Privacy policy

Last updated: 28 August 2026

1. Who we are

GCL Ventures LLC, trading as Volantero, operates volantero.com and is responsible for the personal information described in this policy.

GCL Ventures LLC is a Kentucky limited liability company with Kentucky Organization No. 1554057 and a business address at 212 N. 2nd St. STE 100, Richmond, Kentucky 40475, United States.

Privacy enquiries and requests can be submitted by emailing support@volantero.com or through our Contact Us page.

Where the Australian Privacy Act 1988 and the Australian Privacy Principles apply to us, we will handle personal information in accordance with those requirements. We also apply the practices described in this policy as our general privacy standard.

2. Information we collect

Depending on how a person uses our store, we may collect:

Identity and contact information, including name, email address, telephone number, billing address and delivery address
Order and transaction information, including products ordered, payments, returns, refunds and order status
Limited payment information supplied by payment providers, such as card type and the last four digits of a payment card
Account information, login details, saved addresses and preferences
Customer-service enquiries and other communications
Device, browser, IP address, cookie identifier and website-usage information
Marketing preferences and interactions with marketing communications
Security, payment-verification and fraud-prevention information
Reviews and customer content, including display name, ratings, written reviews, photographs and purchase-verification information
Delivery and tracking information, including carrier events, parcel status and proof of delivery
Information associated with privacy requests, complaints or disputes

We do not receive or store complete payment-card numbers or card security codes when payments are processed by Shopify or another independent payment provider.

3. How we use personal information

We may use personal information to:

Process and fulfil orders
Process payments, refunds and returns
Arrange delivery and provide tracking information
Provide customer service and communicate about orders
Create and maintain customer accounts
Maintain financial, tax and transaction records
Verify payments and prevent fraud, abuse and security incidents
Operate, maintain, troubleshoot, analyse and improve our website and services
Request, verify, publish and moderate genuine customer reviews
Personalise store content and product recommendations where permitted
Comply with applicable laws and respond to lawful requests
Establish, exercise or defend legal claims
Send marketing communications where permitted
Record and manage marketing opt-outs
Measure website use and advertising performance
Provide personalised advertising where permitted and subject to applicable privacy choices

If required information is not provided, we may be unable to accept an order, process payment, arrange delivery or respond to a request.

4. How we collect and hold information

We may collect personal information:

Directly from customers when they browse the store, create an account, place an order, submit a review or contact us
Automatically through cookies, pixels, log files and similar technologies
From Shopify and installed Shopify applications
From payment processors and fraud-prevention providers
From fulfilment warehouses, delivery carriers and tracking providers
From customer-service, review, analytics, advertising and security providers
From publicly available sources or other parties where permitted by law

Personal information is primarily held electronically through Shopify and the systems of our service providers. Limited customer-service, transaction, accounting and compliance records may also be held in our internal business systems.

5. Who receives personal information

We disclose only the information reasonably necessary for the relevant service or purpose. Recipients may include:

Shopify, which hosts our store and provides checkout and ecommerce services
Payment processors, card networks, digital-wallet providers and financial institutions
Fraud-prevention, identity-verification and security providers
Our Australian fulfilment warehouse and other fulfilment providers
Delivery carriers and parcel-tracking providers
Customer-service, review, email, hosting, security and IT providers
Google Analytics and Google Ads, where these services are enabled and subject to applicable choices
Meta advertising services, where these services are enabled and subject to applicable choices
Accountants, legal advisers, insurers and other professional advisers
Regulators, courts, law-enforcement bodies and public authorities where required or permitted by law
A purchaser, investor or successor in connection with a genuine proposed or completed sale, merger, restructuring or transfer of the business

The providers we use may change as our store develops. We do not sell personal information in exchange for money.

Certain privacy laws may define disclosures for personalised or targeted advertising as a “sale”, “sharing” or similar activity even when no money is exchanged. Where such laws apply, we will provide any legally required notice and privacy choices.

6. Shopify

Our store is hosted by Shopify. Shopify processes personal information to provide hosting, checkout, ecommerce, fraud-prevention and related services.

Depending on our Shopify configuration, Shopify may also process information to provide enhanced services, analytics, personalisation, network intelligence, fraud detection and platform security.

For information about Shopify’s own processing practices and available choices, customers can review the Shopify Consumer Privacy Policy and visit the Shopify Privacy Portal.

Shopify and its providers may process information in countries other than Australia.

7. Automated processing

Shopify, payment providers and fraud-prevention providers may automatically analyse information such as:

Order and transaction details
Payment status and payment characteristics
Delivery and billing addresses
Device and browser information
IP address and approximate location
Account history
Previous transaction or fraud indicators

This processing may produce fraud or risk indicators used to verify a payment, hold an order for review or decline a transaction that appears suspicious.

Automated systems may also be used to personalise website content, recommend products, measure advertising or determine which advertisements are shown.

