SakeBox (EARP Pty Ltd trading as SakeBox) is committed to compliance with privacy laws which apply to its businesses and which set out standards for the management of personal information. This policy outlines our personal information management practices.
Updated: April 2018
Respecting Your Privacy
This policy outlines our personal information management practices. Specifically:
- the kinds of personal information we collect and hold;
- how we collect and hold it;
- the purposes for which we collect, hold, use and disclose it;
- your right to access and seek correction of it;
- how you may complain about privacy matters; and
- our sharing of your personal information.
Personal Information we Collect & Hold
The personal information we collect and hold is what is reasonably necessary for our business functions and activities. When we collect and hold personal information, it is of the following kinds:
- your personal details such as your name, addresses,
- your customer preferences including whether you have taken up some of our purchased our products or have become a WhiskyBox Club Member
- any rewards and redemption details applicable to your membership;
- what, how and when you buy from us or have expressed an interest in buying from us;
- your stated or likely preferences, for example whether you may be interested in particular products or promotions.
We use Stripe as our third party Payment Gateway to securely collect and hold the debit or credit card you might use for your purchases from us.
You generally have the option of not identifying yourself or of using a pseudonym when dealing with us. But not where this is impractical (for example when you shop online with us) or where the law or a court order provides otherwise.
Why do we Collect & Hold Personal Information
When we collect, hold and use your personal information, we do so primarily to sell and promote our goods and services to you and to improve on the range of our offerings. For example:
- to learn of your likely preferences so that we may promote our goods and services to you in a way which may be of most interest to you; and
- to assist in investigating your complaints and enquiries.
We disclose personal information we collect for purposes which are incidental to the sale and promotion of our goods and services to you. For example, we may disclose your personal information within our group, to service providers who assist us in our day-to-day business operations and as part of buying or selling businesses.
We may collect, hold, use and disclose your personal information for other purposes which are within reasonable expectations or where permitted by law.
When marketing to you, your personal information is only ever used or disclosed for WhiskyBox’s own purposes. You may opt out of our direct marketing to you. Our direct marketing materials will tell you how to do this.
Enquiring about your Personal Information
We will provide you with access to any of your personal information we hold (except in limited circumstances recognised by law). If you wish to access your personal information or have an enquiry about privacy, please contact our Privacy Officer at: firstname.lastname@example.org.
Before we provide you with access to your personal information we may require some proof of identity. If you need to correct your personal information, please contact our Privacy Officer at one of the above contact points.
Objecting or complaining about our management of your Personal Information
If you wish to complain about a breach of the privacy rules that bind us, you may contact our Privacy Officer at one of the above contact points. We may ask you to put your complaint in writing and to provide details about it.
We may discuss your complaint with our personnel and our service providers and others as appropriate.
Our Privacy Officer will investigate the matter and attempt to resolve it in a timely way. Our Privacy Officer will inform you in writing about the outcome of the investigation. If our Privacy Officer does not resolve your complaint to your satisfaction and no other complaint resolution procedures are agreed or required by law, our Privacy Officer will inform you that your complaint may be referred to the Privacy Commissioner for further investigation and will provide you with the Commissioner’s contact details.
Sharing of Personal Information
We do not, under any circumstances, share, sell or exchange your personally identifiable information (including emails) with any unaffiliated third party.
We may allow your personal information to be stored and transmitted using IT systems and organisations in countries other than your own location.
We do this for several reasons including where we have made a business decision to store our data with a trusted service provider who is in the business of providing data storage and processing services (for example Google Cloud Platform or Amazon Web Services).
An example of this are organisations that store and process our email and website data. These services commonly involve diverse geographic locations which change from time to time for reasons which include data protection and processing efficiency. Where these services are used by us, it is not practical for us to notify you of which country your personal information may be located.
Where you are involved with public liability issues concerning a product we may disclose your personal information to any overseas supplier of such a product in the course of managing those issues.
Cookies may be arranged (“set”) by us or by others under an arrangement with us, such as companies whose business it is to analyse information. We may also access information from cookies set by others (“3rd party cookies”).
What is a cookie?
You should know about cookies because they involve the collection of information about you (which may or may not be personal information) in a way which may not be obvious to you.
Cookies are small pieces of information captured when your device is used to access online content. Cookies are stored in your device by the person who arranges for the cookie to be set. This person may be the provider of the content being accessed. It might be a 3rd party. 3rd party cookies are used to provide information about your device’s access to more than one discrete site or data set.
Why we allow cookies to be used
First, we allow session cookies to be used when you visit our online content. This enables your device to move from page to page without having to log in repeatedly. These generally improve your browsing experience.
Secondly, we allow persistent (permanent) cookies to be used to better inform how the content your device visits may be presented to you. Persistent cookies can store your preferences for a particular site, so they will be remembered when the site is visited again.
Thirdly, we allow persistent and other kinds of permanent cookies (such as “flash” cookies) to be set and we access information from 3rd party cookies in order to assist in compiling and analysing the types of online content you visit and your interaction with that content. This assists us to assess what promotions to make to you, when and how. It also assists us to measure the effectiveness of our promotions.
You can control the extent to which your device allows cookies to be set on it. You can do this by changing the settings on the software your device uses to access the internet (your browser). For example, depending on which browser your device uses, you may be able to disable third party cookies.
There is a lot of information available about how cookies work and how to change your browser’s cookie preferences. This includes information at the following links: Stay smart online – all about cookies and your privacy; Your online choices and Privacy Commissioner Fact Sheet on online behavioural advertising.