We are committed to protecting the privacy of all persons who interact with us, including our contacts, customers, and suppliers (you/your) and complying with the Australian Privacy Principles as set out in the Privacy Act 1988 (Cth) (Privacy Act).
In this Privacy Policy we describe how we manage your personal information. By purchasing our products or using services and/or visiting our website skinglowalchemy.com, you agree to the terms of this Privacy Policy.
Personal information we collect
The kinds of personal information that we collect include:
- contact details such as your name, residential or postal address, email address and phone number;
- if you are a customer, bank account and/or credit card details for agreed billing purposes;
- any information that you provide to us during your account creation or that you add to your user profile;
- preferences and password for using our website and your computer and connection information;
- any other personal information you provide while interacting with us including, when you make an inquiry or provide feedback or provide information about your affairs, change your contact details or financial and credit card information.
How we collect personal information
We collect personal information by various means including:
- when you create a user account or add information to your user profile;
- when you contact us with a question or otherwise interact with us including when you complete an online contact form on our website or send us an email or contact us by telephone;
- when you purchase any of our products through our website;
- when you visit our website; and
- when you sign up for our mailing list
IP address
Our website may also collect Internet Protocol (IP) addresses. IP addresses are assigned to computers on the internet to uniquely identify them within the global network. We may collect and manage IP addresses as part of the service of providing internet session management and for security purposes. We may also collect and use web log, computer and connection information for security purposes and to help prevent and detect any misuse of, or fraudulent activities involving our website and internal management systems.
Cookies and other technologies
When you use our website, we may collect certain information about your use. Our website may store cookies on the web browser of your computer to better serve you upon subsequent visits to our website. Cookies are data that a website transfers to an individual’s hard drive for record-keeping purposes. Cookies can facilitate a user’s ongoing access to and use of a site. Cookies allow us to track usage patterns and compile data that can help us improve our content and products and services. The types of information that cookies can collect includes information about your computer, device, browser, potentially your IP address, and other software or hardware.
Where practicable we collect personal information about you directly from you.
The purposes for which we collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information in order to:
- supply our products and services to you;
- process any purchases of products and/or services that you may make through this website, including charging, billing and collecting debts and shipment of products to you;
- make changes to your account;
- respond to any queries or feedback that you may have;
- conduct research and development in respect of our products and services, and to market and promote our products and services;
- conduct our general business operations and internal management and administrative operations; and
- for any other purpose reasonably considered necessary or desirable by us in relation to our business operations.
When we disclose your personal information
In order to supply our products and services and to conduct our business operations, we may disclose your personal information outside our organisation to third parties. If we disclose your personal information to a third party, we will take reasonable steps to ensure that the third party will use, store or disclose your personal information in a manner which is consistent with this Privacy Policy.
We may disclose personal information to:
- our contracted third-party suppliers or service providers including organisations that we engage to help us provide and manage our products and services, and internal management and administration operations;
- our professional advisers, including our accountants and lawyers;
- organisations who manage our business strategies;
- third parties involved in the sale or merger of all or part of our assets or business; and
- government agencies or regulatory authorities to comply with our legal and tax obligations or as authorised or required by law.
We may also disclose your personal information where we are permitted to do so under the Privacy Act – for example, where we have reasonable grounds to suspect that unlawful activity is or has been engaged in or where harm may be caused to others.
Disclosure of personal information overseas
Personal information that we collect about you may be stored or otherwise processed by third party service providers with data centres based in countries including the United States, Europe and the Philippines such as Shopify, SamCart, Google Workspace, Klavyio, Dropbox, and FloDesk. We consider that the collection and such processing of this information is necessary to pursue our legitimate business interests in a way that might reasonably be expected (eg, to analyse how our customers use our products and services, develop our products and services and grow our business).
We will take reasonable steps to ensure that all third parties that act as “data processors” or store their data overseas for us provide sufficient guarantees and implement appropriate technical and organisational measures to secure your data including any personal information.
