Our Approach

Privacy built like the game: minimal, honest, complete

The Gardens Between World operates the official Australian portal for The Gardens Between at gardensbetweenworld.com. This policy covers the website and store — the game itself collects no personal data whatsoever once installed.

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Because we welcome visitors from everywhere, we also handle data in line with GDPR-style rights — access, correction, deletion and portability — for every visitor, not just EU ones.

In this document

What we collect and why
Cookies & tracking
Who we share it with
Your rights
Retention & security

Key Points

The policy in four promises

Minimal collection

We ask only for what a given action needs — an email for a receipt, a name for a reply.

Nothing sold

Your data is never sold, rented or traded to third parties — full stop.

Deletable

One email to us removes your data from every system we control.

Readable

This document is written for humans. Questions? The contacts page reaches real ones.

What we collect and why

We collect information in three ways:

Contact form submissions — name, email, optional phone and your message, used solely to respond to your enquiry.
Order information — what you bought, your email and delivery details. Payment card data is handled by our PCI-compliant processor and the platform stores; we never see or store card numbers.
Newsletter subscription — your email address, used only for the letters you signed up for. Every letter carries a one-click unsubscribe.

Server logs record standard technical data (IP address, browser type, pages visited) for security and analytics — retained for 12 months, then deleted.

Cookies & tracking

We use a small set of cookies for preferences, cart state and anonymised traffic analytics — each named and explained in the Cookie Policy. Non-essential cookies load only after you accept the banner; declining changes nothing except analytics participation.

Who we share it with

Only the processors needed to run the portal: our payment processor (orders), our email delivery service (receipts and letters) and our hosting provider (site operation). Each is bound by contract to handle your data for its stated purpose only. Australian law enforcement requests are honoured only where legally required.

Your rights

Regardless of where you live, you can ask us to:

show you the data we hold about you;
correct anything inaccurate;
delete your data entirely ('right to be forgotten');
export your data in a portable format;
withdraw consent for newsletters or cookies at any time.

Write via the contacts page — we respond within five business days and act within thirty.

At a glance

We collect names, emails and order records — nothing else. Analytics is opt-in. No advertising pixels exist on this site at all.

Your data lives on Australian infrastructure under Australian law.

Retention & security

Order records are kept for the period Australian tax law requires (five years). Contact correspondence is held for two years, newsletter data until you unsubscribe. Everything transits TLS 1.3 and is stored on access-controlled infrastructure — see the Legal Notice for the entity responsible.

Questions About This Document

Privacy questions & requests

Access, correction, deletion or export requests go to the privacy desk through the contacts page — include the email address your data is registered under so we can verify it's really you.

Contact the team

Privacy Policy