Privacy policy
Last Updated: Oct 2023
Welcome to Ayla Boutique. This Privacy Policy outlines how Ayla Boutique (referred to as the "Site," "we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, make purchases from www.ayla.com.au (the "Site"), or communicate with us in any way (collectively, the "Services"). In this Privacy Policy, "you" and "your" refer to you as the user of the Services, regardless of whether you are a customer, website visitor, or another individual from whom we have collected information in accordance with this Privacy Policy.
Please take the time to carefully read this Privacy Policy. By using and accessing any of the Services, you are indicating your consent to the collection, use, and disclosure of your information as outlined in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, we kindly ask that you refrain from using or accessing any of the Services.
Changes to This Privacy Policy
Please be aware that this Privacy Policy may be subject to updates and changes from time to time. These updates may be initiated to reflect alterations in our practices or for other operational, legal, or regulatory reasons. In the event of any updates, the revised Privacy Policy will be made available on the Site, and the "Last updated" date will be modified accordingly. We will also take any necessary measures as mandated by applicable law to ensure compliance.
How We Collect and Use Your Personal Information
In order to provide you with the Services, we collect personal information from various sources over the past 12 months, as outlined below. The information we collect and its specific use depend on the manner in which you interact with our Site.
Additionally, beyond the uses explicitly mentioned below, we may utilize the information collected about you for purposes such as communication, service provision, adherence to legal obligations, enforcement of applicable terms of service, and the protection or defense of the Services, our rights, and the rights of our users and others.
Types of Personal Information We Collect
The specific personal information we gather depends on your interaction with our Site and utilization of our Services. When we refer to "personal information," we mean data that can identify, relate to, describe, or be associated with you. The following sections delineate the categories and precise types of personal information we gather.
Information Directly Provided by You
Information that you voluntarily provide to us via our Services may encompass:
- Basic contact details, which includes your name, address, phone number, and email.
- Order-related information, encompassing details like your name, billing address, shipping address, payment confirmation, email address, and phone number.
- Account information, which comprises your username, password, and security questions.
- Shopping-related data, including the items you view, place in your cart, or add to your wishlist.
- Customer support information, which pertains to the content you include in your communications with us, such as messages sent through the Services.
Certain features of our Services may necessitate your direct provision of specific information about yourself. You maintain the option to abstain from providing this information; however, doing so may restrict your ability to use or access these features.
Information We Collect through Cookies
We also automatically gather specific data about your interaction with our Services, which we refer to as "Usage Data." To achieve this, we employ technologies such as cookies, pixels, and similar tools, collectively known as "Cookies." Usage Data encompasses details about how you access and utilize our Site and your account. This may include information related to your device, browser, network connection, IP address, and other details concerning your engagement with the Services.
Information We Obtain from Third Parties
Furthermore, we may acquire information about you from third-party sources, including vendors and service providers who collect data on our behalf. Such sources include:
- Companies that provide support for our Site and Services, like Shopify.
- Our payment processors, who gather payment information (e.g., bank account details, credit or debit card information, billing address) for the purpose of processing your payments, thereby enabling order fulfillment and the provision of requested products or services as part of our contractual obligations to you.
Additionally, when you visit our Site, open or interact with emails we send you, or engage with our Services or advertisements, either we or third parties we collaborate with may automatically collect specific information. This data is collected through online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.
It's important to note that any information received from third parties will be handled in accordance with the guidelines set forth in this Privacy Policy. We are not held responsible for the accuracy of information provided to us by third parties, nor are we liable for the policies or practices of such third parties. For further details, please refer to the section labeled "Third Party Websites and Links."
How We Use Your Personal Information
-
Providing Products and Services: We employ your personal information to offer you our Services and fulfill our contractual obligations to you. This includes processing your payments, completing your orders, sending you relevant notifications concerning your account, purchases, returns, exchanges, or other transactions. It also involves creating, managing, and maintaining your account, facilitating shipping, processing returns and exchanges, and allowing you to post reviews.
-
Marketing and Advertising: Your personal information is utilized for marketing and promotional purposes. This encompasses sending marketing, advertising, and promotional communications through various channels like email, text messages, or postal mail. Additionally, it entails displaying advertisements for products or services, and tailoring the content and presentation of our Services and advertisements on our Site and other platforms.
