Privacy Policy

Thanks for visiting my website.

Jodie Thornton ABN 86 225 587 420 is committed to protecting your privacy as an online visitor to my website.

This privacy policy provides you with details of how Jodie Thornton collects and processes your personal data through your use of my site.

As an online business, I aim to comply with the Australian Privacy Principles contained in The Privacy Act 1988 (Cth) and General Data Protection Regulations (GDPR) to ensure that your information is protected.

I use the information I collect about you to maximise the services and products I provide to you via my website and through my business.

By providing me with your data, you warrant that you are over the age of 18 years.

This Privacy Policy, together with my Website Terms of Use (including Disclaimer) and Listing Terms and Conditions, form the entire agreement between you and Jodie Thornton.

Jodie Thornton is the controller of the personal information collected via this website; therefore, I am responsible for your personal data (referred to as “I” or “my” in this Privacy Policy).

Contact Details

My full contact details are:

Jodie Thornton ABN: 86 225 587 420

You can contact me through the contact form on this website at https://jodiethornton.com/contact

Please also use the contact form to obtain a postal address as this address is a private address.

It is essential that the information I hold about you is accurate and up to date. Please let me know if at any time your personal information changes by using the contact form on this website.

Personal Information – Type, purpose and legal grounds

Personal information/data means any information capable of identifying an individual. It does not include data that is anonymous in its source.

I may process the following categories of personal data about you:

Communication Information

1. Communication information includes any communication that you send to me. This information can be sent to me through:

Customer Information

1. Customer information or data includes any information you provide relating to any purchases of goods and/or services, such as your name, title, billing address, delivery email address, phone number, contact details, purchase details, and card details.
2. I process this information to:
  - Supply the goods and/or services you have purchased, and;
  - To keep records of such transactions.
3. My legal ground for this processing is the performance of a contract between you and me and/or taking steps at your request to enter into such a contract.

User Information/Data

1. User information includes data about how you my website and any online services together with any data that you may post for publication on our website or through other online services. I may collect, store and use:
  - information that you provide to me when using the services on my website or that is generated in the course of the use of those services (including the timing, frequency, and pattern of service use);
  - information contained in, or relating to, a personal or business account with our website (including name, email address, date and month of birth);
  - information that you provide when you provide feedback;
  - information that you provide when you change your personal details or email preferences;
  - information that you provide when you respond to a survey;
  - information that you provide when you communicate with my customer support;
  - any other personal information that you choose to send to me.
2. Before you disclose to me the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy.
3. I process this data to
  - Operate my website and ensure relevant content is provided to you;
  - To ensure the security of my website;
  - To maintain backups of my website and/or databases and;
  - To enable publication and administration of my website, other online services, and business.
4. My legal ground for this processing is our legitimate interests, which are to enable me to administer my website and my business properly.
5. I will not, without your express consent, supply your personal information to any third party for their or any other third party’s direct marketing.

Technical Data

Technical data is information about your use of my website and online services, such as information about your visits to and use of this website, including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths.
The source of this data is from my analytics tracking system.
I process this data to analyse your use of my website and other online services, administer and protect my business and website, deliver relevant website content and advertisements to you, and understand the effectiveness of my advertising.
My legal ground for this processing is my legitimate interests, which are to enable me to administer my website and my business properly, grow my business, and decide my marketing strategy.

Financial Transactions

1. All my website financial transactions are currently handled through my payment services providers. However, this may change from time to time.
2. I will share information with my payment services providers only to the extent necessary for processing payments you make via my website, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
3. All individual profile and company details are not used for any other purpose other than that described above.
4. Details are only supplied to a third-party supplier when required by law for goods or services you have purchased or to protect my copyright, trademarks, and other legal rights.

