Privacy Policy
All About Ava operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). All About Ava is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.
We are an Australian business and we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where you are located outside Australia, additional local laws may also apply, as described in the “Overseas Customers” section below. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Personal Information We Collect or Process
When we use the term “personal information,” we are referring to information that identifies, or can reasonably be linked to, you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify, or be reasonably linked to, you. Depending on how you interact with the Services and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from this information:
• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Financial information including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation and other payment details. Note: card payments are processed by Shopify and our payment providers; we do not store full card numbers ourselves.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
• Communications with us including the information you include in communications with us, for example when sending a customer support enquiry.
• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
We generally collect only the personal information that is reasonably necessary for our functions and activities. You do not have to provide your personal information, and you may deal with us anonymously or using a pseudonym where it is lawful and practicable to do so. However, if you choose not to provide certain information, we may not be able to provide you with the Services or process your order.
How We Collect Personal Information
We may collect personal information from the following sources:
• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you use our products or services or visit our website, and through the use of cookies and similar technologies;
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf; and
• From our partners or other third parties.
Where it is reasonable and practicable, we collect personal information directly from you. If we receive personal information about you from a third party that we did not solicit, we will deal with it in accordance with the APPs.
How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use your personal information for the following purposes:
• Provide, tailor and improve the Services. To perform our contract with you, process your payments, fulfil your orders, remember your preferences, send notifications related to your account, process purchases, returns, exchanges or other transactions, create and manage your account, arrange shipping, enable you to post reviews, and create a customised shopping experience such as recommending related products. This may include using your personal information to better tailor and improve the Services.
• Marketing and advertising. To send you marketing and promotional communications by email, text message or post, and to show you online advertisements, including based on items you previously viewed, purchased or added to your cart. We will only send commercial electronic messages in accordance with the Spam Act 2003 (Cth), and you can opt out at any time (see “Direct Marketing” below).
• Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, protect public safety, and secure our Services. If you register an account, you are responsible for keeping your account credentials safe. We recommend that you do not share your username, password or other access details with anyone.
• Communicating with you. To provide you with customer support, to be responsive to you, to provide effective services, and to maintain our business relationship with you.
• Legal reasons. To comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to participate in civil discovery, potential or actual litigation, or other legal proceedings, and to enforce or investigate potential violations of our terms or policies.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
• With Shopify, vendors and other third parties who perform services on our behalf (for example, IT management, payment processing, data analytics, customer support, cloud storage, and fulfilment and shipping).
• With business and marketing partners to provide marketing services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or sale of assets, to comply with applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce our terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.
We do not sell your personal information.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.
To help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over the use of your personal information for these purposes.
To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en.
Overseas Disclosure of Your Information
Because our store is hosted by Shopify and we use service providers located outside Australia, your personal information may be stored, transferred to, and processed in countries other than Australia, including Canada, the United States, and other countries where Shopify and our service providers operate.
Before disclosing personal information to an overseas recipient, we take steps that are reasonable in the circumstances to ensure the recipient handles your personal information consistently with the Australian Privacy Principles, as required under APP 8. By providing your personal information and using the Services, you acknowledge that it may be disclosed to overseas recipients as described in this Privacy Policy.
Children’s Data
The Services are not intended to be used by children. We do not knowingly collect personal information from children who do not have the capacity to consent to the collection of their personal information. Where we collect personal information from a young person, we will assess on a case-by-case basis whether they have the capacity to consent. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details below to request that it be deleted, and we will take reasonable steps to do so.
Security and Retention of Your Information
We take reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send to us may not be secure while in transit, and we recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on factors such as whether we need the information to maintain your account, provide you with the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. When we no longer need your personal information, we will take reasonable steps to destroy or de-identify it in accordance with the APPs.
If we experience a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme in the Privacy Act 1988 (Cth).
Your Rights and Choices
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law (we will tell you why if we do).
• Access. You may request access to the personal information we hold about you (APP 12).
• Correction. You may request that we correct personal information we hold about you that is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13).
• Deletion. You may request that we delete personal information we hold about you, subject to any legal obligations we have to retain it.
• Anonymity and pseudonymity. You may interact with us anonymously or using a pseudonym where it is lawful and practicable.
Direct Marketing
You may opt out of receiving direct marketing communications from us at any time. We will not use or disclose your personal information for direct marketing where you have asked us not to. You can opt out of promotional emails by using the unsubscribe option in any marketing email we send you. If you opt out, we may still send you non-promotional messages, such as those about your account or orders you have made. You may also contact us using the details below to opt out of any form of direct marketing.
We will respond to your request within a reasonable time. We may need to verify your identity before processing your request, as permitted or required under applicable law, and you may authorise an agent to make a request on your behalf (we will require proof of that authorisation).
Cookies and Tracking Technologies
We and our service providers use cookies and similar technologies to operate and improve the Services, remember your preferences, and for analytics and advertising. Most browsers let you remove or reject cookies through your browser settings, although doing so may affect how the Services function for you.
Third-Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found on them. Information you share on public or semi-public venues, including third-party social networking platforms, may also be viewable by other users. Our inclusion of such links does not imply any endorsement of those platforms or their operators, except as disclosed on the Services.
Overseas Customers
Our Services are directed at customers in Australia. If you access the Services from outside Australia, your personal information will be handled in accordance with this Privacy Policy and the Australian Privacy Principles. Depending on where you live, additional local data protection laws may also give you further rights; if you believe a local law applies to you, please contact us and we will consider your request.
Complaints
If you have a complaint about how we have handled your personal information, please contact us using the details below and we will investigate and respond to you. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last updated” date, and provide notice as required by applicable law.
Contact Us
If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please contact us at customercare@allaboutava.com.au
All About Ava
Greenbank QLD 4124, Australia