General Data Protection Regulation (GDPR) – AromaShop

GDPR (General Data Protection Regulation) came in to effect on May 25, 2018.

We have added this new section just to be more transparent and provide you as much as information we can based on the data that we collect.

We already have an amazing Privacy Policy in place that details everything about the data we collect and what sort of information we need and how/why we use it and in what way.

This section of GDPR is made to provide our customers with a peace of mind and to provide things in more detail.

Aroma Shop Website’s GDPR Policy

AROMA SHOP STORE GDPR POLICY

SECTION 1 – COMMENTS/REVIEWS

We have not turned on commenting at Aromashop.com.au.
However, we have a section of Review turned on at Aromashop.com.au. For security reasons and to combat spam, we have only allowed people with an account at Aromashop.com.au to leave a review.

SECTION – 2 CONTACT FORMS

We use contact forms at Aromshop.com.au provide by third-party service.
If you contact us via the contact us section, we will only use that data for customer service purpose only and we will never ever use that data (email address) to send marketing emails or share the data with any third-party.

SECTION – 3 HOW LONG WE RETAIN YOUR DATA

For users that register at Aroma Shop, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username).
Website administrators can also see and edit that information.

SECTION 4 – WHAT RIGHTS YOU HAVE OVER YOUR DATA

If you have made an account at Aroma Shop, you can request for the personal data file to be exported and emailed to you*.
You can always ask us to erase the data that have on file for you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

**For data exportation, please allow 2-3 business days, so we can process your request. You can email to support@aromashop.com.au for data exportation.

————————

AROMA SHOP’s STORE GDPR POLICY

SECTION 1 – WHAT WE COLLECT AND STORE

We collect information about you during the checkout process on our store.

While you visit our site, we’ll track:
• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
• Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
• Shipping address: we’ll ask you to enter this, so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of cart contents while you’re browsing our site (Read more about cookie Policy HERE).

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like user name and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as calculating taxes
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 2 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.
We will also store comments or reviews if you choose to leave them.

SECTION 2 – WHO ON OUR TEAM HAS ACCESS

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

• Order information like what was purchased, when it was purchased and where it should be sent, and
• Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfil orders, process refunds and support you.

SECTION 3 – WHAT WE SHARE WITH OTHERS

We share information with third parties who help us provide our orders and store services to you; for example, Sendle and AUSPOST. We will use your personal information like Name, Address and contact No for logistic purposes.

SECTION 4 – PAYMENTS

We accept payments through Stripe. When processing payments, some of your data will be passed to Stripe, including information required to process or support the payment, such as the purchase total and billing information.

Please see the Stripe’s Privacy Policy for more details.