PRIVACY

2FAY PTY LTD – PRIVACY POLICY

This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or otherwise collected by us, offline or online, including through this website and mobile application (Site). In this Privacy Policy we, us or our means 2FAY PTY LTD. When we collect, store, and use your personal information, we do so in accordance with the rules set down in the Australian Privacy Act 1988 (Cth) and by the European Union General Data Protection Regulation (EU) 2016/279 (the GDPR).

Personal Information

The types of personal information or personal data we may collect about you include:

Your name
Images of you
Your contact details, including email address, mailing address, street address, and/or telephone number
Your age and/or date of birth
Your payment information
Your demographic information, such as postcode
Your preferences and/or opinions
Information you provide to us through customer surveys
Details of products and services we have provided to you and/or that you have enquired about
Your browser session and geo-location data, device and network information, statistics on page views and sessions, acquisition sources, search queries, and/or browsing behaviour
Information about your access and use of our Site, including through the use of cookies
Additional personal information that you provide to us, directly or indirectly, through your use of our Site, associated applications, and associated social media platforms
Any other personal information requested by us and/or provided by you or a third party

We may collect these types of personal information directly from you or from third parties.

Collection and Use of Personal Information

We may collect, hold, use, and disclose personal information for the following purposes:

To enable you to access and use our Site, associated applications, and associated social media platforms
To contact and communicate with you
For internal record keeping and administrative purposes
For analytics, market research, and business development
To run competitions and/or offer additional benefits to you
For advertising and marketing, including sending you promotional information
To comply with our legal obligations and resolve disputes

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

Third-party service providers, including IT service providers, data storage, web hosting, marketing, payment systems operators, and professional advisors
Our employees, contractors, and/or related entities
Our existing or potential agents or business partners
Sponsors or promoters of any competition we run
Anyone to whom our business or assets may be transferred
Credit reporting agencies, courts, tribunals, and regulatory authorities
Law enforcement officers, as required by law
Third parties, including agents or sub-contractors, who assist us in providing services to you

Where we disclose your personal information to third parties, we will request that they handle your personal information in accordance with this Privacy Policy.

Lawful Basis for Processing Personal Data (GDPR)

Under the GDPR, we process personal data based on the following lawful grounds:

Consent: When you have given clear consent for us to process your data for a specific purpose.
Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal Obligation: When processing is necessary to comply with legal obligations.
Legitimate Interests: When processing is necessary for our legitimate interests, provided that your rights do not override those interests.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. We will securely delete or anonymize personal data when it is no longer required for these purposes unless we are legally required to retain it for a longer period.

International Data Transfers

If we transfer your personal data outside of Australia or the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions confirming that the receiving country provides adequate data protection
Other lawful transfer mechanisms under applicable privacy laws

Your Rights and Controlling Your Personal Information

You have the right to:

Restrict or withdraw your consent
Access your personal information
Request correction or deletion of your personal information
Object to processing of your personal data
Request data portability (to receive your data in a structured, commonly used format)
Not be subject to automated decision-making, including profiling
Lodge a complaint if you believe we have breached the Australian Privacy Principles or the GDPR

To exercise any of these rights, please contact us using the details below.

Data Breach Notification

In the event of a data breach that is likely to result in serious harm, we will comply with the Australian Notifiable Data Breaches (NDB) scheme and GDPR by:

Notifying affected individuals and relevant authorities as required.
Taking immediate steps to mitigate risks and secure personal data.

Storage and Security

We are committed to ensuring the security of the personal information we collect. We implement physical, electronic, and managerial safeguards to protect against unauthorised access, modification, disclosure, or misuse. However, we cannot guarantee the security of information transmitted over the Internet.

Cookies and Web Beacons

We may use cookies and web beacons to improve your experience on our Site. These technologies allow us to analyze website traffic and optimize our marketing strategies. You can adjust your browser settings to refuse cookies if you prefer.