Cloud Blvd Privacy Policy
Privacy Policy
Cloud Blvd Trading Pty Ltd (ABN 79 667 509 435; ACN 667 509 435), trading as Cloud Blvd (Cloud Blvd, we, us or our), respects your privacy. This policy explains how we collect, hold, use and disclose personal information when you use cloudblvd.com.au (the Website), shop with us online or in store, contact us, subscribe to marketing, or enter one of our competitions or giveaways.
We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable privacy, direct-marketing and consumer laws to the extent they apply to us. Where a small-business exemption or another exception applies, we still aim to handle personal information consistently with this policy.
1. Who is responsible for your information?
Cloud Blvd Trading Pty Ltd is responsible for the personal information covered by this policy.
Privacy Officer
Cloud Blvd Trading Pty Ltd (ABN 79 667 509 435)
Shop 14, Lower Ground 2, Queen Victoria Building
455 George Street, Sydney NSW 2000, Australia
Email: info@cloudblvd.com.au
Phone: (02) 9418 8478
2. Personal information we collect
Depending on how you interact with us, we may collect:
- Identity and contact information, such as your name, email address, telephone number, billing address, delivery address and social-media handle.
- Account and transaction information, such as your customer account, order and return history, items purchased, size and product preferences, gift-card information, discounts, transaction status and limited payment-related information supplied by our payment providers. We do not ordinarily receive or store full payment-card numbers.
- Communications, including customer-service messages, enquiries, complaints, survey responses, reviews and content you choose to send or post.
- Marketing information, including your subscriptions, consent records, interests, engagement with messages and opt-out preferences.
- Website and device information, such as IP address, browser and device type, operating system, identifiers, cookie data, approximate location, referral source, pages viewed and interactions with the Website and our advertising.
- Store information, such as information you provide during an in-store transaction, fitting, return, enquiry or promotion.
- Competition and giveaway information, including entry method, number of entries, newsletter sign-up, eligible purchase and order value, social-media actions, social-media handle, age and Australian-residency confirmation, winner contact details, claim information and any evidence reasonably needed to verify eligibility.
- Fraud, security and compliance information, such as transaction risk indicators, suspected misuse, identity or eligibility verification and records required by law.
We do not intentionally ask for sensitive information unless it is reasonably necessary and permitted by law. Please do not send health information or other sensitive information unless we specifically request it and explain why it is needed.
3. How we collect personal information
We may collect personal information:
- directly from you when you buy, return or enquire about a product, create an account, contact us, subscribe, complete a form or enter a promotion;
- automatically through the Website, cookies and similar technologies;
- from Shopify and other service providers that operate our ecommerce, payments, point-of-sale, delivery, customer service, marketing, analytics, advertising, security and promotion systems;
- from social-media platforms when you interact with our pages, advertisements or promotions, subject to your settings and the platform's terms; and
- from another person where they send you a gift or provide your details for delivery, or where the law otherwise permits.
If you give us personal information about another person, please ensure you are authorised to do so and, where practicable, tell them about this policy.
4. Anonymity, pseudonyms and unsolicited information
You may browse much of the Website without identifying yourself, although cookies and device information may still be collected. Where lawful and practicable, you may use a pseudonym for a general enquiry. We need accurate identifying and contact information for activities such as processing and delivering an order, completing a return, responding to an account-specific request, preventing fraud or verifying a winner.
If we receive personal information we did not request, we will assess whether we could lawfully have collected it. If not, we will take reasonable steps to delete or de-identify it unless it is unlawful or unreasonable to do so.
5. Why we collect, use and disclose personal information
We may handle personal information to:
- provide the Website, customer accounts and in-store services;
- process payments, orders, deliveries, returns, exchanges, credits and gift cards;
- communicate with you and provide customer support;
- maintain records, manage inventory and improve our products, services, stores and Website;
- personalise content, measure performance and, where permitted, provide relevant marketing and advertising;
- record and respect your marketing choices and manage unsubscribe requests;
- detect and prevent fraud, abuse, security incidents and unlawful activity;
- administer competitions and giveaways, verify and count entries, conduct draws, contact and verify winners, publish results where disclosed or required, deliver prizes, conduct any lawful redraw and keep required records;
- enforce our terms, protect our rights and resolve disputes; and
- comply with laws, lawful requests, court orders and regulatory requirements.
If you do not provide information that is necessary for a particular activity, we may be unable to process your order, deliver products, respond to your request, provide an entry, verify eligibility or award a prize. Optional information will be identified or apparent from the circumstances.
6. Competitions and giveaways
Each competition or giveaway has specific terms setting out its entry methods, eligibility, dates, prize, draw and publication arrangements. Those terms govern the promotion mechanics; this policy governs how we handle personal information.
For the Cloud Blvd Spring Collection Giveaway, we may use entry and transaction information to verify Instagram actions, newsletter sign-up and eligible purchases; allocate entries; conduct a random draw; notify and verify the winner; publish the result as stated in the giveaway terms; deliver the $500 Cloud Blvd gift voucher; conduct any redraw; and maintain legally required records. The current giveaway terms are available at the giveaway page.
