Privacy Policy
Introduction
At TideStep AU, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, process, and store your personal information when you visit our website, interact with our brand, or purchase our products. It also outlines your privacy rights and how the law protects you.
We recommend that you read this privacy policy carefully to understand our practices regarding your personal data. By using our website or services, you acknowledge that you have read and understood this privacy policy.
Information We Collect
We collect various types of information to provide and improve our services to you:
Personal Information
- Identity Data: Name, username, or similar identifier
- Contact Data: Email address, billing address, delivery address, phone number
- Financial Data: Payment card details (processed securely through our payment providers)
- Transaction Data: Details about purchases and payments to and from you
- Profile Data: Your preferences, feedback, and survey responses
Technical Information
- Usage Data: Information about how you use our website and services
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform
- Cookie Data: Information stored in cookies and similar tracking technologies
How We Collect Your Information
We use different methods to collect information from and about you, including:
Direct Interactions
When you:
- Create an account on our website
- Purchase our products
- Subscribe to our newsletter or communications
- Request marketing materials
- Participate in a survey, promotion, or contest
- Contact us with inquiries or feedback
Automated Technologies
As you interact with our website, we automatically collect Technical Data about your browsing activities using cookies, server logs, and other similar technologies. We may also receive Technical Data if you visit other websites that use our cookies.
Third Parties
We may receive information about you from various third parties such as analytics providers, advertising networks, search information providers, and payment processing providers.
How We Use Your Information
We use your information for various purposes, including:
- To create and manage your account
- To process and deliver your orders
- To manage payments, fees, and charges
- To personalize your experience with our products and website
- To communicate with you, including responding to your inquiries
- To provide you with marketing information about products that may interest you
- To improve our website, products, and services
- To conduct market research and analytics
- To comply with legal obligations and enforce our terms
- To protect our business and customers from fraudulent activities
Legal Basis for Processing
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform a contract we are about to enter into or have entered into with you
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
- Where we need to comply with a legal or regulatory obligation
- Where you have provided consent for a specific purpose
Data Sharing and Disclosure
We may share your personal information with:
- Service providers who perform services on our behalf (e.g., payment processing, shipping, IT support)
- Professional advisers including lawyers, bankers, auditors, and insurers
- Government authorities and law enforcement agencies when required by law
- Business partners for specific marketing initiatives (only with your consent)
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. These measures include:
- Encryption of sensitive data
- Regular security assessments and penetration testing
- Restricted access to personal information on a need-to-know basis
- Secure transmission protocols (SSL/TLS)
- Regular backup procedures
- Staff training on data protection and security practices
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider:
- The amount, nature, and sensitivity of the personal data
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process your personal data
- Whether we can achieve those purposes through other means
- The applicable legal requirements
In some circumstances, we may anonymize your personal data so that it can no longer be associated with you, in which case we may use this information indefinitely without further notice to you.
Your Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Withdraw consent where we are relying on consent to process your personal data
You can exercise these rights by contacting us using the details provided in the "Contact Us" section below. You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
International Transfers
We may transfer your personal data to countries outside Australia. Whenever we transfer your personal data out of Australia, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- Transferring data to countries that have been deemed to provide an adequate level of protection for personal data
- Using specific contracts approved for use in international data transfers
- Implementing appropriate technical and organizational measures to ensure the security of your data
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last updated" date at the top of this privacy policy. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
TideStep AU
42 Ocean View Drive
Byron Bay, NSW 2481
Australia
Email: [email protected]
Phone: +61 2 8765 4321
We will respond to your inquiry as promptly as possible, typically within 30 days.