PRIVACY POLICY
This privacy policy (“Policy”) describes the personal data collected or generated (“processed”) when you use shara.co.nz (the “Website”).
This Policy describes the types of personal data collected and how your personal data is used, shared and protected. It also explains the choices you have relating to your personal data and how you can contact us.
It is important that you read this Policy together with any other privacy notice that we may provide at or around the time that we collect or process personal data about you so that you are fully aware of how and why we are using that data.
This policy supplements the other notices and is not intended to override or replace them.
For ease of reading, we have divided this Policy into several sections:
1. WHO is Responsible for the Processing of Your Personal Data?
2. CONTACT Details
3. WHAT Personal Data We Collect and WHEN
4. WHY and HOW We Use (Process) Your Personal Data
5. SHARING of Your Personal Data
6. PROTECTION and MANAGEMENT of your Personal Data
7. YOUR RIGHTS related to your personal data
8. CHANGES to our Privacy Policy
1. WHO is Responsible for the Processing of Your Personal Data?
Your personal data is processed by shara.co.nz and the controller responsible for your personal data is the same.
If you have any questions about this Policy, or if you think it has not been followed, please contact us using the details set out below.
2. CONTACT Details
Alternatively, you can contact us (via WhatsApp) at 006421726442
3. WHAT Personal Data We Collect and WHEN
What is personal data?
Where this Policy refers to ‘personal data’ it is referring to data about you (or other living people) from which you could be identified – such as your name, your contact details and your email address.
We collect and ask you for certain personal data to provide you with the services offered on the Website. For example, when you make purchases, contact us for our services, make enquiries or interact with the Website.
This personal data includes your:
-
Contact details including name, email, telephone number and shipping and billing address
-
Payment or credit card information
-
Data on physical characteristics, including weight, height, and body measurements (such as dress size) if required
-
Personal preferences including your wish list as well as other design preferences
Updating your information - If you want to update the information you have previously given to us, you can contact us at any time by writing to us using contact details set out here.
4. WHY and HOW We Use (Process) Your Personal Data
We use the personal data we collect from you in the following ways:
To provide the services you request.
When you use the Website we will use your data to provide the product you have selected. For example, if you make a purchase on shara.co.nz, or participate in an event or promotion, we will use the contact information you give us to communicate with you about the purchase, event or promotion. If you reach out to our customer service team, we will use information about you, such as delivery or payment information, or the product you have purchased to help you resolve a problem or question.
If you are an existing customer of Shara (for example, if you have placed an order with us), we may use the email address provided to send you marketing communications about similar products or services, unless you have opted-out. We may use the information that you provide online as well as information from purchases made during our Pop-Ups.
To Operate, Improve and Maintain our Business
We may use the data you provide to us to operate our business. For example, when you make a purchase, we may use that information for accounting, auditing and other internal functions.
To enhance your user experience and For Research and Analysis Purposes
We use data about how our services are used to understand customer behaviour or preferences and to enhance the user experience of the Website. For example, we may use information about how visitors to Shara.co.nz search for and find products, in order to understand the best ways to organise and present product offerings in our online store.
5. SHARING of Your Personal Data
Depending on how and why you provide us with your personal data we may share it in the following ways:
• We may disclose your data to our agents or third party service providers to undertake processing operations on our behalf (see ‘third party suppliers’ detailed below).
• We may disclose personal data if required to do so by law or if we believe that such action is necessary to protect and defend the rights, property or personal safety of the Website or its visitors.
Service Providers
We may share your personal data with third party service providers who provide us with the goods or services you may have ordered (eg.sizing information) or addresses for courier and shipping..
We will only provide service providers with the minimum amount of personal data they need to fulfil the services we request, and we stipulate that they protect this information and do not use it for any other purpose. We take these relationships seriously.
6. PROTECTION and MANAGEMENT of your Personal Data
• Encryption & Security: Shara takes the protection of your information very seriously. We use a variety of technical and organisational security measures, including encryption and authentication tools, to maintain the safety of your personal data and to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to these systems.
Shara may store your personal data on secure servers either on our premises or in secure third party data centres. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
-
Retention of your data: Except if required otherwise by law, we retain your personal data for as long as necessary to fulfil the purposes for which we collect it and where we have a legitimate interest in doing so, such as:
-
To enable us to respond effectively to grievances that may arise after you cease to engage with us; or
In some circumstances you can ask us to delete your data: see ‘Your Rights’ below for further information.
7. YOUR RIGHTS related to your personal data
As a data subject you have a number of rights in relation to your personal data. Below, we have described the various rights that you have, as well as how you can exercise them.
Right of Access
You may, at any time, request access to the personal data that we hold which relates to you (you may have heard of this right being described as a “subject access request”).
Please note that this right entitles you to receive a copy of the personal data that we hold about you in order to enable you to check that it is correct and to ensure that we are processing that personal data lawfully. It is not a right that allows you to request personal data about other people, or a right to request specific documents from us that do not relate to your personal data.
You can exercise this right at any time by writing to us using contact details set out here and telling us that you are making a subject access request. You do not have to fill in a specific form to make this kind of request.
Your Right to Rectification and Erasure
You may, at any time, request that we correct personal data that we hold about you which you believe is incorrect or inaccurate. You may also ask us to erase personal data if you do not believe that we need to continue retaining it (you may have heard of this right described as the “right to be forgotten”).
Please note that we may ask you to verify any new data that you provide to us and may take our own steps to check that the new data you have supplied us with is right. Furthermore, we are not always obliged to erase personal data when asked to do so; if for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to erase we will tell you what that reason is at the time we respond to your request.
You can exercise this right at any time by writing to us using the contact details set out here and telling us that you are making a request to have your personal data rectified or erased and on what basis you are making that request. If you want us to replace inaccurate data with new data, you should tell us what that new data is. You do not have to fill in a specific form to make this kind of request.
8. CHANGES to our Privacy Policy
Applicable law and our practices change over time. If we decide to update this Policy, we will post the changes on the Website and Apps. If we materially change the way in which we process personal data, we will provide you with prior notice, or where legally required, request your consent prior to implementing such changes. We strongly encourage you to read this Policy and keep yourself informed of our practices.