationally. Your personal information is likely to be disclosed to, stored in or accessed from:
- The Netherlands and other countries in the European Economic Area
- Ireland — Microsoft's European operations
- The United States — Microsoft, Google and Pinterest
- Canada — Shopify
- Hong Kong and mainland China — our order tracking provider
Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles — for example through contractual data protection commitments. Where personal information is transferred out of the European Economic Area, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or on an adequacy decision.
10. How we keep your information secure
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Our store runs over an encrypted (HTTPS) connection, payment details are handled directly by PCI-DSS compliant payment providers, and access to customer data within our business is limited to the people who need it to do their job.
No system can be guaranteed to be completely secure, and information sent over the internet is never entirely risk-free. Please do not send us sensitive or confidential information through unsecured channels.
If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.
11. How long we keep your information
We keep your personal information only for as long as we need it:
- Order and transaction records — for at least 7 years, to meet tax and accounting obligations.
- Account information — for as long as your account is open, and for a reasonable period afterwards.
- Marketing contact details — until you unsubscribe or ask us to remove them.
- Support correspondence — for as long as needed to resolve your enquiry and for a reasonable period afterwards.
- Session recordings — retained by Microsoft Clarity for a limited period, currently 30 days, after which they are deleted.
- Cookie and analytics data — for a limited period set by each provider, typically no longer than 24 months.
When we no longer need your personal information and are not required to keep it, we destroy it or de-identify it.
12. Accessing and correcting your information
You have the right to ask us for a copy of the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading.
To make a request, email support@sandandsee.com with the subject line "Privacy request". We may need to verify your identity first, so that we do not release your information to the wrong person.
We will respond within 30 days. Access and correction are free of charge. In limited cases the law allows us to refuse a request — for example where it would unreasonably affect someone else's privacy. If we refuse, we will explain why in writing and tell you how to complain.
If you have an account, you can also update your details yourself by logging in.
13. Other rights you may have
Depending on where you live, you may also have the right to:
- Ask us to delete personal information we hold about you, where we are not required to keep it;
- Receive a portable copy of the information you provided to us, in a commonly used format;
- Object to or restrict certain uses of your information, including profiling for marketing;
- Withdraw your consent where we rely on consent. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
These rights are not absolute and may not apply in every situation. We will never treat you differently or refuse to serve you because you exercised a privacy right.
You may appoint someone to make a request on your behalf. We will ask for proof that you have authorised them, and we may still need to verify your identity with you directly.
14. Making a complaint
If you believe we have mishandled your personal information or breached the Australian Privacy Principles, please tell us first — we would like the chance to put it right.
Email support@sandandsee.com with the subject line "Privacy complaint" and describe what happened. We will acknowledge your complaint within 5 business days, investigate it, and give you a written response within 30 days explaining our findings and what we intend to do.
If you are not satisfied with our response, you can take your complaint to the Office of the Australian Information Commissioner:
Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001
If you are in the European Economic Area, you may instead lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.
15. Children
Our Services are intended for adults and are not directed at children. We do not knowingly collect personal information from anyone under 18 years of age.
If you are a parent or guardian and believe your child has given us their personal information, please contact us and we will delete it.
16. Third-party websites and links
Our store may link to websites and platforms operated by third parties, including our Pinterest and Facebook pages. We do not control those sites and are not responsible for their content, their privacy practices or the accuracy of the information on them. Please read their own privacy policies before sharing information with them.
Anything you post in a public or semi-public place, such as a product review or a social media page, may be visible to others and may be used by us or by third parties.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our technology, or the law — including when we add or remove a service provider. When we do, we will publish the new version on this page and update the "Last updated" date at the top. Where a change is significant, we will notify you as required by law.
Please check this page from time to time so you stay informed about how we protect your information.
Contact information
Customer Service Hours:
Monday to Friday: 09:00 – 17:00 AEST
Weekends: 11:00 – 16:00 AEST
We aim to respond to your inquiries within 24 hours.
Email: support@sandandsee.com
Phone number: +61 3 4152 7888
Contact Form: Open Contact Form
Sand & See is owned and operated by ABI Galaxy, a company based in The Netherlands.
Store name: Sand & See
Company name: ABI Galaxy
KvK (Netherlands Chamber of Commerce) number: 88473198
Address: Keurenplein 41, Amsterdam, North-Holland, 1069 CD, The Netherlands
Warehouse address: 33 McDowell St, Welshpool WA 6106, Australia