Privacy policy

Lash Direct is committed to providing quality services to you, and this policy outlines our ongoing obligations to you regarding how we manage your Personal Information. You should read this policy before providing and personal information to lash Direct.

We adhere to the Australian Privacy Principles (APPs) as outlined in the Privacy Act 1988 (Cth). The APPs govern the way in which we collect, use, disclose, store, secure, and dispose of your Personal Information. A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at https://www.oaic.gov.au/

What is Personal Information and why do we collect it?

We collect Personal Information such as names, addresses, email addresses, phone numbers  and credit information via various channels including interviews, correspondence, our website www.lashdirect.com.au, and other publicly available sources. This information is primarily collected to provide our services to you, offer information to our clients, and for marketing purposes.

Sensitive Information

Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record, or health information.

We do not collect sensitive information unless it's necessary for providing our services or required by law.

Disclosure of Personal Information

Your Personal Information may be disclosed to third parties where you consent to the use or disclosure or required by law.

Security of Personal Information

Your Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification, or disclosure. When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Information.

Access to your Personal Information

You may access the Personal Information we hold about you and request updates or corrections, subject to certain exceptions. We will not charge any fee for your access request but may charge an administrative fee for providing a copy of your Personal Information. In order to protect your Personal Information, we may require identification from you before releasing the requested information.

Maintaining the Quality of your Personal Information

It is important to us that your Personal Information is up to date. We will take reasonable steps to ensure that your Personal Information is accurate, complete, and up to date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and continue to provide quality services to you.

Use of Google Analytics

Lash Direct utilises Google Analytics to gather information about how visitors engage with our website. Google Analytics collects various data points, including but not limited to, the pages visited, the time spent on each page, the operating system and web browser used, and the IP address of the device accessing our website. This information is used to analyze trends, track user interactions, and improve the user experience on our website.

Google Analytics may also use cookies to collect data. Cookies are small files stored on your device's browser that track your activity on our website. You can opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google/dlpage/gaotout. Please note that Google Analytics may collect and process data in accordance with its own Privacy Policy, which can be found at http://policies.google.com/privacy. By using our website, you consent to the processing of data by Google Analytics in the manner and for the purposes set out above.

Additional Considerations:

In addition to the above, we want to ensure comprehensive coverage of your privacy rights and data handling practices. Therefore, we've included the following considerations:

1.      Data Breach Notification: Consumers should understand that procedures are in place to inform them and relevant authorities in the event of a data breach. This ensures transparency and compliance with data breach notification laws, showing how the website handles security incidents.

2.      Cookies and Tracking Technologies Consumers should be informed about the use of cookies or similar tracking technologies on the website. They should know how to manage their preferences regarding these technologies, demonstrating transparency in online tracking practices and empowering users to control their privacy settings.

3.      International Data Transfers: Consumers should know how international data transfers are managed to ensure compliance with data protection laws. This is particularly important when data is transferred to countries with different privacy regulations, emphasizing the website's commitment to protecting user data globally.

4.      Children’s Privacy: If the website's services are directed towards children, consumers should be aware of additional protections and disclosures provided in accordance with relevant laws like COPPA. This ensures compliance with regulations governing the collection and handling of children's data, prioritizing their privacy and safety.

5.      Specific Data Handling Practices: Consumers should understand details about specific data handling practices not explicitly addressed in other sections of the privacy policy. This includes information on data retention periods, anonymization procedures, or encryption methods, ensuring transparency in how user data is managed and secured.

6.      Updates to Policies: Consumers should know how they will be informed about any changes to the privacy policies and when the policies were last updated. This keeps consumers informed about modifications to privacy practices, promoting transparency and accountability in data handling.

7.      Legal Basis for Processing: Consumers should be informed about how they can withdraw their consent if consent is relied upon as the legal basis for processing their personal data. This ensures compliance with regulations requiring consent for certain types of data processing, empowering users to control their data usage.

8.      Contact Information for Data Protection Officer (DPO): Consumers should have access to contact details for the Data Protection Officer or the person responsible for privacy-related inquiries. This allows them to reach out with any questions or concerns regarding their privacy rights or data handling practices, promoting transparency and accountability in privacy management.

 

By addressing these points, we aim to enhance the comprehensiveness and clarity of our privacy policies, providing users with a better understanding of how their personal information is managed and protected.

Privacy Policy for Shopify Consumers Introduction:

This privacy policy describes the personal data that Shopify receives and processes when consumers interact with Shopify or use Shopify Consumer Services. For detailed information, please refer to the overall privacy policy available on Shopify’s website.

What Personal Data Shopify Receives:

Shopify collects various personal data categories, including profile and contact information, device details, payment information, and usage patterns, to enhance user experiences and provide personalised services.

How Shopify Use Your Personal Data:

Shopify uses personal data for service improvement, customization, product development, advertising, communication, security, and legal compliance purposes.

How Shopify Process Your Personal Data on Behalf of Shopify Merchants:

Shopify assists merchants in managing their shops and provides business services. This includes targeted advertising on third-party platforms.

Third Parties Who May Receive Personal Data

Personal data may be shared with vendors, marketing partners, legal entities, and with consumer consent. Interactions with third-party services are governed by their respective privacy policies.

Third Party Partners & Integration:

Shopify integrates with various third-party services, and interactions with these third parties are subject to their respective privacy policies.

Your Privacy Rights and Choices:

Consumers have rights to access, correct, delete, and opt out of certain uses of their personal data. Additional information can be found on Shopify's privacy portal.

Retention:

Shopify retains personal data as necessary for business or legal requirements.

How to Contact Us:

For privacy inquiries, consumers can visit Shopify's Privacy Portal or contact Shopify directly.

Changes to this Privacy Policy:

Updates to the Privacy Policy will be posted on Shopify's website.

Policy Updates

This Policy may change, and the latest version will be available on our website.

Please review both policies for comprehensive understanding and contact us if you have any queries.

Privacy Policy Complaints and Enquiries

Lash Direct

Perth, Western Australia

Email: admin@lashdirect.com.au