1. Information that you provide to us
In order to handle your purchases, provide customer service, improve our products, provide in-person experiences or events and send you information about our products, trends and promotions, we may ask you to provide us with your:
Where we can, we will allow you to deal with us anonymously or by using a pseudonym. However, in some circumstances, this may not allow us to provide you with a service you have asked for (such as delivery). If you ask us about this option, we will inform you if it is possible for an interaction to occur on an anonymous basis. Whilst you may opt to not provide us with your personal information, you should be aware that without this personal information, we may not be able to provide you with some of the services and/or products you are seeking.
We will not use Australian Government Identifiers, such as Medicare numbers, or a driver’s licence number as its own identifier of individuals.
Whilst links to third party websites may be provided on our website, we are not responsible for the content or practices of third party websites. These links are provided for your convenience and are not endorsed by us. No links may be made to our website without our prior written consent.
2. Other information we collect about you
We may collect information about you or your activities from third parties such as web hosting providers, analytics companies, social media platforms, data companies, and advertising services. This could include information such as:
Most of the personal information that we hold about you will be from your direct dealings with us, but we may also collect your personal information from a third party, anyone authorised to act on your behalf, or via social media. We will only do this if we have been advised that you have consented to the collection of your personal information, or if you would reasonably expect us to collect your personal information in that way.
We may also collect personal information from digital services that have collected your information, or by accessing data from other sources. We may then analyse that data and match it with the information that we already hold about you, in order to learn more about your preferences and interests. If we receive your personal information from a third-party, and it is not information we need for the purposes of our business activities, we will destroy or de-identify that information (provided it is lawful to do so).
You may be offered the option to join our loyalty program. If you choose to do this, we will collect personal information including your profile information, purchase history and the contents of any online wish list.
If you interact with any of our chatbots (automated messengers) we will record what you respond to these chatbots, how you interact with them and we will store data related to the device that you use. Depending on the platform for the chatbot and your permissions, the data we collect may include your IP address, social media handle, time zone, country and GPS location. The platform that provides the chatbot may also collect some of this data. For example, if the chatbot is provided on Facebook, this platform will collect your user data as well.
3. Third party automated information collection
When you visit any of our websites or applications or access our in-store Wi-Fi, we may automatically collect your:
browser types and version;
geo-location and in-store location;
your network activities when using our Wi-Fi; and/ or
how you use our site (search terms, page views, referring sites, content views).
4. Collection of Cookies
Cookies are pieces of information that a website transfers to your computer for record-keeping purposes. Cookies help provide additional functionality to the web site or to help us analyse site usage more accurately. We use information collected from cookies to better understand, customise and improve user experience with our website, services and offerings, as well as to manage our advertising. For instance, our server may set a cookie that keeps you from having to enter a password more than once during a visit to one of our sites. Also, we may use web analytics services that leverage cookies to help us to understand how visitors engage with and navigate our site (e.g., how and when pages in a site are visited and by how many visitors).
There are four main types of cookies that we use:
site functionality cookies – these allow you to navigate the site and use our features, such as ‘Add to Cart’;
site analytics cookies – these cookies allow us to measure and analyse how our customers use the site, to improve both its functionality and customer shopping experience;
customer preference cookies – when you’re browsing or shopping on our website(s), these cookies will remember your preferences (like your language or location), so we can make your shopping experience as seamless as possible, and more personal to you; and
targeting or advertising cookies – these are used to deliver ads relevant to you. They also limit the number of times that you see an ad and help us measure the effectiveness of our marketing campaigns.
If you have provided us with personal information (for example, if you join one of our loyalty programs or order a product), we may associate this personal information with information gathered through cookies. This allows us to offer increased personalisation and functionality.
In all cases in which cookies are used, the cookie will not collect personal information except with your permission. Your web browser can be set to allow you to control whether you will accept cookies, reject cookies or to notify you each time a cookie is sent to your browser. If your browser is set to reject cookies, websites that are cookie-enabled will not recognise you when you return to the website, and some website functionality may be lost.
