Privacy Policy
1.1 Thank you for visiting our website. Below, we explain how we handle your personal data when you use our site. Personal data means any information that allows you to be personally identified.
1.2 The data controller for this website is Isla & Harper Melbourne. The controller is the natural or legal person who decides, alone or jointly with others, on the purposes and means of processing personal data (as defined by the EU General Data Protection Regulation — GDPR).
1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or enquiries). You can recognise an encrypted connection by the browser address bar beginning with “https://” and the padlock icon.
2) Data collected when you visit our website
When you use our site purely for informational purposes (without registering or sending us any information), we only collect the data your browser transmits to our server (the so-called “server log files”). These are necessary to display the site and ensure its stability. The following data is collected:
● Page visited
● Date and time of access
● Amount of data transferred (in bytes)
● Page from which you accessed our site (referrer)
● Browser used
● Operating system used
● IP address used (possibly anonymised)
This data is processed on the basis of our legitimate interest in improving the stability and functionality of the site, in accordance with Article 6(1)(f) GDPR. No further transfer or use of the data takes place, unless there are concrete indications of unlawful use, in which case the logs may be reviewed retrospectively.
3) Cookies
To make our website appealing and to enable certain features, we use cookies (small text files stored on your device). Some cookies are deleted once your session ends (session cookies), while others remain stored to recognise your browser on future visits (persistent cookies). These cookies may collect personal data such as your browser, location or IP address.
Persistent cookies are automatically deleted after a set period, which varies by cookie. Some cookies simplify the ordering process (for example, by saving the items in your cart). Where cookies process personal data, this processing is based on Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f) (legitimate interest in optimal site functionality and an efficient user experience).
We may work with advertising partners who also store cookies on your device when you visit our site (third-party cookies). Where this is the case, we'll inform you in this policy about their use and scope.
You can set your browser to notify you when cookies are being installed and decide individually whether to accept them. How to do this varies by browser; check its help menu. Here are some useful links:
● Internet Explorer
● Firefox
● Chrome
● Safari
● Opera
If you refuse cookies, some features of the site may not be available.
4) Contact
When you contact us (for example, via a form or email), we collect your personal data. The data collected is specified in the relevant form. We use this data solely to respond to your enquiry and manage the related technical aspects. The legal basis for this processing is our legitimate interest in responding (Article 6(1)(f) GDPR). If your contact is to enter into a contract, the legal basis will also be Article 6(1)(b). Once the matter has been resolved and there are no legal retention obligations, your data will be deleted.
5) Creating customer accounts and performing contracts
When you provide us with personal data to enter into a contract or create a customer account, we process it under Article 6(1)(b) GDPR. The data required is specified in the forms. You can request deletion of your account at any time by writing to the controller's address mentioned above. Once the contract is completed or the account deleted, the data will be blocked for tax and business reasons and deleted once those periods have expired, unless you give your consent for further use or the law permits it.
6) Use of data for direct marketing
6.1 Newsletter subscription If you subscribe to our newsletter, we'll regularly send you offers. We only need your email address; other details are optional and are used to personalise the message. We use the “double opt-in” method, meaning you'll receive a confirmation email and we'll only start sending you the newsletter once you click the link.
By activating the link, you consent to the processing of your data under Article 6(1)(a) GDPR. We record the IP address and time of registration to prevent misuse. You can unsubscribe at any time using the link in the newsletter or by writing to us at info@islaandharpermelbourne.com. As soon as you do, we'll remove your address from our list, unless you consent to another use or the law permits it.
6.2 Sending newsletters to existing customers If you gave us your email address when making a purchase, we may email you offers for similar products without requiring additional consent. This is based on our legitimate interest in personalised direct marketing, in accordance with Article 6(1)(f) GDPR. You can object at any time by writing to us.
