Identity and Contact of the Data Controller
Nimbin Candles is the data controller for the personal information we collect. You can contact us at:
- Email: nimcand@bigpond.net.au
- Address: Unit 5, 2 Blue Knob Rd, Nimbin NSW 2480
Personal Information Collected
We collect various types of personal information to provide our services effectively, including:
- Customer Account Information: Name, email address, and password when you create an account.
- Payment Information: We use PayPal for processing payments, and we do not store your credit card details.
- Cookies and Similar Technologies: We use essential cookies for cart functionality and session management.
- Analytics Services: We may use analytics tools to understand how our website is used.
- Email Marketing / Newsletter: If you subscribe, we collect your email address to send you updates and promotions.
- Reviews and User-Generated Content: Information you provide when you leave a review or comment.
Purpose of Collection
We collect personal information for the following purposes:
- To create and manage your customer account.
- To process your orders and payments.
- To communicate with you regarding your orders and inquiries.
- To send you marketing communications if you have opted in.
- To improve our website and services based on user feedback and analytics.
Right to Access and Correct Personal Information
You have the right to access and correct your personal information held by us. If you would like to request access or make corrections, please contact us using the details provided above.
How to Lodge a Privacy Complaint
If you have a privacy complaint that we have not resolved to your satisfaction, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
Australian Privacy Principles Compliance Statement
This policy is compliant with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Data Retention
We retain your personal information for as long as your account is active and for an additional 7 years to comply with tax law.
Security Measures
We take the security of your personal information seriously. Our security measures include:
- SSL/TLS encryption for data in transit.
- PCI-DSS compliant payment processing through PayPal.
Third-Party Data Sharing
We do not sell or rent your personal information to third parties. We may share your information with service providers who assist us in operating our business, such as payment processors and shipping companies, but only as necessary to fulfil your orders.
International Data Transfer
We do not transfer your personal information outside Australia.
Children's Privacy
We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected such information, we will take steps to delete it.