If an entrant tags another person on Instagram, we use the tagged handle only to validate the relevant entry and do not add that person to our marketing list. A winner may need to provide evidence of age or Australian residency, but we will seek only what is reasonably necessary. Promotion records may be kept for at least two years after the draw where required by applicable trade-promotion laws.
7. Direct marketing
We may send email or SMS marketing where you have consented or where otherwise permitted by law. Choosing newsletter sign-up as a giveaway entry method is a request to subscribe to Cloud Blvd promotional emails. Entering by another method does not, by itself, subscribe you to marketing.
You can unsubscribe using the link in an email, replying STOP to an SMS, or contacting us. We do not charge for unsubscribing, do not require you to log in, and will action email and SMS unsubscribe requests within five working days. Withdrawing marketing consent does not invalidate an otherwise valid competition entry, although we may still send non-marketing messages needed to administer an order or competition.
8. Cookies, analytics and advertising
We and our service providers may use cookies, pixels, tags, local storage and similar technologies to operate the Website, remember preferences and cart contents, secure transactions, understand Website use, measure campaigns and provide or measure advertising. These technologies may collect Website and device information and link it with other information held by us or a provider.
You can manage cookies through your browser and any cookie-preference tools we make available. Blocking essential cookies may prevent parts of the Website from working. You can also manage advertising preferences through the relevant platform settings.
9. Who we disclose personal information to
We may disclose personal information to:
- Shopify and providers of ecommerce, hosting, point-of-sale and customer-account services;
- payment processors, fraud-screening providers and financial institutions;
- warehousing, delivery, logistics, returns and fulfilment providers;
- customer-service, email, SMS, CRM, analytics, marketing and advertising providers;
- social-media platforms where you interact with our content, advertising or promotions;
- IT, cybersecurity, data-storage and professional advisers, including lawyers, accountants, auditors and insurers;
- regulators, courts, law-enforcement bodies and other persons where required or authorised by law; and
- a purchaser, adviser or successor in connection with a proposed or completed business sale, restructure or transfer, subject to appropriate safeguards.
We do not sell customer lists for money. Where advertising features are enabled, we may provide identifiers or event information to advertising platforms so they can measure campaigns or provide relevant advertising, subject to applicable law and available privacy controls.
10. Overseas recipients
Some providers process or store personal information outside Australia. Based on our current core ecommerce, marketing and social-media arrangements, likely overseas locations include Canada and the United States. A provider or its subcontractors may also process information in other countries in which they operate. Where the Privacy Act applies, we take reasonable steps in relation to overseas disclosures as required by law. Contact our Privacy Officer if you would like further information about likely overseas locations for a particular service.
11. How we hold personal information
We principally hold personal information electronically in our ecommerce, point-of-sale, customer-service, marketing, analytics and business systems and in systems operated by our contracted service providers. Limited paper records may be held at our store or administrative premises. Access is limited according to business need and subject to reasonable security controls.
12. Data quality, access and correction
We take reasonable steps to keep personal information accurate, complete and current. You may ask to access or correct personal information we hold about you by contacting our Privacy Officer. We will verify your identity and respond within a reasonable period. We do not charge for making a request, although the law may allow a reasonable charge for providing access. If we refuse access or correction, we will explain why and outline available complaint options where required by law.
You may also ask us to delete information. We will do so where reasonably practicable and legally permitted, but may retain information needed for transactions, disputes, fraud prevention, promotion records or other legal obligations.
13. Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this policy or as required by law. Retention periods vary according to the type of record. We may retain transaction and tax records for applicable statutory periods, promotion records for at least two years where required, and complaint or dispute records while a matter remains relevant. When information is no longer needed, we take reasonable steps to delete it or de-identify it, subject to lawful backup and recordkeeping requirements.
14. Security and data breaches
We use reasonable administrative, technical and physical safeguards designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. No method of transmission or storage is completely secure. Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible data breaches and notify affected individuals and the Office of the Australian Information Commissioner when required by law.
15. Automated processing
Ecommerce and payment systems may use automated tools to generate fraud or transaction risk indicators. We use those indicators to help protect customers and our business; material action may be reviewed by our team. We do not currently use personal information in a computer program to make decisions that could reasonably be expected to significantly affect a person's rights or interests without meaningful review. If that changes, we will update this policy as required by law.
16. Children
Our competitions may impose age limits. The Cloud Blvd Giveaway is limited to Australian residents aged 18 years or older. We do not knowingly collect personal information from a child for that giveaway.
17. Third-party sites and social media
The Website may link to third-party sites and social-media platforms. Their privacy practices are governed by their own policies. Review those policies before providing personal information directly to them.
18. Privacy complaints
Please send a privacy complaint to our Privacy Officer using the contact details in section 1 and describe the issue and the outcome you seek. We will acknowledge the complaint, investigate it fairly and aim to provide a substantive response within 30 days. If we need more time, we will tell you why and provide an updated timeframe.
If you are not satisfied with our response and the Privacy Act applies, you may lodge a complaint with the Office of the Australian Information Commissioner. You may also have rights to contact another applicable regulator.
19. Changes to this policy
We may update this policy to reflect changes to our practices, technology or legal obligations. The current version will be posted on this page with its updated date. If a change is material, we will take reasonable steps to provide additional notice.