Privacy policy
This Privacy Policy describes how manukabiotic.myshopify.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.
CONTACT
After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at admin@manukabiotic.co.nz
COLLECTING PERSONAL INFORMATION
SECTION 1 - INTRODUCTION
Manuka Biotic recognises the importance of safeguarding your information. This Privacy Statement therefore sets out how we use your information and the steps we take to ensure your privacy remains protected.
Manuka Biotic offers New Zealand-made, mānuka oil skincare products sold online and through a number of retailers. Our company is registered as Manuka Biotic Australia Pty Ltd trading as Manuka Biotic.
This Privacy Statement applies to personal information from individuals in the European Union (under GDPR regulation) and all other global customers collected, processed, disclosed and stored (collectively “used”) by Manuka Biotic .
If you have any queries or requests regarding this Statement or our use of your personal information, do not hesitate to contact us using the details set out below.
SECTION 2- HOW DO WE COLLECT YOUR INFORMATION?
As you interact with us, we will collect your information in several ways. Often you will provide this information directly to us, but in other cases, it might be collected automatically through technical means such as Cookies.
If you contact us through our website, by email, by social media or purchase items from our store, we will collect the following information in order to provide the contract to you and respond to any queries:
- Your name
- Your postal address
- Your email address
- Order details.
- Financial or payment information such as your card details if a purchase has been made.
We collect the following information about you automatically, through technical means such as Cookies, when you browse our store:
- Internet protocol (IP) address
- Country geolocation using IP address
- Browsing data linked to Google Analytics.
See section 7 below for more details.
SECTION 3 - WHAT DO WE DO WITH YOUR INFORMATION?
We will use the information we collect about you in a variety of ways. For example, we will use it to fulfil your orders, to analyse and improve how our business and websites work, and, where we have your consent, to provide you marketing updates. We will never sell your information to any third party, and we only use your information when we have a lawful basis for doing so.
To fulfil our obligations to you or enable us to enter a contract:
- We will collect your personal details, contact information and address so that we can process and fulfil your orders.
Where we have your consent:
- We will periodically send emails to the address you provide so that you can find out more about our store, new products and other updates. If you want to withdraw this consent you can do so at any time – for more information see the Your Rights section.
Where we have a legal obligation to do so:
- We are required to keep certain financial records for financial reporting and accounting purposes.
Where we have a legitimate interest in using your information (and this information is not overridden by your own rights as an individual:
- We will use the information automatically collected about you through technical means such as Cookies to analyse how visitors use our website so that we can understand how visitors engage with Manuka Biotic and improve how our website works. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- We also keep a record of transactions and correspondence so that we can bring claims or defend ourselves in the event of a legal claim or complaint.
You can find out more about how Manuka Biotic’s interests are balanced with your own rights and interests by getting in contact with us using the details set out below.
SECTION 4 - HOW WILL YOUR INFORMATION BE SHARED?
We will share the information we collect about you with our service providers to the extent necessary for the purposes outlined above. We may disclose your personal information if required to do so by law or if you violate our Terms of Service.
Sharing your information with Shopify:
- Shopify provides us with an online e-commerce platform that allows us to sell our products and services to you.
- Shopify, therefore, hosts the data we collect about you.
- Your data is stored through Shopify’s data storage, databases and the general Shopify application, on a secure server behind a firewall. Your data will be stored in Shopify’s servers in the USA.
- If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS).
- Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read Shopify’s Terms of Service here or Privacy Statement here.
Sharing your information with other third parties:
Where Manuka Biotic uses third-party service providers, we may disclose to them your personal information – but they will only use your information to the extent necessary to allow them to perform the services on our behalf.
Manuka Biotic will share your information with the following categories of service providers:
- Third parties providing payment gateways
- Third parties who process payments or transactions on our behalf
- Google AdWords: Google AdWords is an online advertising service developed by Google, where advertisers pay to display brief advertising copy, product listings, and video content within the Google ad network to web users. Google AdWords’ system is based partly on cookies and partly on keywords determined by advertisers. Google uses these characteristics to place advertising copy on pages where they think it might be relevant. Advertisers pay when users divert their browsing to click on the advertising copy. Partner websites receive a portion of the generated income.
- Google Analytics: Google Analytics is a freemium web analytics service offered by Google that tracks and reports website traffic. Google Analytics is now the most widely used web analytics service on the Internet. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/ You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
- Facebook: Facebook is an American online social media and social networking service company based in Menlo Park, California. Salesforce: Salesforce.com, Inc. is an American cloud computing company headquartered in San Francisco, California. Though its revenue comes from a customer relationship management product, Salesforce also sells commercial applications of social networking through acquisition and internal development.
- Yotpo; Using Yotpo’s complete platform, we use this to collect customer reviews and visual marketing posts to display on site to show product benefits. Yotpo is based in the United States.
- Shopify: Shopify is a Canadian e-commerce company headquartered in Ottawa, Ontario. It is also the name of its proprietary e-commerce platform for online stores and retail point-of-sale systems. You can read more on how Shopify uses your personal information here: https://www.shopify.com/legal/privacy
Other circumstances in which we may share your information:
- From time to time we may need to disclose your information to law enforcement agencies or regulators.
- In addition, we may need to disclose your information if you violate our Terms of Service.
- If our store is acquired or merged with another company, your information may be shared with the new owners so that we may continue to sell products to you.
Manuka Biotic takes steps to ensure that the third parties we engage to provide services to us on our behalf use your data in accordance with this Statement.
Such third parties may be located outside the European Economic Area (“EEA”) and to the extent that this is the case, the following Section 5 will apply.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Statement or our website’s Terms of Service. When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 5 - BEHAVIOURAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by using the links below:
Facebook: https://www.facebook.com/settings/?tab=ads
Google: https://www.google.com/settings/ads/anonymous
Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
SECTION 6 - INTERNATIONAL TRANSFER
Manuka Biotic may transfer your information outside the EEA, to locations in which data protection standards are less strict. When doing this, we will take steps to ensure that your information remains protected in line with this Statement.
The internet is a global environment and in practice, it is not at all unusual for information to be transferred internationally – for example, if the servers used to host your information are located abroad. If we transfer personal information outside the EEA (for example to our parent company in Australia or New Zealand) we will adhere to certain safeguards approved under data protection laws. If you wish to find out more or to obtain a copy of the safeguards put in place to protect your privacy, please contact us using the details set out below.
SECTION 7 - SECURITY
To protect your personal information, we take put in place appropriate technological and organisational measures and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 8 - COOKIES
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.
We use the following cookies to optimise your experience on our Site and to provide our services.
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
SECTION 9 - CHILDREN
Our site is not directed at those under the age of 16 and customers must have credit or debit cards to make purchases.
SECTION 10- AUTOMATED DECISION-MAKING
We do not undertake automated decision-making.
SECTION 11 - DATA RETENTION
Manuka Biotic will keep your information only for as long as is reasonably necessary for the purposes set out in this Statement and to fulfil our legal obligations. Where you are a customer this is usually at least for as long as you remain a customer, to be able to meet our legal and contractual obligations to you, and if necessary, to resolve any disputes.
We only retain your information for as long as is necessary for us to use your information as described above or to comply with our legal obligations. However, please be advised that we may retain some of your information after you cease to use our services, for instance, if this is necessary to meet our legal obligations, such as retaining the information for tax and accounting purposes.
SECTION 12 - DO NOT TRACK
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
SECTION 13 - CHANGES TO THIS POLICY
We reserve the right to modify this privacy policy and post any changes to our site. We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.
Last updated: 10 May 2023