Marketing Information/Data

1. Marketing information includes data about your preferences in receiving marketing from my third parties and us and your communication preferences.
2. I process this data to:

1. - Enable you to receive my newsletter;
  - Enable you to participate in promotions such as competitions, prize draws and free giveaways;
  - To deliver relevant website content and advertisements to you and measure or understand the effectiveness of this advertising.
2. My legal ground for this processing is our legitimate interests, which are to study how customers use my products/services, develop them, grow my business, and decide my marketing strategy.
3. I may use Customer, User, Technical and Marketing Information/Data to:

1. - Deliver relevant website content and advertisements to you (including Facebook adverts or other display advertisements) and;
  - Measure or understand the effectiveness of the advertising I offer to you.
2. My legal ground for this processing is legitimate interest which is to grow my business.
3. I may also use such data to send other marketing communications to you. My legal grounds for doing so are your consent or legitimate interest, namely to grow my business. (Please see Marketing Communications below – Section 4).

Sensitive Data

1. I do not collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. I do not collect any information about criminal convictions and offences.

Contract Obligations

1. Where I am required to collect personal data by law or under the terms of the contract between us, and you do not provide me with that data when requested, I may not be able to perform the contract (for example, to deliver goods or services to you).
2. If you don’t provide me with the requested information, I may have to cancel a product or service you have ordered, but if I do, I will notify you at the time.

Use of Personal Information

1. I will only use your data for the purpose it was collected for or reasonably compatible purposes if necessary. If I need to use your details for an unrelated new purpose, I will let you know and explain the legal grounds for processing.
2. I may process your personal information without your knowledge or consent where this is required or permitted by law.

How your personal information is collected

Cookies

1. I may automatically collect certain data from you as you use my website by using cookies and similar technologies.
2. A “cookie” is a piece of information that is stored on your computer’s hard drive and which records how you move your way around a website so that, when you revisit that website, it can present tailored options based on the information stored about your last visit. Cookies can also be used to analyse traffic and for advertising and marketing purposes.
3. Cookies are used by nearly all websites and do not harm your system.
4. If you want to check or change what types of cookies you accept, this can usually be altered within your browser settings. You can block cookies at any time by activating the setting on your browser that allows you to refuse the setting of all or some cookies. By not blocking cookies and continuing to browse, you are authorising the use of cookies. If you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our Site.

How do I use cookies?

1. I use cookies to track your use of my website. This enables me to understand how you use the Site and track any patterns regarding how you are using my website. This helps me develop and improve my website and products and/or services in response to what you might need or want.

Types of Cookies:

1. Session cookies: these are only stored on your computer during your web session and are automatically deleted when you close your browser – they usually store an anonymous session ID allowing you to browse a website without having to log in to each page, but they do not collect any personal data from your computer; or
2. Persistent cookies: a persistent cookie is stored as a file on your computer, and it remains there when you close your web browser. The cookie can be read by the website that created it when you visit that website again. For example, I use persistent cookies for Google Analytics.

Cookies categories:

1. Strictly necessary cookies: These cookies are essential to enable you to use the website effectively, such as when buying a product and/or service, and therefore cannot be turned off. Without these cookies, the services available to you on my website cannot be provided. These cookies do not gather information about you that could be used for marketing or remembering where you have been on the internet.
2. Performance cookies: These cookies enable me to monitor and improve the performance of my website. For example, they allow me to count visits, identify traffic sources and see which parts of the Site are most popular.
3. Functionality cookies: These cookies allow my website to remember the choices you make and provide enhanced features. For instance, I may be able to provide you with news or updates relevant to the services you use. They may also be used to provide services you have requested, such as viewing a video or commenting on a blog. The information these cookies collect is usually anonymised.
4. Please note that third parties who advertise on our website (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

Marketing Communications

My lawful ground of processing your personal data to send you marketing communications is either your consent or my legitimate interests, namely to grow my business.

I may send you marketing communications if:

You made a purchase or asked for information from me about my goods or services; or
You agreed to receive marketing communication, and, in each case, you have not opted out of receiving such communications since.
You are a company; I may send you marketing emails without your consent. You may opt out of receiving marketing emails from me at any time.

