Privacy Policy

1.1 Information We Collect Automatically

When you access or use our Site, we may automatically collect certain technical information about your device and usage patterns, including but not limited to:

• Internet Protocol (IP) address and geolocation data
• Browser type, version, and language settings
• Operating system and device information
• Referring website addresses and search terms
• Pages visited, time spent on pages, and click-through patterns
• Date and time of access

1.2 Cookies and Tracking Technologies

We utilize the following technologies to collect Device Information:

• Cookies: Small data files stored on your device that contain anonymous unique identifiers and preferences
• Log Files: Server logs that record technical data including IP addresses, browser types, Internet service providers, referring/exit pages, and timestamps
• Web Beacons, Pixels, and Tags: Electronic files that track user interactions and measure advertising effectiveness
• Local Storage: Browser-based storage mechanisms for maintaining user preferences and session data

1.3 Information You Provide Directly

When you engage in transactions or communications with us, we collect personal information that you voluntarily provide, including:

• Full name and contact details (email address, telephone number)
• Billing and shipping addresses
• Payment information (credit card details, PayPal account information, bank account details)
• Purchase history and preferences
• Communications and correspondence with our customer service team
• Account credentials and profile information

1.4 Definition of Personal Information

For the purposes of this Policy, "Personal Information" encompasses both Device Information and Order Information as defined above, and includes any information that can be used to identify, contact, or locate an individual, whether directly or indirectly.

2.1 Primary Business Purposes

We process your Personal Information for the following legitimate business purposes:

• Order Fulfillment: Processing payments, arranging shipping, and delivering products and services
• Customer Service: Responding to inquiries, providing support, and maintaining customer relationships
• Communication: Sending order confirmations, shipping notifications, and service-related communications
• Account Management: Creating and maintaining user accounts, managing preferences, and providing personalized experiences

2.2 Security and Risk Management

We utilize Personal Information for security and fraud prevention purposes, including:

• Identity verification and authentication
• Fraud detection and prevention
• Risk assessment and management
• Security monitoring and incident response

2.3 Marketing and Advertising

Subject to your consent and preferences, we may use your Personal Information for:

• Direct marketing communications about products, services, and promotions
• Personalized advertising and content recommendations
• Market research and customer analytics
• Social media advertising and retargeting campaigns

2.4 Legal and Regulatory Compliance

We may process Personal Information to comply with applicable laws, regulations, and legal obligations, including:

• Tax reporting and financial record-keeping
• Consumer protection and product safety requirements
• Dispute resolution and legal proceedings
• Regulatory reporting and compliance monitoring

3.1 Third-Party Service Providers

We may disclose your Personal Information to trusted third-party service providers who assist us in operating our business, including:

• Payment Processors: Financial institutions and payment service providers for transaction processing
• Shipping and Logistics: Courier services and delivery partners for order fulfillment
• Technology Providers: Cloud hosting services, analytics platforms, and software vendors
• Marketing Partners: Advertising networks, email service providers, and social media platforms

3.2 Analytics and Advertising

We utilize third-party analytics and advertising services, including:

• Google Analytics: For website traffic analysis and user behavior insights. Review Google's Privacy Policy
• Social Media Platforms: Facebook, Instagram, and other platforms for advertising and engagement
• Advertising Networks: Third-party ad networks for targeted advertising campaigns

3.3 Legal and Regulatory Disclosures

We may disclose Personal Information in the following circumstances:

• Compliance with applicable laws, regulations, or legal processes
• Response to subpoenas, court orders, or other lawful requests from government authorities
• Protection of our rights, property, or safety, or that of our customers or the public
• Investigation of potential violations of our terms of service or policies
• Prevention of fraud, abuse, or other illegal activities

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, Personal Information may be transferred as part of the business transaction, subject to the same privacy protections outlined in this Policy.

4.1 Direct Marketing

We may use your Personal Information to send you marketing communications about our products, services, and promotions. You may opt out of receiving such communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us directly at info@lovelysweets.com.au
• Updating your preferences in your account settings

4.2 Behavioral Advertising

We may use your Personal Information to display targeted advertisements based on your interests and browsing behavior. These advertisements may appear on our Site or on third-party websites and platforms.

4.3 Opt-Out Options

You can opt out of targeted advertising through the following methods:

• Facebook: Adjust your ad preferences
• Google: Manage your ad settings
• Digital Advertising Alliance: Opt-out portal
• Network Advertising Initiative: NAI opt-out tool

Note: Opting out of targeted advertising does not prevent you from receiving advertisements; it only prevents the advertisements from being tailored to your interests.

5.1 Australian Privacy Act Rights

Under the Australian Privacy Act 1988 (Cth), you have the following rights regarding your Personal Information:

• Access Rights: Request access to the Personal Information we hold about you
• Correction Rights: Request correction of inaccurate, incomplete, or outdated Personal Information
• Deletion Rights: Request deletion of your Personal Information, subject to legal and business requirements
• Complaint Rights: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act

5.2 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within a reasonable timeframe and may require verification of your identity.

5.3 Legal Basis for Processing

We process your Personal Information based on the following legal grounds:

• Contract Performance: To fulfill orders and provide services you have requested
• Legitimate Business Interests: To operate and improve our business, prevent fraud, and provide customer support
• Legal Compliance: To comply with applicable laws and regulations
• Consent: For marketing communications and certain data processing activities where required

5.4 Data Portability

You may request a copy of your Personal Information in a structured, machine-readable format for transfer to another service provider, where technically feasible.

6.1 Data Retention Periods

We retain your Personal Information for the following periods:

• Order Information: Retained for a minimum of 7 years for tax and accounting purposes, or until you request deletion
• Account Information: Retained while your account is active and for a reasonable period thereafter
• Marketing Data: Retained until you opt out or request deletion
• Technical Data: Retained for up to 2 years for analytics and security purposes

6.2 Data Security Measures

We implement appropriate technical and organizational security measures to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of sensitive data in transit and at rest
• Secure server infrastructure and regular security updates
• Access controls and authentication mechanisms
• Regular security audits and monitoring
• Employee training on data protection practices

6.3 Data Breach Notification

In the event of a data breach that may affect your Personal Information, we will notify you and relevant authorities as required by applicable law.

7.1 Policy Modifications

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational considerations. When we make material changes, we will:

• Post the updated Policy on our Site with a new effective date
• Notify you via email or prominent notice on our Site
• Obtain your consent where required by law

7.2 Continued Use

Your continued use of our Site after any changes to this Policy constitutes acceptance of the updated terms.

7.3 Effective Date

This Privacy Policy is effective as of December 19, 2024 and was last updated on December 19, 2024.