-
Security and Fraud Prevention: We rely on your personal information to detect, investigate, and take necessary actions in response to potential instances of fraud, illegal activities, or malicious behavior. When you register for our Services and create an account, you hold the responsibility of safeguarding your account credentials. We strongly recommend against sharing your username, password, or other access information with any third party. If you suspect that your account's security has been compromised, please reach out to us immediately.
-
Communicating with You: We use your personal information to offer customer support and enhance the quality of our Services. This aligns with our legitimate interests, as it allows us to be responsive to your needs, provide efficient services, and maintain a strong business relationship with you.
Cookies
Our Site, like many others, uses cookies. You can find detailed information about the cookies we use to power our store with Shopify at Shopify's Cookie Policy. Cookies play a crucial role in enhancing and optimizing our Site and Services. They help us remember your actions and preferences, conduct analytics, and gain a better understanding of how users interact with our Services. This allows us to administer, improve, and optimize our Services, all within our legitimate interests.
Please note that most web browsers are set to automatically accept cookies by default. However, you have the option to configure your browser settings to either remove or reject cookies through its controls. Be aware that blocking or removing cookies may have a negative impact on your user experience. It can result in certain features and overall functionality not working correctly or being unavailable. Additionally, it's essential to understand that blocking cookies may not completely prevent the sharing of information with third parties, such as our advertising partners.
How We Disclose Personal Information
Under certain circumstances, we may disclose your personal information to third parties, provided that it aligns with the principles outlined in this Privacy Policy. These circumstances may include:
-
Vendors and Service Providers: We may share your personal information with vendors and third parties who provide various services on our behalf. These services could range from IT management and payment processing to data analytics, customer support, cloud storage, and fulfillment and shipping.
-
Business and Marketing Partners: Our business and marketing partners, including Shopify, may receive your information to deliver services and market to you. Their use of your information will be in accordance with their own privacy notices.
-
Consent-Driven Disclosures: If you directly request or consent to the disclosure of specific information to third parties, or if you use features like social media widgets or login integrations, we may share your data with your consent. For instance, this may occur when you request product shipments.
-
Corporate Affiliates: We may share personal information within our corporate group or with our affiliates for the purpose of maintaining and advancing our business operations.
-
Business Transactions: In scenarios such as mergers or bankruptcy proceedings, we may disclose your personal information. This disclosure may also be necessary to adhere to legal obligations, respond to subpoenas, search warrants, and similar requests, enforce relevant terms of service, or safeguard and defend our Services and the rights of our users and others.
Rest assured, we prioritize your privacy and ensure that all disclosed information adheres to the guidelines set forth in this Privacy Policy.
We have, in the past 12 months disclosed the following categories of personal information and sensitive personal information (denoted by *) about users for the purposes set out above in "How we Collect and Use your Personal Information" and "How we Disclose Personal Information":
| Category | Categories of Recipients |
|---|---|
|
|
We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.
We have “sold” and “shared” (as those terms are defined in applicable law) personal information over the preceding 12 months for the purpose of engaging in advertising and marketing activities, as follows.
| Category of Personal Information | Categories of Recipients |
|---|---|
| Identifiers such as basic contact details and certain order and account information | Business and marketing partners |
| Commercial information such as records of products or services purchased and shopping information | Business and marketing partners |
| Internet or other similar network activity, such as Usage Data | Business and marketing partners |
User Generated Content
Our Services may allow you to submit product reviews and other user-generated content. Please note that if you choose to share such content in public areas of our Services, it will be accessible to the general public.
It's essential to understand that we do not have control over who can access the information you decide to make available. We cannot guarantee the privacy or security of this information, nor can we ensure that those who access it will respect your privacy or maintain its security. We are not responsible for how information is used or misused when disclosed or received from third parties.
Third Party Websites and Links
Our website may contain links to third-party websites and online platforms. These sites are not under our control, and we recommend reviewing their privacy and security policies, as well as their terms and conditions. We cannot guarantee or take responsibility for the privacy or security of these external sites, the accuracy of information found on them, or the reliability of such information.
Please be aware that when you share information on public or semi-public platforms, including third-party social networking sites, it may be visible to other users of our Services and/or users of those third-party platforms without limitations on its use by us or third parties. Inclusion of links to such platforms does not imply endorsement by us unless explicitly disclosed on our Services.
