Privacy policy

 

This Privacy Policy explains how whitakersgardencentre.shop collects, holds, uses and discloses personal information when individuals visit our website, place an order, contact us, subscribe to marketing or otherwise interact with us. We aim to handle personal information transparently and, where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to us, in accordance with those requirements.

Personal Information We Collect

Depending on the interaction, we may collect:

identity and contact details, such as name, email address, telephone number, billing address and delivery address;
order and transaction information, such as products purchased, order value, delivery instructions, returns, refunds and customer-service history;
payment-related information processed by our payment providers, such as payment method, payment status and a limited payment reference; we do not need to retain complete card credentials when payments are handled by those providers;
account information, preferences, reviews, survey responses and marketing choices;
technical and usage information, such as IP address, browser, device, operating system, pages viewed, referral source, approximate location, session activity, cookie identifiers and fraud signals; and
information supplied in communications, including photographs or videos sent in connection with a product, delivery or return.
How We Collect Information

We collect information directly from individuals through checkout, account, contact, review and subscription forms and through email or other communications. We also collect information automatically through cookies and similar technologies. We may receive information from service providers involved in commerce, payment processing, fraud prevention, analytics, advertising, delivery and customer support, and from publicly available sources where lawful and relevant.

Why We Use Personal Information

We may use personal information to:

provide the website, process and fulfil orders, take payment, arrange delivery and administer returns, refunds and consumer guarantee claims;
communicate about orders, enquiries, product safety, service changes and this Policy;
maintain accounts, personalise the shopping experience and remember preferences;
protect customers, our store and service providers against fraud, security incidents, misuse and unlawful activity;
measure and improve products, website performance, customer service and business operations;
send marketing where consent or another lawful basis permits, and manage opt-outs;
comply with legal, tax, accounting, recordkeeping and regulatory obligations and establish, exercise or defend legal claims; and
conduct a business reorganisation, sale or transfer subject to appropriate confidentiality and legal safeguards.
Cookies and Similar Technologies

Cookies and similar technologies may be used to keep the store functioning, maintain a cart or session, remember preferences, understand website use, prevent fraud and, where permitted, measure or personalise advertising. Browser settings can block or delete cookies, but essential store features may then not work properly. Any cookie preference tool displayed on the website should be used to manage available non-essential choices.

Disclosure of Personal Information

We may disclose personal information to service providers and contractors that help operate the store, including website and cloud hosting providers, payment processors, fraud-prevention providers, warehouses, suppliers, delivery carriers, customer-support services, analytics and marketing providers, professional advisers and regulators. Information may also be disclosed where required or authorised by law, to protect rights or safety, in connection with suspected unlawful activity, or as part of a genuine business transaction.

Service providers may use information only for authorised services or as otherwise permitted by their own lawful terms and privacy obligations. We do not disclose personal information merely in exchange for money. Some advertising or analytics disclosures may be treated as a sale or sharing under laws outside Australia; where such laws apply, any rights-based controls made available on the website may be used.

Overseas Recipients

Our online commerce, cloud, payment, support, analytics, fulfilment and delivery providers may store or access personal information outside Australia. The countries can vary according to the customer’s location, the provider and its infrastructure and may include the United States, Canada, countries in the European Economic Area, the United Kingdom, Singapore, China and other countries in which our service providers or their subprocessors operate. Where the Australian Privacy Principles apply, we take reasonable steps required by law in relation to overseas disclosures, subject to applicable exceptions.

Direct Marketing

We send commercial electronic messages only where we have the consent required by applicable law or another lawful basis. Messages identify the sender and include a functional unsubscribe method. An unsubscribe request is honoured within five working days as required by Australia’s Spam Act 2003. Transactional or service messages necessary to administer an order or account may still be sent.

Data Security and Retention

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. No internet transmission or storage system is completely secure. We retain information only for as long as reasonably necessary for the purposes described, including fulfilment, support, fraud prevention, legal compliance, dispute resolution and enforcement. When information is no longer required and law does not require retention, we take reasonable steps to destroy or de-identify it.

If the Notifiable Data Breaches scheme applies and an eligible data breach occurs, we will assess and notify affected individuals and the Office of the Australian Information Commissioner as required by law.

Access and Correction

Individuals may request access to personal information we hold about them or ask us to correct inaccurate, out-of-date, incomplete, irrelevant or misleading information. Email info@whitakersgardencentre.shop and provide enough information to verify identity and locate the relevant records. We will respond within a reasonable time. We may refuse or limit access where permitted by law and, where required, explain the reason and available complaint process.

Privacy Complaints

Send a privacy complaint to info@whitakersgardencentre.shop with a clear description of the concern. We will acknowledge and investigate the complaint, may request further information, and will aim to provide an outcome within 30 days. If the complaint is not resolved satisfactorily and the Privacy Act applies, the individual may contact the Office of the Australian Information Commissioner at oaic.gov.au.

Children

The store is intended for people capable of entering a binding purchase contract. We do not knowingly seek to collect personal information from children without appropriate involvement of a parent or guardian. A parent or guardian who believes a child has provided personal information may contact us.

Changes to this Policy

We may update this Policy to reflect operational, legal or regulatory changes. The effective date above shows when the current version took effect. Material changes will be communicated through the website or another appropriate method.

Contact

Email: info@whitakersgardencentre.shop
Website: whitakersgardencentre.shop