Privacy policy

Type of website: Ecommerce
Effective date: 30 July 2026

www.tamaragill.com (the "Site") is owned and operated by Tamara Gill. Tamara Gill is the data controller and can be contacted at tamaragillauthor@gmail.com.

This policy explains what personal information we collect when you visit or buy from the Site, why we collect it, who we share it with, how long we keep it, and what rights you have.

Which laws apply

For customers in the European Union we comply with Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"). For customers in the United Kingdom we comply with the UK GDPR and the Data Protection Act 2018. As an Australian business we also handle personal information in line with the Australian Privacy Principles.

We have not appointed a Data Protection Officer, as we do not meet the criteria in Article 37 of the GDPR that would require one.

Personal data we collect

Information you give us

  • When you place an order: your name, email address, billing address, shipping address, phone number (where provided), and the details of what you ordered.
  • When you create an account: your name, email address, saved addresses and order history.
  • When you join our mailing list: your email address, and your phone number if you opt in to SMS.
  • When you contact us: your name, email address and whatever you choose to tell us.
  • When you use the chat window on the Site: the messages you send, together with any name, email address or order details you choose to give us in the conversation.

We never see or store your card details. Payment information is entered directly into our payment providers' systems and is handled by them, not by us.

Information collected automatically

  • IP address and approximate location
  • Device, browser and operating system
  • Pages visited, links clicked, and time spent on the Site
  • The site or advert you arrived from
  • Items added to a cart, and carts or checkouts left incomplete

Why we use your data, and our legal basis

Under Article 6 of the GDPR we must have a lawful basis for each use of your data. Ours are:

  • To take payment, fulfil your order, deliver your books and provide customer service — because it is necessary to perform our contract with you.
  • To answer your messages through the chat window on the Site, including where an AI assistant generates the reply — because it is necessary to perform our contract with you where the message concerns an order, and otherwise based on our legitimate interests in answering enquiries from people interested in our books.
  • To send you marketing emails and SMS about new releases and offers — based on your consent, which you can withdraw at any time.
  • To place analytics and advertising cookies — based on your consent, given through our cookie banner.
  • To keep the Site secure, prevent fraud, understand how the Site is used, and establish or defend legal claims — based on our legitimate interests in running a safe and functioning shop, balanced against your rights.
  • To keep tax, accounting and consumer law records — because we are legally required to.

Who we share your data with

We do not sell your personal data, and we never will. We do share it with the service providers we need in order to run the shop. Each of them is only permitted to use your data to provide their service to us.

  • Shopify — hosts the Site, runs the checkout and customer accounts, provides fraud analysis, and powers the AI-assisted chat described in the next section.
  • Payment providers including Shopify Payments, Shop Pay, PayPal, Apple Pay and Google Pay — process your payment.
  • Bookvault (Copytech (UK) Ltd) — prints and posts our paperbacks. They receive your name and delivery address.
  • Delivery carriers — receive your name, address and contact details in order to deliver your parcel.
  • BookFunnel — delivers ebooks and audiobooks. Receives your email address.
  • Klaviyo — sends our marketing emails and SMS. Holds your email address, phone number if provided, and how you interact with our messages.
  • Meta (Facebook and Instagram) — our advertising pixel, where you have consented to marketing cookies.
  • Google — website analytics, where you have consented to analytics cookies.
  • Our accountant and professional advisers — where needed for tax and business records.

We may also disclose your data where the law requires it, in connection with legal proceedings, to protect our legal rights, or to a buyer if the business is ever sold.

AI-assisted chat

We use Shopify to power AI-assisted chat on our online store. When the chat is active, a message you send through the chat window may be answered by an AI assistant provided by Shopify rather than by a person.

Shopify processes customer data, including your chat communications, in order to generate those responses and to improve the quality of the Shopify Inbox agent over time. This means the messages you send in the chat are processed by Shopify for both purposes, not only to reply to you in the moment.

A few things worth knowing:

  • AI-generated answers are not always accurate. If your question concerns an order, a payment, a delivery, a refund, or anything else that matters to you, please email tamaragillauthor@gmail.com and Tamara will reply personally.
  • You can always ask for a human. Say so in the chat and the conversation will be passed to Tamara, along with what you have already written.
  • Please don't type sensitive information into the chat. We never need your card details, passwords or identity documents in order to help you, and we will never ask for them there. Please share only what is needed to answer your question.
  • If you would rather not use AI-assisted chat at all, simply email us instead. You will get the same help, from a person, and nothing you write will be processed by an AI assistant.