Children’s Data
Our Services are not intended for use by children, and we do not knowingly collect personal information from children. If you are a parent or guardian and discover that your child has provided us with their personal information, please contact us using the provided contact details, and we will assist you in having this information deleted.
As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" personal information of individuals under 16 years of age, as defined by applicable law. Your child's privacy is important to us, and we take steps to ensure their data is not shared or sold.
Security and Retention of Your Information
It's essential to understand that while we take various security measures to protect your information, no security system is entirely perfect or impervious. Therefore, we cannot guarantee "perfect security." Additionally, please be aware that information you transmit to us may not be entirely secure during its transit.
For this reason, we strongly recommend against using unsecured channels to communicate sensitive or confidential information to us. If you need to share such information, consider using secure and encrypted methods.
The length of time we retain your personal information depends on several factors. These factors include whether we need the information to maintain your account, provide our Services, comply with legal obligations, resolve disputes, or enforce other relevant contracts and policies. We aim to retain information only for as long as necessary to fulfill these purposes.
Your Rights and Choices
Depending on your jurisdiction of residence, you may possess certain rights concerning your personal information. These entitlements encompass:
-
Right to Access / Know: You may have the prerogative to request access to the personal information we have on record about you. This includes detailed insights into how we utilize and distribute your information.
-
Right to Delete: You may hold the privilege to request the removal of personal information retained in our databases.
-
Right to Correct: You may be entitled to request rectifications to any inaccuracies in your personal information stored by us.
-
Right of Portability: In certain circumstances and subject to specific exceptions, you may have the right to receive a copy of your personal information and request its transfer to a third party.
-
Right to Opt-out of Sale or Sharing or Targeted Advertising: You may possess the right to instruct us not to "sell" or "share" your personal information or opt out of the processing of your personal information for purposes characterized as "targeted advertising" under applicable privacy laws. When you visit our Site with the Global Privacy Control opt-out preference signal enabled, it will automatically be construed as a request to abstain from the "sale" or "sharing" of information pertaining to the device and browser you utilize.
-
Right to Limit and/or Opt-out of Use and Disclosure of Sensitive Personal Information: You may be entitled to direct us to restrict the use and/or disclosure of sensitive personal information solely to the extent necessary for providing Services or goods typically anticipated by an average individual.
-
Restriction of Processing: You might have the right to request the cessation or restriction of our processing of your personal information.
-
Withdrawal of Consent: Should we rely on your consent to process your personal information, you retain the right to retract that consent.
-
Appeal: In the event that we decline your request, you may have the right to appeal our decision by responding directly to our denial.
-
Managing Communication Preferences: While we may dispatch promotional emails, you have the option to opt out at any time by utilizing the unsubscribe feature in our emails. Be advised that even if you opt out, you may still receive non-promotional emails, such as those related to your account or orders.
You can act upon these rights by adhering to the instructions provided on our Site or by contacting us through the provided contact details. Rest assured that we are committed to not discriminating against you for exercising these rights. However, to substantively respond to your request, we may need to gather information from you to verify your identity, which may include your email address or account particulars.
Moreover, you have the liberty to designate an agent to act on your behalf to exercise your rights. In such instances, we will mandate the agent to supply proof of your authorization, and we may require you to personally verify your identity with us.
For those who wish to curtail Shopify merchants from employing your personal information for tailored advertising on third-party websites, please visit https://privacy.shopify.com/en.
Complaints
If you wish to file a complaint regarding our processing of your personal information, kindly reach out to us using the provided contact details below. In the event that our response to your complaint does not meet your satisfaction, depending on your jurisdiction, you may possess the right to appeal our decision by contacting us through the designated contact information or by lodging your complaint with your local data protection authority.
International Users
Please be aware that we may transmit, retain, and process your personal information beyond the borders of your country of residence, including the United States. Furthermore, your personal information may be processed by our personnel, third-party service providers, and partners situated in these nations.
In cases where we transfer your personal information outside of Europe, we will rely on acknowledged transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by the relevant competent authority of the UK, as applicable. This is carried out unless the data transfer pertains to a country deemed to offer an adequate level of protection.
Contact
For any inquiries regarding our privacy practices or this Privacy Policy, or if you intend to exercise any of the rights afforded to you, we invite you to contact us via email at sales@ayla.com.au.