Definitions

• • Australian Privacy Principles means the 13 Australian Privacy Principles as set out in Schedule 1 of the Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth), which amends the Privacy Act.
  • Controller has the same meaning as defined in Article 4(7) the GDPR as amended from time to time.
  • Cookies means very small files which a website uses to identify you when you return to a website and to store details about your use of the website. Cookies are not malicious programs that access or damage your computer.
  • GDPR means the European Union General Protection Regulation.
  • Personal Data has the same meaning as defined in Article 4(1) of the GDPR as amended from time to time.
  • Personal Information has the same meaning as defined in s 6(1) of the Privacy Act as amended from time to time.
  • Privacy Act means the Privacy Act 1998 (Cth) as amended from time to time.
  • Privacy Policy means the Privacy Policy set out in this document as amended from time to time.
  • Processor has the same meaning as defined in Article 4(8) of the GDPR.
  • Sensitive Information has the same meaning as defined in s 6(1) of the Privacy Act as amended from time to time.
  • Services means our Styling Services, our website www.fabledstyling.com, our social media pages and any communication with you about our Styling Services, our website or social media pages (regardless of method of communication).
  • Special Categories of Personal Data has the same meaning as defined in Article 9 of the GDPR.
  • Styling Services means personal styling advice in the form of one-on-one or group consultations (whether provided in person, via video chat or other direct form of communication such as telephone, email or direct message), written advice and / or personal styling courses or programs available to download or purchase from our website.

We respect your privacy

• • Lucy van Berkel trading as Fabled Styling (ABN 86 768 265 615) respects your right to privacy and is committed to safeguarding the privacy of our customers and website visitors. 
  • We adhere to the Australian Privacy Principles and to the extent applicable, the GDPR.
  • Personal Information is information we hold which is identifiable as being about you. This includes information such as your name, email address, physical address, identification number, or any other type of information that can reasonably identify you, either directly or indirectly.
  • This Privacy Policy explains the way we collect, process, store, use or otherwise treat Personal Information obtained through the use of our Services.
  • By using the Services, you consent to be bound by the terms as set out in this Privacy Policy.
  • We will update this Privacy Policy whenever our approach to treating your Personal Information changes. We may modify this Privacy Policy at any time, in our sole discretion, and all modifications will be effective immediately as soon as the amended policy is publicised on our website.
  • You may contact us in writing at PHYSICAL ADDRESS, Victoria  or via email at [email protected] for further information about this Privacy Policy.

What Personal Information we collect

• • We will, from time to time, receive, collect and store Personal Information in order to provide the Services.
  • We collect Personal Information from you in a variety of ways, including when you interact with us electronically or in person, when you access our website and when we engage in business activities with you in order to provide the Services.
  • In some instances, it may be possible to deal with us anonymously or while using a pseudonym. We will always attempt to provide this as an option for you where it is practicable to do so.
  • The main types of Personal Information we collect, and the purposes for which it is collected, are outlined below. 

Personal Information provided directly to us

• • We collect any information that you provide directly to us in the course of registering for, acquiring, using or connected to any of the Services.
  • This information may include your name, date of birth, age, gender, contact details, occupation and any other Personal Information you choose to provide. 

When you visit our website

• • When you visit our website, we may collect certain information such as your browser type, operating system, website visited immediately before coming to our website. 
  • We use this information in aggregate to analyse how people use our website, so that we can improve the Services.

Cookies

• • We may use Cookies on our website from time to time. 
  • Most web browsers automatically accept Cookies but you can choose to reject Cookies by changing your browser settings. If you do choose to reject Cookies, it is important to note that this may prevent you from taking full advantage of our website.
  • We may use Cookies in order to analyse website traffic (in order to help us provide a better visitor experience) or to serve relevant ads to website visitors through third party services (which may appear on our website or other websites you visit).

Third party sites and social media

• • Our site may, from time to time, feature links to other websites not owned or controlled by us. 
  • These links are meant for your convenience only, and do not constitute sponsorship, endorsement or approval of any third party website. 
  • We are not responsible for the privacy practises of any other third party website and we encourage our users to read the privacy statements of each website that collects Personal Information.
  • From time to time, it may be possible to interact with us (and / or access the Services) online via third party social media platforms. 
  • If you interact with us (and / or access the Services) through a third party social media platform, we may obtain (and otherwise keep, use, or disclose) Personal Information connected with your social media account including your username, profile picture, email address, friends / followers / following lists, and any other Personal Information you have provided and allowed the third party social media platform to disclose to us.

Sensitive Information

• • We may, from time to time, receive, collect and store Personal Information that is also Sensitive Information.
  • This information may include your racial or ethnic origin, religious beliefs or affiliation, or sexual orientation.
  • We will only collect Sensitive Information with your consent.
  • We will only use Sensitive Information in order to provide you with the Services. 

Financial information

• • We may, from time to time, use an unaffiliated payment service in order to process payments via our website.
  • If you provide any Personal Information to an unaffiliated payment service (such as your name, address or credit card details), that information will be dealt with in accordance with the privacy policy of that service.

How we use your personal information

• • We may use your Personal Information in order to provide you with information about, provide you with, manage, discuss, research or further develop the Services.
  • We will only use your Personal Information for the purposes to which you consent.

