Privacy policy

Last updated: 18 May 2026

This Privacy Policy describes how Coco Loco Hard Seltzer (CoLo Co Pty Ltd ACN 667 120 229) ("we", "us", or "our") collects, uses, stores, and discloses your personal information when you visit our website at drinkcocoloco.com or purchase products from us (collectively, the "Services").

This Privacy Policy is prepared in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will post the revised Policy on our website and update the "Last updated" date. We encourage you to review this page periodically.

Anonymity and Pseudonymity

Where lawful and practicable, you may interact with us anonymously or using a pseudonym — for example, when making a general enquiry by email. However, we will need to identify you to process an order, manage your account, or fulfil a legal obligation.

What Personal Information We Collect

We collect personal information that is reasonably necessary for us to conduct our business and provide you with our products and Services. The types of information we collect include:

Information You Provide Directly

  • Contact details — name, email address, phone number, and postal address.
  • Order information — billing and shipping address, payment confirmation details, and purchase history.
  • Account information — username, password, and security credentials for your customer account.
  • Loyalty programme information — store credit balance, subscription status, and reward activity associated with your account.
  • Age verification data — date of birth or statutory age declaration provided at checkout to comply with our liquor licensing obligations under the Liquor Control Reform Act 1998 (Vic) and applicable state and territory laws. This information is used solely for age verification and compliance purposes and is not used for marketing.
  • Customer support communications — information you include when contacting us by email, contact form, or other means.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain technical information, including your IP address and approximate location, browser type and device information, pages visited and navigation behaviour, and referring URLs. This information is collected using cookies and similar tracking technologies. See the Cookies section below for more detail.

Information from Third Parties

We may receive information about you from third-party service providers who support our business operations, including:

  • Shopify Inc. — our eCommerce platform provider, which processes order and payment data on our behalf.
  • Klaviyo Inc. — our email marketing and customer communication platform, which stores your contact details and purchase history to send transactional and marketing communications.
  • Payment processors — who collect and process payment card information to fulfil your orders. Payment card data is processed directly by these providers and is not stored by us.
  • Review platforms — if you submit a product review, that information is collected through our review service provider.

How We Use Your Personal Information

  • Processing orders and providing Services — to fulfil your purchases, manage shipping and returns, and communicate with you about your orders.
  • Account management — to create and maintain your customer account, manage your loyalty programme credits, and keep your records accurate.
  • Email and marketing communications — to send you transactional emails (order confirmations, shipping updates, loyalty credit notifications) and, where you have consented, promotional emails and offers. You may opt out of marketing communications at any time using the unsubscribe link in any email or by contacting us at hello@drinkcocoloco.com.
  • Age verification compliance — to verify that purchasers of alcohol meet the minimum legal age requirements under Australian law.
  • Improving our Services — to analyse usage patterns, troubleshoot issues, and improve the performance and content of our website.
  • Legal compliance — to meet our obligations under applicable law, including tax, liquor licensing, and consumer protection legislation.
  • Security and fraud prevention — to detect and prevent fraudulent transactions and other harmful or unlawful activity.

Cookies

We use cookies and similar technologies on our website to improve your browsing experience, remember your preferences, and analyse website traffic. Cookies used on our site include those operated by Shopify to power our store. For details on Shopify's cookies, see https://www.shopify.com/legal/cookies.

You can control cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website, including your ability to complete a purchase.

Disclosure of Your Personal Information

We may disclose your personal information to third parties in the following circumstances:

  • Service providers — including Shopify (eCommerce platform), Klaviyo (email marketing), payment processors, freight and logistics partners, and IT service providers who assist us in operating our business. These providers are authorised to use your information only as necessary to perform services on our behalf.
  • Legal obligations — where required or authorised by law, regulation, court order, or government authority, including our liquor licensing regulators.
  • Business transfers — in connection with a merger, acquisition, or sale of business assets, in which case we would notify you prior to your information being transferred.
  • With your consent — in any other circumstances where you have given your explicit consent.

We do not sell your personal information to third parties.

Overseas Disclosure

Some of the third-party service providers we use — including Shopify (Canada/United States) and Klaviyo (United States) — store and process personal information on servers located outside Australia. Before disclosing personal information to these overseas recipients, we take reasonable steps to ensure that they handle it in a manner consistent with the Australian Privacy Principles, including by reviewing their contractual commitments and published privacy frameworks.

By using our Services, you acknowledge that your personal information may be transferred to and processed in countries outside Australia. These countries may not have data protection laws equivalent to those in Australia. However, we only use reputable international providers with established privacy safeguards.

Security and Retention of Your Information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our eCommerce platform uses industry-standard SSL/TLS encryption for all data transmitted through our website.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

Type of Information Retention Period Reason
Order and transaction records 7 years from date of transaction ATO tax and GST record-keeping obligations
Customer account information Duration of active account + 3 years after last activity Account management and dispute resolution
Email marketing consent records 5 years from date of consent or last interaction Spam Act 2003 (Cth) compliance
Age verification data 7 years from date of collection Liquor licensing compliance obligations
Customer support communications 3 years from date of last communication Quality assurance and dispute resolution
Website analytics data 26 months (rolling) Business analytics and improvement

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

Your Privacy Rights

Under the Australian Privacy Principles, you have the following rights in relation to your personal information held by us:

  • Access — You may request access to the personal information we hold about you.
  • Correction — You may request that we correct inaccurate, outdated, or incomplete personal information.
  • Opt-out of marketing — You may unsubscribe from marketing communications at any time using the unsubscribe link in any email, or by contacting us directly.
  • Deletion — You may request that we delete your personal information, subject to our legal obligations to retain certain records.

To exercise any of these rights, please contact us at hello@drinkcocoloco.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Automated Decision-Making

We do not currently make decisions about you solely by automated means that produce significant legal or similarly significant effects. Where we use automated tools (such as fraud detection or personalised product recommendations), these are used to assist — not replace — human decision-making.

Note: The Privacy and Other Legislation Amendment Act 2024 (Cth) introduces transparency obligations for automated decision-making involving personal information, taking effect 10 December 2026. We will update this Policy at that time to reflect any applicable obligations.

Children's Privacy

Our products contain alcohol and are not intended for persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us at hello@drinkcocoloco.com and we will promptly delete it.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us in the first instance:

  • Email: hello@drinkcocoloco.com
  • Post: Privacy Complaints, Coco Loco Hard Seltzer, PO Box 150, Yarraville VIC 3013

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. We will keep you informed of our progress.

If you are not satisfied with our response, or we fail to respond within a reasonable time, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Contact Us

For any questions about this Privacy Policy or our privacy practices:

Coco Loco Hard Seltzer (CoLo Co Pty Ltd ACN 667 120 229)
Email: hello@drinkcocoloco.com
Post: PO Box 150, Yarraville VIC 3013