Privacy Policy
At Bricks and Blocks Library we understand that privacy is extremely important and we do all we can to ensure your data is secure.
To work the way we do, Bricks and Blocks Library has to remember some of your personal information to provide you with the best possible service.
You've shared this information with us so we can share our Bricks and Blocks Library with you. Without this we wouldn't know where to send your sets and what sets you like best!
What Is Covered In This Policy?
This policy describes how Bricks and Blocks Library ("we", "us", "Bricks and Blocks Library") will make use of your personal data when you use and interact with our website at bricksandblockslibrary.com.au ("Site").
It also describes your data protection rights, including a right to object to some of the processing which we carry out and where we rely on consent, a right to withdraw your consent. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.
We may also provide you with additional information when we collect personal data where we feel it would be helpful to provide relevant and timely information.
What Information Do We Need To Collect?
We collect and process personal data about you when you interact with us and our Site, and when you complete an order. This includes:
· your name and contact information;
· username and password when you become a member;
· your date of birth;
· your payment and delivery details, including billing and delivery addresses, transaction history and credit card details, when you use our service;
· your interactions with customer services; and
· your marketing preferences, including any consents you have given us.
We may also automatically collect the following information:
· technical information, including your device’s IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, unique device identifiers and advertising identifiers; and
· information about your visit, including the URL clickstream to, through and from our Site (including date and time); products you viewed or searched for, the content (and any ads) that you view or interact with, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
Some of this information is may be collected using cookies and related technologies, and often provided by third party providers such as Google Analytics. To learn more, please see our Cookies Policy.
To the extent permitted by applicable law, we may receive additional information about you, such as demographic data or fraud detection information, from third party service providers and/or partners, and combine it with information we have about you in order to improve the service and marketing that you receive from Bricks and Blocks Library.
How Do We Use This Information, And What Is The Legal Basis For This Use?
We process this personal data for the following purposes:
· arranging the delivery or other provision of products, prizes or services and providing customer services;
· to fulfil a contract, or take steps linked to a contract: this is relevant where complete an order on our site or enter a competition we run. This includes:
· taking payments;
· communicating with you;
As required by us to conduct our business and pursue our legitimate interests, in particular to:
· provide products and services you have requested, and respond to any comments or complaints you may send us;
· monitor use of our Site and online services, and to, improve and protect our products, content, services and Site, both online and offline and your experiences with us including via research and demographic studies; analytics and data cleansing and measuring the effectiveness of our advertising campaigns;
· personalise our Site, recommend products or services for you or to provide targeted communications and advertising both on our Site and other selected partner websites, or via loyalty and other customer programmes;
· if you provide a credit or debit card as payment, we also use a third party (currently Stripe or paypal) to check the validity of the sort code, account number and card number you submit in order to prevent fraud;
· monitor customer accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law;
· investigate any complaints received from you or from others, about our Site or our products or services; and
· use your personal data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation) or to enforce or apply our Terms of Use, or any other agreements; or to protect the rights, property, or safety our customers, or others and for our internal record keeping and reporting purposes.
Where you give us consent:
· we will send you direct marketing by email in relation to our relevant products and services;
· we place cookies and use similar technologies in accordance with our Cookies Policy and the information provided to you when those technologies are used; or
· on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law:
· in response to requests by government or law enforcement authorities conducting an investigation; or
· to investigate issues of product liability.
Withdrawing Consent Or Otherwise Objecting To Direct Marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your personal data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by changing your communication preferences in your account or by contacting us using the details set out below.
Who Will We Share This Information With, Where And When?
We will share your personal data with:
· authorised supply, delivery and fulfilment companies to process and complete your subscription such as Australia Post:
· banks and our payment services provider (Stripe or PayPal) for the purpose of transaction processing;
· legal advisors, accountants, auditors and other professional advisors;
· third parties, where we have your permission to do so (e.g. social networks providers). Your personal data will become subject to the privacy policies of those third parties when your personal data is shared with them;
· government authorities, court, regulatory authority and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;
· third party service providers, who will process it on our behalf for the purposes identified above. In particular, we use third party technology and platform providers for website hosting, maintenance, call centre operation and email service delivery.
Security
We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. We use ‘https’ technology to secure access to all areas of our Site. Access to your data is password-protected, and sensitive data such as payment card information is held securely by our 3rd party payment providers and tokenized to ensure it is protected. We ensure that our systems are regularly monitored for possible vulnerabilities and attacks.
Links To Other Websites
Our Site may contain links to other websites of interest. However, once you have used these links to leave our Site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy notice. You should exercise caution and look at the privacy statement applicable to the website in question.
What Rights Do I Have?
In addition to rights to withdraw your consent or object to direct marketing (as outlined above, you have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller.
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with using the details set out below. You can also deactivate your account and request that we delete your personal data through the account management portal or getting in touch with us.
In order to provide our service, you must provide us with your name, address, email address user name and password and billing details. If this information is not provided, then we cannot provide the service. All other provision of your information is optional. A failure to provide this information may mean that other functionalities and services are available such as our product recommendations.
How Do I Get In Touch With You?
We hope that we can satisfy any queries you may have about the way we process your personal data. If you have any concerns about how we process your personal data, or would like to opt out of direct marketing, you can get in touch at bricksandblockslibrary@outlook.com.
How Long Will You Retain My Information?
Where we process personal data, we do this for as long as you are an active user of our Site.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years from your last interaction with us.