Direct marketing

• • We may, from time to time, use your Personal Information for direct marketing purposes.
  • We will obtain your consent to use your Personal Information for direct marketing purposes.
  • You may, at any time, notify us that you do not wish for your Personal Information to be used for direct marketing purposes. You may do this by contacting us directly via email at [email protected] or you may follow the link to unsubscribe from marketing communications contained at the bottom of our marketing emails. 

Disclosure of your Personal Information

• • We may, disclose your Personal Information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this Privacy Policy.
  • We may disclose your Personal Information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, legal proceedings or in response to a law enforcement agency request.
  • We may disclose your Personal Information to third parties such as web hosting platforms, e-mail marketing providers, booking service providers, or payment gateway operators who assist us in delivering the Services.
  • If there is a change of control in our business, a sale or a transfer, we reserve the right to transfer, to the extent permissible at law, our user databases together with any Personal Information (and non-personal information) contained in those databases.

Clauses relating to the GDPR for European Union Residents

• • If you are a resident of the European Union, you have certain rights as to how your Personal Data is obtained, collected, stored and used. 
  • Personal Data is information we hold which is identifiable as being about you. This includes information such as your name, email address, physical address, identification number, or any other type of information that can reasonably identify you, either directly or indirectly. 
  • We comply with the principles of data protection set out in the GDPR for the purpose of fairness, transparency and lawful data collection and use.
  • We process your Personal Data as a Processor and/or to the extent that we are a Controller.
  • In accordance with the GDPR, we must establish a lawful basis for processing your Personal Data. The legal basis for which we collect your Personal Data depends on the data that we collect and how we use it.
  • We will only collect your Personal Data with your express consent. Any Personal Data that we collect will be for a specific purpose, limited to the extent necessary and not excessive for its purpose. 
  • We will only collect Special Categories of Personal Data with your explicit consent (or otherwise in accordance with the GDPR).
  • You may remove your consent for us to collect, obtain, store, use or disclose your Personal Data at any time. 
  • We will keep your Personal Data up to date, safe and secure.
  • We will process your Personal Data:
    • if it is necessary for us to do some for our legitimate interests (and to provide you with the Services);
    • to fulfil a contractural or legal obligation;
    • if it is necessary to carry out a public function or task of public interest; or
    • if the function has a clear basis in law.
  • You must not provide us with your Personal Data if you are under the age of 16 without the consent of your parent or someone who has parental authority for you. We do not knowingly collect or process the personal information of children.

Your rights under the GDPR for European Union Residents 

• • Except as otherwise provided in the GDPR, you have the following rights:
    • to be informed as to how your Personal Data is being used;
    • to access your Personal Data (we will provide you with a free copy of it);
    • to correct your Personal Data if it is inaccurate or incomplete;
    • to delete your Personal Data (also known as “the right to be forgotten”);
    • to restrict processing of your Personal Data;
    • to retain and reuse your Personal Data for your own purposes;
    • to object to your Personal Data being used; and
    • to object against automated decision making and profiling.
  • Please contact us at [email protected] at any time to exercise your rights under the GDPR. We may ask you to verify your identity before acting on any of your requests.

Hosting and International Data Transfers

• • Information that we collect may from time to time be stored, processed in or transferred between parties or sites located in countries outside of Australia. These may include, but are not limited to the United States of America XXX.
  • The hosting facilities for our website are situated in the United States of America.
  • We utilise MailChimp in order to provide the Services. MailChimp’s services are located in the United States of America and as such your Personal Information may be transferred to the United States. MailChimp includes the Standard Contractual Clauses into its Data Processing Addendum which is available at https://mailchimp.com/legal/privacy/.
  • OTHER PLUGINS / SERVICES 
  • You acknowledge that Personal Information that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.

Security of your personal information

• • We are committed to ensuring that the Personal Information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your data and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
  • We may employ data processors to process Personal Information on our behalf. We only use data processors that comply with the requirements under the GDPR and that have adequate technical measures in place to protect Personal Information against unauthorised use, loss and theft.
  • The transmission and exchange of information with us is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us or receive from us. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that Personal Information that we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.
  • In the event of a breach of our security, we will take the following action:
    • attempt to contain the breach as soon as possible;
    • investigate the breach (including the type and severity of the breach, the number of people affected and how the breach occurred);
    • implement additional security measures if appropriate; 
    • notify the Office of the Australian Information Commissioner within 72 hours of becoming aware of the breach;
    • notify you of the data breach where appropriate and practical; and
    • contact the appropriate authorities if the breach is suspected to be a result of criminal activity.

Data Retention

• • We will keep your Personal Information for the period of time required by law, or to otherwise fulfil our obligations under this Privacy Policy. 

Access to your personal information

• • You may request details of personal information that we hold about you in accordance with the provisions of the Privacy Act, and to the extent applicable the EU GDPR. If you would like a copy of the information which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email us at [email protected].
  • We reserve the right to refuse to provide you with information that we hold about you, in accordance with Australian Privacy Principle 12.3 or any other applicable law.

Complaints about privacy

• • If you have a complaint about our privacy practises, including if you believe that we have not acted in accordance with the Australian Privacy Principles or the Privacy Act, you may contact us at [email protected] to register your complaint.
  • We take complaints very seriously and will endeavour to respond to you within 30 days.
  • If you are not satisfied with our response to your complaint (or any time), you may contact the Office of the Australian Information Commissioner.