iSun Investment, operating the iTao.com.au website and its affiliates (“iTao”, “we”, “our”, “us”), is dedicated to safeguarding your privacy and upholding your rights under the Australian Privacy Principles (APPs) outlined in the Privacy Act 1988(Cth) (“Privacy Act”). By utilizing this website or furnishing us with your personal information, you acknowledge and consent to the collection, use, retention, and disclosure of personal information by iTao, as detailed in this policy.
We will only collect and use personal information which is necessary to comply with our legal obligations and to assist us to administer our business and provide you with the services you request.
What information do we collect?
Personal information is information that can be used to directly or indirectly identify you. Personal information also includes anonymous information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you.
We collect information from you when you register on our site, place an order, subscribe to our newsletter or respond to a survey. When ordering or registering on our site, as appropriate, you may be asked to enter the following information: your name, e-mail address, mailing address and phone number. You may, however, also visit our site anonymously.
What do we use your information for?
We use the information you provide to us for the specific purposes for which you provide the information, as stated at the time of collection, and as otherwise permitted by law. The information we collect from you may be used in the following ways: ●To personalize your experience (your information helps us to better respond to your individual needs) ●To improve our website and your shopping experience (we continually strive to improve our website offerings based on the information and feedback we receive from you) ●To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs) ●To process transactions including executing your payments and delivering the purchased products or services requested. To administer a contest, special promotion, survey, activity or other site feature ●To send periodic emails. The email address you provide for order processing, may be used to send you important information and updates pertaining to your order, in addition to receiving occasional company news, updates, related product or service information, etc.
Your rights
We take reasonable steps to ensure that your personal information is accurate, complete, and up to date. You have the right to access, correct, or delete the personal information that we collect. You are also entitled to restrict or object, at any time, to the further processing of your personal information. You have the right to receive your personal information in a structured and standard format and, where technically feasible, the right to have your personal information transmitted directly to a third party. You may lodge a complaint with the competent data protection authority regarding the processing of your personal information.
To protect the privacy and the security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal information that we maintain.
You may send us an e-mail to iTao to exercise your rights. We will respond to your request in a reasonable timeframe. We will take all reasonable steps to ensure that your personal data is correct and up to date.
How do we protect your information?
You are responsible for your own username and password safety and security on ZAFUL. We recommend choosing a strong password and changing it frequently. Please do not use the same login details (email and password) across multiple websites.
That said, we do implement a variety of security measures including offering the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential. After a transaction, your private information (credit cards, social security numbers, financials, etc.) will not be stored on our servers.
Our servers and website are security scanned and fully verified externally by McAfee Secure for a daily basis to protect you online.
Do we disclose any information to outside parties?
We do not sell, trade, or otherwise transfer to outside parties your personal information. This does not include trusted third parties who assist us in operating our website, conducting our business, executing payments, delivering purchased products or services, sending you information or updates or otherwise servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety.
How long do we retain your information?
We will retain your personal information for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by tax, accounting or other applicable laws.
Third party links
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
WooCommerce
Our shopping solution is hosted and managed by WooCommerce. WooCommerce store your credit card data, which is encrypted through the Payment Card Industry Security Standard (PCI-DSS), a joint effort of the major credit card brands, only for as long as it takes to complete that transaction, after which it is destroyed. We process payments via Stripe and credit card details are only stored for recurring payment options and are destroyed upon final subscription. At no time do we have access to any of this payment information collected by either WooCommerce.
CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, among other rights, California consumers have the right to: Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers. Request that a business delete any personal data about the consumer that a business has collected. Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data. If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
GDPR Data Protection Rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions. The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Children’s Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
iTao does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Terms and Conditions
Please also visit our Terms and Conditions section establishing the use, disclaimers, and limitations of liability governing the use of our website at Terms and Conditions.
Payments
In this subsection you should list which third party payment processors you’re using to take payments on your store since these may handle customer data. We’ve included PayPal as an example, but you should remove this if you’re not using PayPal.
We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such as the purchase total and billing information. Please see the PayPal Privacy Policy for more details.
When shopping, we keep a record of your email and the cart contents for up to 30 days on our server. This record is kept to repopulate the contents of your cart if you switch devices or needed to come back another day. Read our privacy policy here.