WHAT PERSONAL DATA DO WE COLLECT?
During our relationship with you, we may collect Personal Data from you. Examples of the types of Personal Data we may collect includes your name, contact details, mailing and delivery addresses, email address, birthday, facial image, your shopping or browsing behaviours, voice recording (from customer service calls) and any other personally identifiable information that you have provided us in any form you may have submitted to us, or in the course of any other forms of interaction between you and us. Where such information pertains to an identified individual - Personal Data may also include network and device data such as IP address and device or advertising identifiers and information we obtain using cookies or other tracking technologies. We may also collect information about you from third-party sources and platforms (including data validation services, authentication service providers, social networking sites, online marketing and segmentation providers and ad targeting companies) to supplement the information we collect directly from you.
If you provide us with Personal Data relating to a third-party by submitting such Personal Data to us, you represent to us that you have obtained the consent of the third-party to provide us with their Personal Data for the respective purposes.
HOW DO WE COLLECT YOUR PERSONAL DATA?
We collect Personal Data from you when:
HOW WILL YOUR DATA BE USED?
We may use and disclose your Personal Data for purposes necessary to provide you with our products as services, including to:
(collectively, the "Purposes")
In addition, we may use and disclose your Personal Data for the following purposes, to:
(collectively, the “Additional Purposes”)
We may also use or disclose your Personal Data for secondary purposes in accordance with Applicable Laws, or with your further consent.
Finally, we may we also collect information about you in an aggregated and anonymous basis - in order to conduct internal analysis of traffic patterns within our Website. This information is used by us to administer and improve our education and training products and services.
HOW CAN I ACCESS OR CORRECT MY PERSONAL DATA?
You may access or correct some Personal Data including your name, birthday, shipping and billing addresses by logging in to your user account on the Website or Apps under “Account > My Details” and clicking the “Edit” button under each relevant field.
For Personal Data that cannot be corrected by you by logging in to your user account on the Website or Apps, you may request to access and correct such Personal Data by submitting a written request to us via our Customer Service contact form or by emailing our privacy team here. We may need to request additional information from you to confirm your identity before providing the access or making corrections.
We will do our best to respond to Personal Data access and correction requests within 30 days. Where we are unable to meet this timeline, we will update you with the soonest possible time within we can provide the information or make the correction. Please note that certain types of Personal Data access and correction requests may be exempt under Applicable Laws, and we may charge you a reasonable fee for the handling and processing of your Personal Data access request, if permitted by Applicable Laws.
While THE ICONIC makes reasonable efforts to provide our users with access to their Personal Data, there may be circumstances in which we are unable to provide such access, including but not limited to: where the information in question is legally privileged, would compromise the privacy or other legitimate rights of other persons, where the burden or expense of providing access would be disproportionate to the risks to your privacy, where the request is clearly excessive or unfounded, or where the information requested comprises proprietary business information.
If you have said we can, we’ll send you marketing messages by email or SMS, to keep you aware of what we’re up to and to help you see and find our products.
HOW CAN I UNSUBSCRIBE OR DELETE MY ACCOUNT?
If you wish to withdraw your consent for us to send you marketing communications, you can do this as follows:
Once we receive notification that you wish to withdraw your consent for receiving marketing communications, it may take up to 14 days for your withdrawal to be reflected in our systems. Please note you may still receive marketing communications during this period.
If you withdraw your consent to receive marketing communications through a specific communication mode (e.g. SMS) we may still contact you via other communication modes you have subscribed to (e.g. email).
Note it is not possible to unsubscribe from non-promotional (transactional) communications relating to your online orders or the operation of your account.
You may remove your account by logging in to your user account on the Website or Apps under “Account > My Details” and clicking the “Remove Account” button. We will process such a request within a reasonable time from receiving notice from you of your withdrawal of consent. Once the processing is complete, we will no longer collect, use and/or disclose your Personal Data, except to the extent we retain your Personal Data for compliance, regulatory or other legal purposes.
Note: If you withdraw your consent for us to use and process your Personal Data for the Purposes or the Additional Purposes or for other purposes, we may no longer be able to provide you with the related products, services or benefits associated with our promotion.
ADMINISTRATION AND MANAGEMENT OF PERSONAL DATA
You should ensure that all Personal Data you submit to us is complete, accurate, up-to-date and correct. Failure to do so may result in our inability to provide you with the products and services you have requested. You should keep us updated of any relevant changes to your Personal Data. We will not be responsible for relying on inaccurate or incomplete Personal Data if you have not updated us of such changes.
We will make reasonable efforts to ensure Personal Data likely to be used by us or disclosed by us to another organisation is accurate, up-to-date and correct.
