Privacy policy
Last updated 21 September 2026
Colouroo is a print on demand service for Shopify stores, operated by Colouroo Pty Ltd in 11 Maud Street, Newstead QLD 4006, Australia ("Colouroo", "we", "us"). This policy explains what personal information we collect, why, who we share it with and how you can get in touch about it. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.
Two kinds of people read this: merchants, who install the Colouroo app in their Shopify store, and their customers, whose orders we print and post. Both are covered below.
What we collect from merchants
- Your store's details from Shopify when you install the app: store name and domain, contact name and email, currency and location.
- The designs, artwork and product information you upload or create in Colouroo, and the mockup images we generate from them.
- Your business name and ABN if you add them for tax invoices.
- Payment card details, which go directly from your browser to our payment processor, Stripe. We never see or store your card number. We keep only the card brand, the last four digits and the expiry date so you can recognise the card in the app.
- A record of each order, what we charged for it and each tax invoice.
- Support emails you send us.
What we collect about customers
When a customer buys a Colouroo product from a merchant's store, Shopify sends us the order. From it we keep only what is needed to print and deliver the order: the customer's name, shipping address, email address and phone number, the items ordered and the shipping method chosen. We do not receive the customer's payment details, and we do not use customer details for marketing of any kind.
Why we use it
- To run the app: show you the catalogue, save your designs, create products in your Shopify store and track your orders.
- To print, pack and post orders to your customers, and to give you and your customers tracking information.
- To charge your card on file for each order and send you a tax invoice.
- To email you about your orders and payments (an invoice, a declined card, a bank confirmation) and to answer support requests. We do not send marketing email unless you have asked for it, and you can opt out at any time.
- To keep the service secure, work out what went wrong when something fails and meet our legal obligations, including tax record keeping.
Who we share it with
We share personal information only with the services we need to run Colouroo, and only the parts each one needs:
- Shopify, which provides the platform the app runs in and sends us orders.
- Stripe, which stores merchant cards and processes payments.
- ShipStation and Australia Post (or another carrier), which receive the customer's name, address, email and phone number to produce shipping labels and deliver the parcel.
- Resend, which delivers our transactional email.
- Railway and Cloudflare, which host the app, its database and its files.
- The printing partner that produces the order, who receives the shipping details and the print files.
Some of these providers store data outside Australia, including in the United States. Where that happens we take reasonable steps to make sure the provider protects the information to a standard consistent with Australian privacy law. We do not sell personal information, and we do not share it with anyone else unless the law requires us to.
How long we keep it
- Orders, charges and tax invoices are financial records and are kept for at least five years, as Australian tax law requires. Customer details on old orders are removed or de-identified when they are no longer needed for delivery or dispute handling.
- If a merchant uninstalls the app, their store access is removed straight away. Their designs and product data are kept for 48 hours in case the uninstall was a mistake, then deleted when Shopify sends its deletion request.
- Print files are kept only as long as needed to produce and, if necessary, reprint an order.
Shopify's privacy requests
We support Shopify's customer data request, customer deletion and store deletion webhooks. When a merchant or customer makes a request through Shopify, we act on it within the timeframes Shopify sets, keeping only what tax law requires us to keep.
Security
Data travels over encrypted connections and is stored with providers that maintain their own security programs. Access to the systems that hold personal information is limited to the people who need it to run the service. Card numbers never touch our systems. No online service can promise perfect security, and if a breach ever affected you we would tell you and the Office of the Australian Information Commissioner as the law requires.
Cookies
The Colouroo app runs inside your Shopify admin and uses the session cookies Shopify needs to keep you signed in. This website uses no cookies. We do not use advertising or tracking cookies anywhere.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Merchants can see and change most of their details inside the app. Customers should usually contact the store they bought from, who can raise the request with us through Shopify, but you are welcome to email us directly too. We will respond within 30 days. If you are not happy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy we will update the date at the top and, for anything significant, tell merchants by email or inside the app.
Contact
Email hello@colouroo.com.au, or write to Colouroo Pty Ltd, 11 Maud Street, Newstead QLD 4006, Australia.