Your rights over this data are the same as for everything else described in this policy, including the right to ask for a copy of it or to have it deleted.

Sending data outside your country

We are based in Australia, and the providers listed above operate in Australia, the United Kingdom, the European Union, the United States and Canada. This means your personal data will be transferred outside the country you live in.

Australia has not been granted an adequacy decision by the European Commission. Where we transfer the personal data of EU or UK residents:

  • We rely on the European Commission's Standard Contractual Clauses, or the UK's International Data Transfer Agreement, with our service providers.
  • Where we receive your order details in Australia in order to fulfil your purchase, we rely on Article 49(1)(b) of the GDPR, which permits transfers that are necessary to perform a contract with you.

How long we keep your data

  • Order and transaction records: five years from the end of the financial year in which the order was placed, as Australian tax law requires.
  • Customer accounts: for as long as your account is open. You can ask us to close and delete it at any time.
  • Mailing list: until you unsubscribe. We then keep your email address on a suppression list so that we do not accidentally contact you again.
  • Emails, chat conversations and support enquiries: up to two years after the matter is resolved. Chat conversations are also retained by Shopify in line with its own retention practices.
  • Analytics and advertising data: according to the retention settings of the provider concerned.

How we protect your data

The Site runs over an encrypted connection and our providers hold recognised security certifications. Access to customer data is limited to Tamara Gill and any service provider that needs it to do its job. We take all reasonable precautions, but no method of transmitting or storing data online is completely secure, and we cannot guarantee absolute security.

Your rights

If you are in the EU or the UK, you have the right to:

  • Be informed about how your data is used
  • Access a copy of the data we hold about you
  • Have inaccurate data corrected
  • Have your data erased
  • Restrict how we process your data
  • Receive your data in a portable format
  • Object to processing based on our legitimate interests
  • Withdraw your consent at any time, without affecting processing carried out before you withdrew it

Customers elsewhere, including in Australia, may also request access to their personal information and ask us to correct it.

To exercise any of these rights, email tamaragillauthor@gmail.com. We will respond within one month. There is no charge.

Marketing and how to opt out

We only send marketing to people who have asked for it. You can opt out at any time by clicking "unsubscribe" at the bottom of any marketing email, replying STOP to any SMS, or emailing us. Opting out of marketing does not stop transactional messages about an order you have placed.

Children

The Site is not intended for children, and we do not knowingly collect personal data from anyone under 16. In some EU countries the age of consent for data processing is lower, between 13 and 16. If we learn that we hold data from a child below the applicable age, we will delete it. A parent or guardian can contact us at the address above.

Cookies

A cookie is a small file stored on your device that lets a website recognise you and remember your preferences.

We use three kinds:

  • Essential cookies — needed to run the Site, keep your cart working and log you in. These cannot be switched off.
  • Analytics cookies — help us understand which pages people use so we can improve the shop.
  • Marketing cookies — used by Meta and Google to measure adverts and show relevant ones.

If you are visiting from the EU or the UK, you will see a cookie banner when you first arrive, and analytics and marketing cookies are only set if you accept them. You can change your choice at any time through the cookie settings on the Site, and you can block or delete cookies through your browser, although parts of the Site may then stop working properly.

You can read Shopify's cookie policy here.

Do Not Track

Some browsers can send a "Do Not Track" signal. There is no agreed industry standard for how sites should respond, and we do not currently act on these signals. We do act on the choices you make in our cookie banner, and those choices control the analytics and advertising cookies described above.

Links to other websites

The Site may link to other websites. Once you leave our Site we have no control over how those sites handle your information, and this policy does not apply to them. Please read their own privacy policies.

Changes to this policy

We may update this policy to reflect changes in the law or in how we operate. When we do, we will change the effective date at the top. If the change is significant, we will tell you by email where we reasonably can.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first at tamaragillauthor@gmail.com so we can try to put it right.

You also have the right to complain to a regulator:

  • European Union: the data protection authority in your country. A list is available from the European Data Protection Board.
  • United Kingdom: the Information Commissioner's Office, ico.org.uk.
  • Australia: the Office of the Australian Information Commissioner, oaic.gov.au.

Contact

Tamara Gill
PO Box 136
Gladstone SA 5473
Australia
tamaragillauthor@gmail.com