We will also put in place reasonable security arrangements to ensure that your Personal Data is adequately protected and secured and to prevent any unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage or alteration of your Personal Data. However, we will not be responsible for any unauthorised use of Personal Data by third parties which is attributable to factors beyond our control. Further, given that no data transmission over the internet can be guaranteed as completely secure, we cannot guarantee 100% the security of any (personal or other) information you transmit to us; and as such we will not be liable for any breach of security or unintended loss or disclosure of information due to our Platforms being linked to the Internet.
DATA RETENTION AND DESTRUCTION
When Personal Data in our possession is (i) no longer required for any reason connected to the purpose it was originally collected or (ii) retention by us is no longer necessary for any other legal or business purposes, we will exercise measures to ensure such Personal Data is either destroyed or anonymised. If this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.
THE ICONIC processes Personal Data in multiple countries. We may transfer your Personal Data to recipients possibly located outside the country where you live. If Personal Data is so transferred, we will comply with Applicable Laws in doing so. This includes: (i) obtaining your consent, unless an exception exists under Applicable Laws or any other laws, and (ii) taking reasonable steps to ascertain whether the foreign recipient of the Personal Data is bound to comply with standards of protection that are at least comparable to the Applicable Laws. Recipients of your Personal Data are likely to be located in Australia, New Zealand, United Kingdom, the Philippines, United States of America, Luxembourg, Germany, Japan, Singapore and other countries or jurisdictions depending on the nature of the services those recipients provide to us.
THIRD-PARTY COOKIES AND TRACKING TECHNOLOGIES
THE ICONIC uses the services of third-party vendors, who may implement one or more persistent “Tracking Technologies” (such as cookies, eTags, pixels, web beacons/ GIFs, local storage, or other identifiers on your device and browser settings) in order to recognise you and your device each time you visit our Website or Apps. We use these technologies for a number of purposes to enhance your online experience, such as for preference setting, offer selection, analytics, conversion attribution and fraud reduction. We use both session and persistent tracking technologies.
Advertisements or other services on the Website or Apps may be provided by third-party agencies. These advertisements may also include Tracking Technologies. The collection, use, and disclosure of information, including Personal Data, collected by such third-party Tracking Technologies are subject to the privacy and data protection policies of the third-party vendors and are not under our control. For more information on third-party advertising-related cookies and how to opt-out of them, please visit Your Online Choices.
You may reject first-party and third-party Tracking Technologies through the settings on your browser. Note that this may result in the loss of Website or App functionality, restrict your use of the Website or App, or delay or affect the way in which the Website or App operates.
We may use third-party service providers to monitor and analyse the use of our Website and Apps. The primary service providers we use are:
GOOGLE ANALYTICS AND GOOGLE OPTIMIZE
THE ICONIC may use Google Analytics features based on Display Advertising, including but not restricted to the following: Google Optimize, Remarketing, Google Display Network Impression Reporting, DoubleClick Campaign Manager Integration, and Google Analytics Demographics and Interest Reporting. Using the Google Ads Settings, you can opt-out of Google Analytics for Display Advertising and Google Optimize and customise Google Display Network ads.
THE ICONIC also uses Remarketing with Google Analytics to advertise online; third-party vendors, including Google, may show THE ICONIC ads on sites across the internet. THE ICONIC and third-party vendors, including Google, use first-party Tracking Technologies (such as the Google Analytics cookie) and third-party Tracking Technologies (such as the DoubleClick cookie) together to inform, optimise, and serve ads based on visitors’ past visits to THE ICONIC, as well as report how ad impressions, other uses of ad services, and interactions with these ad impressions and ad services are related to visits to THE ICONIC.
When you log on to the THE ICONIC website, THE ICONIC with the help of Google Analytics may use your browsing behaviour to connect it with any other data that has previously been provided by you, in accordance with this policy.
FACEBOOK ANALYTICS AND FACEBOOK INSIGHTS
Facebook Insights is a tool which tracks user interaction on the THE ICONIC’S Facebook page, allowing page admins to track usage and improve page performance.
Facebook Analytics is a behavioural analytics solution that helps to track, measure, better understand, and optimise products and customer experience and provides audience information and unifies analytics across devices and channels.
Customer Service telephone number: 1300 668 345 (AU) and 0800 449 370 (NZ)
Emails and letters should clearly state that you are making a data protection query, request or complaint in the subject line to ensure the matter is dealt with expediently. We will strive to deal with any query, request or complaint promptly and fairly.
You can find more information about privacy and the protection of your Personal Data on the website of the OAIC at https://www.oaic.gov.au/.
UPDATES ON DATA PROTECTION POLICY