Who we are
Please contact our Data Protection Officer if you have any questions (details at bottom of page).
What personal data we collect and why we collect it
When a user subscribes to our mailing list via the Site we collect the user’s name and email address. This information is shared with the MailChimp marketing automation platform for the purposes of delivering news, updates, events, offers and other relevant information via email newsletters.
Users can opt-out or manage email newsletters at any time by clicking the ‘unsubscribe’ or ‘update preferences’ links in a previously emailed newsletter.
User account & profile
When a user registers an account and profile on the Site we collect the data shown in the form. This may include the user’s name, country, business name, business title and qualifications, and is used to approve and build the user’s account and profile. The user’s name, email and country is also shared with the MailChimp marketing automation platform for the purposes of delivering news, updates, events, offers and other relevant information via email newsletters.
Logged in users can opt-out or manage email newsletters at any timevia their Control Center > Account > Notification settings: https://www.emotiquo.com/account/notifications/
When a user edits their account or profile we collect any new or modified data shown in the form. In addition to the data described above, added information may include the user’s gender, phone number, website, address, social page URLs, biography and business descriptions, and is used to update the user’s account or profile.
Purchases & subscriptions via the online store
When a user purchases products or subscriptions on the Site we collect the data shown in the form. This may include the user’s name, business name, country, address, phone number, email address, shipping details, and billing information including credit/debit card or other payment method details. Payment information will be sent to Stripe online payment processing service for the purpose of processing online payments (including fraud prevention). All other data is used to set up a store account, send the user information about their account and order, populate the checkout for future orders, respond to requests (e.g. refunds and complaints), comply with legal obligations (e.g. taxes), improve store offerings, and send marketing messages if a user chooses to receive them.
When a user leaves a comment on the Site, the collected data is shared with Facebook via its comments system.
When a logged in user leaves a review on the Site, we collect the data show in the form.
Contact & Support forms
When a user submits a contact or support form on the Site we collect the data shown in the respective form. This may include the user’s name and email address, and is used for the purposes of action and reply.
Cookies are small pieces of data sent from the Site or a third-party website and stored on the user’s computer by their browser to collect and store information and/or to improve the user’s browsing experience.
Necessary cookies are required for the website to function correctly and include those added by the website’s platform, online store and payment processing service.
If a user has an account and logs in to the Site, we will set a temporary cookie to determine if their browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. We will also set up several cookies to save login information and screen display choices. Login cookies last for two days, and screen options cookies last for a year. If the user selects “Remember Me”, the login will persist for two weeks. If the user logs out of their account, the login cookies will be removed.
If a user edits or publishes an article, an additional cookie will be saved in their browser. This cookie includes no personal data and simply indicates the post ID of the article just edited. It expires after 1 day.
If a user adds an item to the online store cart, two cookies are added to monitor the cart and to locate cart data in the database while the user browses the site. No personal information is stored within these cookies.
Cookies may also be added when processing payments to store and share personal data with the Stripe online payment processing service.
Optional cookies do not directly affect the website’s functionality and include those added for social sharing and web analytics.
To opt out of AddThis collecting information: http://www.addthis.com/privacy/opt-out/
The StatCounter service cookies policy is available here: https://statcounter.com/about/cookies/
EU Countries & GDPR
A user located in the European Union (EU) can manage cookies at any time via the ‘Cookies’ tab in the bottom right hand corner of their browser window.
Embedded content from other websites
When a user visits the online store, we track products they have viewed for the purpose of showing recently viewed product items. We may also track location, IP address and browser type for the purpose of estimating taxes and shipping, and collect a shipping address to estimate shipping before an order is submitted.
Analytics & Spam Protection
Data including the visitor’s location, IP address and browser information may be shared with our web analytics service (StatCounter) for the purpose of analysing web data.
Data including the visitor’s IP address, user agent, referrer, and Site URL (along with other information such as their name, username and email address) may be shared with our anti-spam service (Akismet) for the purpose of spam detection.
When a user leaves comments or reviews, adds or replies to topics on forums, or creates a profile on the Site, an anonymised string created from their email address (also called a hash) may be shared with the Gravatar service to see if the user has a registered profile picture. On approval, the profile picture is visible to the public in the context of the comment or review.
A user’s personal information may be used to create meta tags for the purpose of sharing Site pages and content to email or social media and networks. Typical data may include a user’s name or business name, biography or post excerpt.
Who we share your data with
Data collected on the Site is hosted and secured with the GoDaddy web hosting company, and may be shared with the Site administrator via automated email for the purposes of action and reply.
Mailing list data may be shared with the MailChimp email marketing platform: https://mailchimp.com/legal/privacy/
Payment data may be shared with the Stripe online payment processing service: https://stripe.com/privacy/
Hash data may be shared with the Gravatar service: https://automattic.com/privacy/
Location, IP address and browser data may be shared with the StatCounter analytics service: https://statcounter.com/about/legal/
Comments, location, IP address and browser data may be shared with the Akismet anti-spam service: https://automattic.com/privacy/
Sharing meta may be shared with the AddThis social bookmarking service: http://www.addthis.com/privacy/
Who on our team has access to your data
Access to personal data is restricted to Site administrators and the Data Protection Officer.
How long we retain your data
If a user leaves a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
Mailing list data is retained on MailChimp indefinitely or until such time the user chooses to update preferences or unsubscribe from the mailing list.
User profile data, including that which is collected via registration, profile edits and online purchases, is retained indefinitely or until such time as the user chooses to delete their profile.
User purchase history is retained for a period of seven years to satisfy Australian taxation laws.
IP, server and browser data are retained for a period of between 1-3 months.
What rights you have over your data
If a user has an account on this Site, or has left comments, the said user can request to receive an exported file of the personal data we hold about them, including any data provided to us. The user can also request that we erase any personal data we hold about them. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Request Export of Data
Request Deletion of Data
How we protect your data
The Site and its transmissions are protected by Secure Sockets Layer (SSL) encryption. This helps to prevent hackers from reading personal information or other data passing to and/or from the Site. A secure link is established when https:// appears at the beginning of the URL or the browser provides confirmation of a secure connection.
Data collected on the Site is hosted with the GoDaddy web hosting company. GoDaddy offers 24/7 security monitoring and DDoS protection. Back-ups (full installation) are completed on a frequent basis (usually weekly) and remain intact for two months.
What data breach procedures do we have in place
In the event of a data breach or malware/viral attack, immediate steps will be taken in collaboration with the data host (GoDaddy) to address and resolve the breach and identify perpetrators (if any). In addition, all affected users will be notified by email within seventy-two hours of becoming aware of the breach. Users will be informed of the nature and source of the breach, actions being taken on our behalf (Site administrators and host) to resolve the issue, and actions recommended on your behalf to limit any damage caused and to reinstate required security and protection measures.
What automated decision making and/or profiling we do with user data
Personal information is not used for user profiling or decision making. However, registered users are automatically added to a local points system (myCred) whereby points are earned by activity on the site. Such activity may include online purchases and subscriptions, adding information to profiles, adding comments/reviews and participating in forums. Earning points improves a user’s ranking on directories and permits access to other Site functions and areas.
Please contact our Data Protection Officer if you have any queries:
Data Protection Officer & Proprietor
13/9 Dix Avenue, Marden SA
Phone +61 403 045 132
Last update: 25 May 2018