5. Collection of information via Interest Based Advertising
We may use third-party advertising companies to display ads that are tailored to you based on how you browse and shop online. This is a practice commonly referred to as ‘interest-based’ or ‘behavioural’ advertising.
We allow these third parties to collect certain information when you visit our websites or use our applications, including non-personally identifiable information (browser type, subject of advertisements clicks on, session IDs) and personal data (such as static IP address). The information that we obtain about you from social media platforms depends on your account and privacy settings within the platforms and the platforms privacy policies. For example, you can use Ads Settings on your browser to manage the Google ads that you see and to opt out of Ads Personalisation. Please note that you may need to opt-out separately from each service.
The services that we may use from time to time include those offered by Facebook (Custom Audience), Google (including Google Display Network and DoubleClick), Yahoo, Adobe (including Campaign Manager and Analytics), and Microsoft.
You can find out more information about these services in the privacy policies for those services, including information on how to opt-out of certain things (for example, Google Analytics Advertising Features which uses age, gender, and interests categories to target our ads to you on the Google Display Network).
If you use a third party authentication service or social account (for example, Google or Facebook) to log into one of our websites, this allows our website to make a request for data about you. If you if you choose to log in with an authentication service or social account, your data will be shared between those social networks and us. You should therefore stay updated on your social networks’ privacy policies, and only use the social log-in for sites you feel comfortable sharing data with.
If you choose to connect your social media account to a member account or loyalty program with us (where such a feature is made available), you will share certain personal data from your social media account with us, for example, your name, email address, photo, list of social media contacts, and any other information that may be or you make accessible to us when you connect your social media account to a member account or loyalty program with us. We will engage in these activities to manage our contractual relationship with you, with your consent or where we have a legitimate interest. If you have the option to logon to your account through Facebook, Google, Instagram or other social media accounts, we collect profile information from your social media account including your name and email address. Please note that when accessing your account through a social media platform, the social media provider will be notified of your access to the account. Please refer to the privacy notice of the respective social media provider(s) for more information on how your personal information is stored.
6. Website Usage
Please note that our website is not directed to individuals under the age of sixteen (16). We ask that you do not provide your personal information to us if you are under that age. We also ask that you do not share the personal information of anyone else under that age with us, unless this is required by us and you are their parent or guardian, or have the express consent of their parent or guardian to do this.
Your personal information and other data is stored on our secure servers in Australia. These servers are only accessed by our authorised staff or authorised suppliers.
However, the Internet is not in itself a secure environment and we cannot give an absolute assurance that your personal information will be secure at all times. Transmission of personal information over the Internet is at your own risk and you should only enter, or instruct the entering of, personal information within a secure environment.
If we assess that there is a risk of ‘serious harm’ to you or a related individual, we will advise you at the first reasonable opportunity upon discovering or being advised of a security breach where your personal information is lost, stolen, accessed, used, disclosed, copied, modified or disposed of by any unauthorised persons or in any unauthorised manner (as required by law).
It is your responsibility to keep your login details, password and security questions in respect of our business with you safe and secure. You should notify us as soon as possible if you become aware of any unauthorised use of your login details, password or security questions, and immediately change that security information promptly.
To ensure you are accessing a secure server, check for the unbroken key or closed lock symbol located generally either at the bottom left or top right of your browser window. If it appears, then SSL is active. You can double check this by looking at the URL as well. If SSL is active, then the first characters of that line will read ‘https’ rather than just ‘http’. It is important for you to protect against unauthorised access to your password and to your computer. Ensure you logout when you have finished visiting our websites especially if you accessed them from a shared computer.
We may use your personal information for a number of purposes, including but not limited to:
to identify you and any records relating to you;
to provide you with the products and services you have requested;
to manage your requests for products and services including delivery, processing payments, providing refunds, discounts and incentives;