Where appropriate and required by law, a customer may contact us to request information about or human review of a decision that significantly affects them.

8. Overseas processing and disclosures

GCL Ventures LLC is established in the United States. Our service providers may operate in Australia and overseas.

Personal information is likely to be processed in or disclosed to recipients located in:

Australia
The United States
Canada
Singapore

Information may also be processed in other countries where Shopify, payment providers, delivery providers, advertising platforms or other service providers operate.

Because provider infrastructure can change, it may not always be practicable to identify every country in advance.

Where Australian Privacy Principle 8 applies, we take the reasonable steps required by law in relation to overseas recipients. Overseas recipients may be subject to privacy laws that differ from Australian law.

9. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including:

Order processing and fulfilment
Customer service
Returns and refunds
Security and fraud prevention
Resolving complaints or disputes
Legal, accounting and tax obligations

Order, payment and transaction records may be retained for up to seven years where reasonably required for accounting, tax or legal purposes.

Marketing information is retained until the person opts out or the information is no longer required. We may retain a minimal suppression record to ensure that an opt-out continues to be honoured.

When personal information is no longer required, we take reasonable steps to delete or anonymise it, subject to secure backups, legal holds and mandatory retention requirements.

10. Cookies and similar technologies

Our website uses cookies and similar technologies necessary for:

Checkout and shopping-cart functionality
Website security and fraud prevention
Remembering customer preferences
Account functionality
Core website operation

The website may also use analytics and advertising technologies associated with Shopify, Google, Meta and installed applications.

These technologies may collect:

IP address
Device and browser information
Cookie and advertising identifiers
Pages and products viewed
Website interactions
Products added to a cart
Checkout and purchase events

We do not intentionally send complete payment-card information to analytics or advertising providers.

Visitors can use available cookie controls, advertising controls and browser settings to manage these technologies. Blocking technologies necessary for core operation may affect website functionality.

11. Direct marketing

We send commercial electronic messages only with consent or where otherwise permitted by applicable law.

Marketing emails identify Volantero as the sender and include a functional unsubscribe link. Customers can also email support@volantero.com to change their preferences.

We will honour an unsubscribe request within the period required by law and normally within five working days. Unsubscribing from marketing does not stop essential order, payment, delivery, security or customer-service messages.

Where required, individuals may also ask us to identify the source from which we obtained their personal information for direct-marketing purposes.

12. Access, correction and other privacy requests

Subject to applicable law, individuals may request access to personal information we hold about them or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

Other privacy rights may apply depending on the person’s location and circumstances.

Requests can be submitted by:

We may request proportionate information to verify the requester’s identity and protect personal information from unauthorised access.

We will respond within a reasonable period. If we refuse a request, we will explain the reason and available complaint options where required by law.

We do not normally charge for submitting a privacy request. If the law permits a reasonable administrative charge in a particular situation, we will explain it before proceeding.

13. Privacy complaints

A person who believes we have mishandled their personal information should contact us using the details below and provide:

Their name and contact information
A description of the concern
Relevant dates, order numbers or communications
The resolution they are seeking, where applicable

We will acknowledge the complaint, investigate it and communicate the outcome within a reasonable period. We aim to acknowledge privacy complaints within five business days and complete our response within 30 calendar days where reasonably practicable.

If the Australian Privacy Act applies and the complaint remains unresolved, the person may be entitled to lodge a complaint with the Office of the Australian Information Commissioner.

14. Children

Our store is not directed specifically to children. We do not knowingly collect personal information from children in circumstances where parental or guardian authorisation is required by applicable law.

A parent or guardian who believes that a child has improperly provided personal information can contact us so that we can investigate and take appropriate action.

15. Security and data breaches

We use technical and organisational safeguards designed to protect personal information against loss, misuse, interference and unauthorised access, modification or disclosure.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Customers should not send full payment-card details, card security codes or account passwords by email.

If a data breach occurs, we will investigate and take appropriate containment and remediation measures. Where applicable law requires notification, we will notify affected individuals and the relevant regulator.

16. External links

Our website may contain links to independent third-party websites. Those websites have their own privacy practices and policies.

Customers should review the privacy notices of third-party websites before providing personal information to them.

17. Updates to this policy

We may update this policy to reflect changes in applicable law, technology, providers or business operations.

When we update the policy, we will change the “Last updated” date and provide additional notice where required by law.

18. Contact information

Store: Volantero
Operator: GCL Ventures LLC, trading as Volantero
Kentucky Organization No.: 1554057
Business address: 212 N. 2nd St. STE 100, Richmond, Kentucky 40475, United States
Australian warehouse: 35 Jordan Cl, Altona VIC 3018, Australia
Email: support@volantero.com
Phone: +61 3 9021 6982
Customer service hours: Monday–Friday, 9:00 am–5:00 pm Australian Eastern Time