Express consent

It is unlikely that Jodie Thornton will share your personal data with any third party for their own marketing purposes; however, I will obtain your express consent in such circumstances.

Stopping marketing messages

1. You can ask third parties or me to stop sending you marketing messages at any time by:
  - following the opt-out links on any marketing messages sent to you, or
  - Using the contact form at https://jodiethornton.com/contact at any time.
2. If you opt-out of receiving marketing communications, this opt-out does not apply to personal data provided as a result of other transactions, such as purchases, warranty registrations, returns, replacements etc.

Disclosures of Your Personal Data

I may have to share your personal data with the parties set out below:

Service providers who provide IT and system administration services.
Professional advisers, including lawyers, bankers, auditors, and insurers.
Government bodies that require us to report processing activities.
Market Researchers and Analysts.
Marketing agencies I may engage with from time to time.
Third parties to whom I sell, transfer, or merge parts of my business or my assets.

I require all third parties to whom I transfer your data to respect the security of your personal data and treat it according to the law. I only allow such third parties to process your personal data for specified purposes and in accordance with my instructions.

International Transfers (for example, to my preferred email marketing platform or CRM)

Whenever I transfer your personal data, I do my best to ensure a similar degree of security of data by ensuring at least one of the following safeguards is in place:

If you are a resident of the European Union, I will only transfer your personal data to countries that the European Commission have approved as providing an adequate level of protection for personal data by; or
Where I use certain service providers, I may use specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe; or
If I use US-based providers part of EU-US Privacy Shield, we may transfer data to them, as they have equivalent safeguards in place.

If none of the above safeguards is available, I may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.

Data Security

I strive to ensure the security, integrity, and privacy of personal information submitted to my website, and I periodically update my security measures in light of current technologies.

I will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

You acknowledge that the transmission of information over the internet is inherently insecure, and I cannot guarantee the security of data sent over the internet.

I have procedures in place to deal with any suspected personal data breach. I will notify you and any applicable regulator of a breach if I am legally required to.

Data Retention

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including to satisfy any legal, accounting, or reporting requirements.

For tax purposes, the law requires me to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for five years after they stop being customers.

In some circumstances, I may delete identifying components of your data for research or statistical purposes, in which case I may use this information indefinitely without further notice to you.

Your Legal Rights

Under data protection laws, you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, object to processing, portability of data, and (where the lawful ground of processing is consent) to withdraw consent.

If you wish to exercise any of the rights set out above, please contact me through the form at https://jodiethornton.com/contact

To respond to any request, I will require the following information:

your name and address; and
your contact telephone numbers

There is no fee chargeable to access your personal data; however, I may charge a fee if your request is unfounded, repetitive or excessive, or refuse to comply with my request in these circumstances.

As a security measure to ensure your data is not disclosed to any person who has no right to receive it, I may request further information from you.

I try to respond to all legitimate requests within 30 days unless the request is complex or where there are multiple requests. If my response is likely to exceed 30 days, you will be notified.

If you are not happy with any aspect of how I collect and use your data, please contact me first to attempt to resolve your issue immediately. You also have the right to complain to the Office of the Australian Privacy Commissioner (https://www.oaic.gov.au), the Australian supervisory authority for data protection issues.

Change in Privacy Policy

To ensure my privacy policy remains current, this policy is subject to change.

I may modify this policy at any time, at my sole discretion. All modifications will be effective immediately upon my posting of the modifications on this website. Therefore, please return periodically to review my privacy policy.

You may instruct me at any time not to process your personal information for marketing purposes.

In practice, you will usually either expressly agree in advance to my use of your personal information for marketing purposes, or I will provide you with an opportunity to opt out of the use of your personal information for marketing purposes.

If you have any questions or concerns at any time about my Privacy Policy or the use of your personal information, please use the contact form at https://jodiethornton.com/contact