Storage and security of your personal information
We take reasonable physical, technical and administrative safeguards to protect your personal information from misuse, interference, loss, and unauthorised access, modification and disclosure. In our business, personal information may be stored both electronically (on our computer systems and with our website hosting provider) and in hard-copy form. Firewalls, anti-virus software and email filters, as well as passwords, protect all of our electronic information. Likewise, we take all reasonable measures to ensure the security of hard-copy information.
Duration of retention of your data
We will only keep your data for as long as is necessary for the purpose for which it was collected, subject to satisfying any legal, accounting or reporting requirements. At the end of any retention period, your data will either be deleted completely or anonymised (for example, by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning).
Opting out of marketing communications
We may, from time to time, send you newsletters, invitations and updates about our products and our services. You can opt out of receiving such further communications by notifying us using our contact details below or by clicking the “unsubscribe” option at the bottom of any marketing email received from us.
Third party websites
You may click-through to third party websites from this website, in which case we recommend that you refer to the privacy statement of the websites you visit. This Privacy Policy applies to this website only and we assume no responsibility for the content of any third-party websites.
Redirection to payment services
In particular, when you submit an order to us, you may be automatically redirected to a third-party payment platform such as Stripe, PayPal, ApplePay, GooglePay or ShopPay in order to complete the required payment. Such payment service is not part of this website. As noted above, we are not privy to any of the bank account, credit card or other personal information that you may provide to a third party payment service, other than information that is required in order to process your order and deliver your purchased items to you (eg, your name, email address and billing/postal address). We recommend that you refer to the relevant third party’s privacy statement if you would like more information about how that service collects and handles your personal information.
Marketing
We may use Google Ads and/or Facebook marketing services to advertise on third party websites to previous visitors to this website based upon their activity on our website. This allows us to tailor our marketing to better suit your needs and to only display advertisements that are relevant to you. Such advertising may be displayed on a Google search results page or a website in the Google Display Network or inside Facebook. Google and Facebook may use cookies and/or pixel tags to achieve this. Any data so collected by Google and/or Facebook will be used in accordance with their own respective privacy policies. None of your personal Google and/or Facebook information is reported to us.
You can set preferences for how Google advertises to you using the Google Ads Settings page. Facebook has enabled an Ad Preferences that enables you to opt out of targeted advertising.
Access to your personal information
You can contact us to access, correct or update your personal information. Unless we are subject to a restriction on giving access to the information (e.g. confidentiality obligations) and we are permitted to refuse you access under the Privacy Act, we will endeavour to make your information available to you within 30 days. Examples of circumstances where we may refuse to give you access to your personal information include where:
- giving access would be unlawful;
- we reasonably believe that giving you access would pose a serious threat to the life, health or safety of any individual or to public health or public safety;
- giving access would have an unreasonable impact on the privacy of others;
- the information could reveal the intentions of a party in negotiations;
- giving access could prejudice the taking of appropriate action in relation to unlawful activity; and
- giving access could reveal evaluative information in a commercially sensitive decision-making process.
If you ask us to correct your personal information, we will correct it, or, if we consider more appropriate, note your request for amendment of the information on your record.
We will not charge you to make a request to access your record but we may charge you to actually provide access, depending on the costs associated with obtaining and providing the material.
These actions can usually be taken by contacting a customer relations representative using the contact information on the "Contact Us" section below.
Notification of Changes
If we decide to change our Privacy Policy, we will post a copy on our website.
Contact us
If you would like to contact us about this Privacy Policy or if a breach of this Privacy Policy occurs, you can contact us or make a complaint to us by sending it to:
Email: cress[AT]skinglowalchemy.com
Attention: Cressida Pollack
We will endeavour to respond to you within 30 days. If you are not satisfied with our response, you may seek a review by contacting the Office of the Australian Information Commissioner using the information available at http://www.oaic.gov.au/privacy/privacy-complaints.