Privacy Policy
1. General Provisions
This Privacy Policy applies to all personal data processed by AULUNA (“we,” “us,” or the “Data Controller”). We comply with the Australian Privacy Principles outlined in the Privacy Act 1988 (Cth) and the General Data Protection Regulation (“GDPR”).
This policy explains how we collect, hold, use, disclose, and manage:
- Personal information in Australia: Information or an opinion about you, whether true or not, that identifies you or can reasonably be used to identify you.
- Personal data in Europe: Defined as any information relating to an identified or identifiable natural person under Article 4, No. 1 of the GDPR.
(Collectively referred to as “Personal Data”).
2. Your Privacy: Overview
At AULUNA, we take our obligations under current data protection laws seriously. We recognise the importance of the Personal Data entrusted to us and are committed to properly managing, protecting, and processing it.
3. Revisions to This Privacy Policy
AULUNA reserves the right to update this Privacy Policy periodically. Changes will be indicated by revising the date at the top of this policy. For significant changes, we will provide additional notice, such as an announcement on our website’s homepage.
4. Collection, Purpose, and Use of Personal Data
We collect Personal Data only when it is necessary for our business activities. When possible, we will collect Personal Data directly from you unless it is unreasonable or impracticable to do so or permitted by law. The type of data collected will depend on our specific interaction with you. Generally, the types of Personal Data we collect and use are outlined below.
4.1. Sensitive Information
We may collect sensitive information, such as health history or medication use, to enable you to purchase and receive a piercing and to respond to any queries, claims, or complaints. We may also collect other types of sensitive information as permitted or required by law.
4.2. Website Data Collection
When you access our website, your device automatically transmits data for technical purposes, including browser type, operating system, referrer URL, hostname, time of server request, and IP address. We use this data for:
- Load balancing to optimize website performance.
- Ensuring the security of our IT systems as per Article 32 of the GDPR.
- Maintaining proper system operations and facilitating criminal or legal prosecution if necessary.
5. Piercing Consent
To perform piercings in our store, we require you to complete a consent form accessible via QR codes in-store. This form must be filled out and digitally signed on your device; the information is then sent to the local store's email address.
6. Cookies
We use cookies and similar technologies to enable certain website features, store your preferences, recognize you on return visits, and maintain information about your website usage. Cookies are small files saved on your device by your browser.
7. Recipients and Disclosure of Personal Data
Personal Data may be disclosed for the primary purpose of providing products or services to you, as outlined in this Privacy Policy, or for other related purposes permitted or required by law. This includes sharing data with related companies or third parties with whom we have a commercial relationship.
7.1. Legal Enquiries
We may disclose Personal Data to law enforcement or injured third parties if there are concrete indications of illegal or abusive behavior. Data may also be shared to enforce contracts or comply with legal obligations.
7.2. Sharing with Third Parties
We may share Personal Data with third-party companies or service providers (“processors”) who are contractually affiliated with us to provide services. These processors are carefully selected and regularly reviewed to protect your rights and freedoms.
7.3. Disclosure to Authorities
We may disclose or transmit data to tax authorities, consultants, and other relevant bodies in the course of administrative processes, financial accounting, or compliance with legal obligations.
7.4. Compliance
If our business structure changes (e.g., by merging, selling subsidiaries, or other restructuring activities), we may share your Personal Data with third parties in accordance with this policy and relevant data protection laws.
8. Protecting Your Personal Data
We process Personal Data fairly, lawfully, and transparently. Processing includes, but is not limited to, the collection, storage, transfer, dissemination, or erasure of data. We take appropriate technical and organizational measures to protect Personal Data from unauthorized or unlawful processing and accidental loss, destruction, or damage. However, the Internet is not completely secure, and we cannot guarantee the absolute safety of data.
9. How We Secure Your Personal Data
We use various security measures to protect your Personal Data, such as:
- Access controls and authentication techniques.
- Data encryption during storage and transmission.
- Regular information security training for employees.
- Binding employees and contractors to information security policies.
Personal Data is stored on secure servers and databases, accessible only to authorized personnel.
10. Requirement to Provide Data
You are not legally or contractually obliged to provide your Personal Data. However, certain data may be necessary for us to offer our services, process your inquiries, initiate or execute contracts, or provide website features.
If data is necessary, this will be indicated as mandatory. Failure to provide required data may limit the functionality and services we can provide.
11. Processing for Other Purposes
Your data will only be processed for purposes other than those described in this Privacy Policy if permitted by law or with your consent. We will notify you of any changes in the purpose of data processing before any further processing occurs.
AULUNA PTY LTD
ABN 22 674 660 621