Privacy Policy

PRIVACY POLICY

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 Introduction

Welcome to Allure Sydney. We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or engage with our services. Personal data refers to any information that can be used to personally identify you.

1.2 Controller Information

The data controller responsible for the processing of your personal data on this website, in accordance with the General Data Protection Regulation (GDPR), is Allure Sydney. The data controller is the individual or legal entity that determines the purposes and means of processing personal data.

1.3 Data Security

To ensure the secure transmission of your personal data and other confidential information (e.g., orders or inquiries), our website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

2.1 Server Log Files

When you visit our website purely for informational purposes (i.e., without registering or providing personal information), we collect only the data that your browser transmits to our server. This data is collected in server log files and is necessary for us to display the website correctly. The data collected may include:

  • The website you visited
  • The source/reference from which you accessed the page
  • The browser you are using
  • The operating system you are using
  • Your IP address (in anonymized form, if applicable)

This processing is based on our legitimate interest in ensuring the stability and functionality of our website, as per Art. 6 para. 1 lit. f GDPR. This data is not shared with third parties and is used solely for website performance monitoring. However, we reserve the right to retrospectively review server log files if there are specific indications of unlawful use.

3) COOKIES

3.1 Use of Cookies

To enhance your experience on our website and enable certain features, we use cookies—small text files stored on your device. Some cookies are session-based and are deleted when you close your browser, while others are persistent and remain on your device to recognize your browser on subsequent visits.

3.2 Cookie Management

Cookies may collect data such as browser type, location data, and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. Cookies are used to simplify your shopping experience by, for example, saving the contents of your virtual shopping cart for your next visit. If cookies process personal data, it is done so either to fulfill a contract or based on our legitimate interest in providing the best possible functionality of the website.

3.3 Third-Party Cookies

We may collaborate with third-party advertising partners to make our website more engaging for you. As a result, cookies from these partners may be stored on your hard drive when you visit our site. You will be informed about the use of such cookies, and the scope of the data collected, in the relevant sections of this Privacy Policy.

3.4 Cookie Settings

You can configure your browser to notify you when cookies are set and decide on a case-by-case basis whether to accept or reject them, or you can disable cookies altogether. The way cookies are managed differs by browser; you can find instructions in the help menu of your browser. Please note that disabling cookies may limit the functionality of our website.

4) CONTACTING US

4.1 Data Collection for Contact Requests

When you contact us via our contact form or email, the personal data you provide is collected and used solely for the purpose of processing your inquiry and the related technical administration. The specific data collected will depend on the contact form used. The legal basis for this processing is our legitimate interest in responding to your inquiry, in accordance with Art. 6 para. 1 lit. f GDPR. If your inquiry is aimed at entering into a contract, the legal basis for processing is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted once your inquiry has been fully resolved, provided there are no statutory retention requirements.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

5.1 Customer Account and Contract Data

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will be collected and processed when you provide it for contract execution or when opening a customer account. The specific data collected can be seen in the respective input forms. You can delete your customer account at any time by contacting us at the above address. Your data will be stored and used for contract processing. After full contract execution or account deletion, your data will be blocked in compliance with tax and commercial law retention periods and deleted after these periods expire unless you have consented to further use of your data.

6) USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Email Newsletter Subscription

If you subscribe to our email newsletter, we will regularly send you information about our products and offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and used to address you personally. The newsletter is sent via a double opt-in process, meaning that we will only send you the newsletter if you have expressly confirmed your consent.

By clicking the confirmation link, you consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address, the date, and the time of registration to prevent misuse of your email address. The data collected is used solely for sending the newsletter.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by contacting us at the address provided above. After unsubscribing, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data.

6.2 Email Newsletter to Existing Customers

If you have provided your email address when purchasing goods or services from us, we reserve the right to send you regular offers for similar goods or services via email. This is based on our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails. You may object to the use of your email address for advertising purposes at any time by contacting us.

7) DATA PROCESSING FOR ORDER PROCESSING

7.1 Data Transfer for Contract Execution

Personal data collected by us will be passed on to the transport company contracted with the delivery of your goods to the extent necessary for delivery. Your payment data will be forwarded to the relevant payment service provider as necessary for payment processing. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

7.2 Use of Payment Service Providers

  • PayPal

When paying via PayPal, your payment data will be transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The data transfer is necessary for payment processing and is carried out in accordance with Art. 6 para. 1 lit. b GDPR.

PayPal reserves the right to conduct a credit check when paying by credit card, direct debit, or—if offered—purchase on account or installment payment. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR. The result of the credit check may include probability values (so-called score values), which are based on scientifically recognized mathematical-statistical methods. You can find more information in PayPal’s Privacy Policy: PayPal Privacy Policy.

  • Credit Card via Shopify Payments

When paying by credit card through Shopify Payments, your payment data is processed by Shopify International Ltd., a subsidiary of Shopify Inc. Shopify Payments collects and processes your payment details as necessary to complete your transaction. This data processing is based on Art. 6 para. 1 lit. b GDPR.

Shopify ensures that your payment information is handled securely and that all transactions are encrypted. For more details, you can refer to Shopify’s Privacy Policy: Shopify Privacy Policy.

8) REVIEW REMINDERS

8.1 Own Review Reminders

We may use your email address as a one-time reminder to submit a review of your order, provided you have given your express consent during or after placing your order, in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by contacting us.

9) USE OF SOCIAL MEDIA PLUGINS

9.1 Facebook Plugins with Shariff Solution

Our website uses social plugins ("plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. To protect your data when you visit our website, these plugins are integrated using the Shariff solution. This ensures that no connection is established with Facebook’s servers when you access our site unless you click on the button.

For more information, please refer to Facebook’s Privacy Policy: Facebook Privacy Policy.

9.2 Google+ Plugins with Shariff Solution

Our website uses social plugins from Google+ operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These plugins are also integrated using the Shariff solution, ensuring that your data is not transmitted to Google unless you interact with the plugin.

For more information, visit Google’s Privacy Policy: Google Privacy Policy.

9.3 Instagram Plugin with Shariff Solution

Our website uses social plugins from Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. These plugins are integrated using the Shariff solution to protect your data.

For more details, see Instagram’s Privacy Policy: Instagram Privacy Policy.

10) ONLINE MARKETING

10.1 DoubleClick by Google

Our website uses DoubleClick by Google, an online marketing tool by Google LLC, to display ads that are relevant to users and to measure campaign performance. DoubleClick uses cookies to ensure that the same ads are not displayed repeatedly.

This processing is based on our legitimate interest in the optimal marketing of our website, in accordance with Art. 6 para. 1 lit. f GDPR.

For more information, refer to Google’s Privacy Policy: Google Privacy Policy.