About this policy

The Blaanc website at blaanc.com.au (our Site) is owned and operated by Blaanc Pty Ltd, ABN 89 655 410 861 (we, us or our).

We are committed to protecting your personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, where it applies to you, the EU General Data Protection Regulation and the UK GDPR (together, Privacy Laws).

This policy explains how we collect, use, share, store and destroy your personal information, and how you can access it. It applies to all personal information we collect through our Site, our Warriewood showroom, our products and our services.

Information we collect

Personal information is information or an opinion that identifies you, or could reasonably identify you. Depending on how you deal with us, we may collect:

• Your name, delivery and billing address, phone number, email address and account login details
• Details of the products you order, enquire about or return
• Payment information, such as your payment method and the information needed to authorise a transaction
• Information you share in surveys, competitions, reviews and promotions
• Technical information about your visit, such as your IP address, device, browser and the pages you view
• Any other information you choose to give us

We do not intend to collect sensitive information, such as information about your health or beliefs. If you provide it to us by accident, please let us know at hello@blaanc.com.au and we will destroy it.

How we collect it

We collect personal information when you shop with us, create an account, sign up to our newsletter, enter a competition, contact us, visit our showroom or browse our Site. We may also receive it from third parties, such as our payment, delivery and marketing partners.

Where we collect information directly from you, we will take reasonable steps to tell you why at the time, or as soon as practicable afterwards. Any specific collection notice or offer terms will apply in addition to this policy.

If you give us personal information about someone else, for example as a gift recipient, please make sure they are happy for you to do so and are aware of this policy.

How we use it

We use your personal information to:

• Process, deliver and support your orders, returns and enquiries
• Manage your account and our relationship with you
• Send you news, offers and events, where you have agreed to receive them
• Personalise the content and advertising you see on our Site and elsewhere
• Prevent fraud and keep our Site and customers secure
• Understand how our Site is used, and improve our range, Site and service
• Operate, maintain and upgrade our systems
• Meet our legal and regulatory obligations
• Any other purpose you have agreed to, or that we tell you about when we collect it

Legal bases for processing

If you are in the European Union or United Kingdom, we rely on the following legal bases to process your personal information:

• Contract, where processing is needed to fulfil your order or provide our services
• Consent, where you have freely agreed, for example to receive marketing
• Legitimate interests, such as running and improving our business, managing our relationship with you and responding to queries
• Legal obligation, where the law requires us to process it

Who we share it with

We do not sell your personal information. We share it only where needed to run our business, with trusted parties such as:

• Our ecommerce platform, Shopify, which hosts our store
• Payment providers, including Shopify Payments, PayPal, Afterpay and American Express
• Delivery partners, including Australia Post and our courier network
• Our email provider, Google Workspace (Gmail), which we use to correspond with you
• Analytics and advertising platforms, such as Google and Meta
• Website developers, IT and hosting providers, and customer service tools
• Professional advisers, such as our accountants, auditors, lawyers and insurers

These parties may only use your information for the purpose we have shared it for, and we take reasonable steps to make sure they protect it. We may also disclose information where the law requires it, or where it is reasonably necessary to protect our rights, property or the safety of any person.

Overseas disclosure

Some of the service providers we use store or process information outside Australia, including in the United States and Canada, where our ecommerce platform and several of our software providers are based. When information is sent overseas, we take reasonable steps to make sure it is handled securely and in line with Privacy Laws, including, for information about people in the EU or UK, using recognised safeguards such as the European Commission's Standard Contractual Clauses.

Payments and security

All online payments are processed securely through Shopify Payments and our other payment partners, which are certified to the PCI DSS standard used across the card industry. Payment information is encrypted in transit and at rest, and your full card number is never visible to us.

We use a combination of technical, administrative and physical safeguards to protect your information, and our team and contractors are required to keep it confidential. No transmission over the internet can be guaranteed to be completely secure, but we work hard to protect your information at every step.

For more on Shopify's security, visit shopify.com/security.

Cookies and tracking

Our Site uses cookies, pixels and similar technologies to remember your cart and preferences, understand how our Site is used, keep it secure and show you relevant advertising. These tools may collect your IP address, device and browser details, approximate location, the pages you visit and the links you click.

You can set your browser to refuse cookies or to warn you before they are stored. Some parts of our Site may not work properly without them.

Automated decisions

To protect our customers and our business, orders placed on our Site are automatically screened for fraud by Shopify and our payment providers. These tools use information such as your name, billing and delivery address, email address, IP address, device details and payment details to assess the risk of an order.

This screening may lead to a payment being declined or an order being flagged for review. Before we cancel a flagged order, a member of our team reviews it. If you think a decision about your order is wrong, please contact us and we will look into it.

Afterpay and other buy now, pay later providers make their own decisions about eligibility under their own privacy policies.

Marketing and opting out

We will only send you marketing, such as news, offers and event invitations, where you have agreed to receive it or where the law otherwise allows. We may contact you by email, SMS or other channels you have chosen, and may show you tailored content on our Site and on social media.

You can opt out at any time by using the unsubscribe link in any of our emails or messages, or by contacting us. Opting out does not affect messages about your orders.

Keeping and destroying information

We keep personal information only for as long as we need it for the purposes in this policy, or as long as the law requires. When it is no longer needed, we take reasonable steps to destroy it or permanently de identify it.

Data breaches

We have a data breach response plan so that any breach can be identified and contained quickly. If a breach involving your personal information is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

Accessing and correcting your information

You can ask to access or correct the personal information we hold about you by emailing hello@blaanc.com.au, or update many details yourself in your account on our Site.

We aim to respond within 21 days. There is no charge to make a request, although we may charge a reasonable fee to provide access in some circumstances. If we cannot give you access to some or all of your information, we will explain why in writing.

Your rights in the EU and UK

If you are in the European Union or United Kingdom, subject to certain exceptions you also have the right to:

• Obtain a copy of the personal information we hold about you
• Have inaccurate or incomplete information corrected
• Have your information erased in certain situations
• Receive your information in a portable electronic format, or have it sent to another provider
• Object to processing, or withdraw your consent at any time, including for marketing
• Restrict how we process your information in certain situations
• Not be subject to decisions based solely on automated processing that significantly affect you

To exercise any of these rights, contact us at hello@blaanc.com.au.

Children

We do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If we learn that we have, we will take reasonable steps to delete it, or where that is not possible, make sure it is not used or shared.

Third party sites and business changes

Our Site may link to websites run by other businesses. We are not responsible for their content or privacy practices, so please read their privacy policies before sharing your information.

If our business, or part of it, is sold or merged, personal information may be transferred as part of that transaction, and will continue to be protected in line with this policy.

Changes to this policy

We may update this policy from time to time, and will post any changes on this page with a new date at the top. If we make significant changes to how we handle your information, we will let you know on our Site and, where appropriate, by email.

Questions and complaints

If you have a question or a concern about how we have handled your personal information, please email hello@blaanc.com.au with the details and any supporting documents. We treat every privacy complaint seriously, promptly and confidentially.

We aim to respond within 10 business days, and to resolve your complaint within 30 business days. If a matter needs longer, we will let you know.