1 – What do we do with your information?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your location.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
SECTION 2 – Consent
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
We will never use your information for any secondary reason, like marketing.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at hello@hippy.nz or mailing us at:
Hippy Soap Co.
37 Kirkcaldy Street, Dunedin 9012
New Zealand
SECTION 3 – Disclosure
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 – E-commerce
Our store is located on hippy.nz and use our own online e-commerce platform, which allows us to sell our products and services to you.
Your data is stored through Hippy Soap Co.s data storage, database and the e-commerce application. We store your data on a secure server behind a firewall.
Payment:
If you choose a direct payment gateway to complete your purchase, we use Stripe which then stores your credit card data. It is encrypted through their Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Stripe Checkout User Terms of Service (https://stripe.com/us/checkout/legal) or Global Privacy Policy (https://stripe.com/us/privacy).
SECTION 5 – Third-Party Services
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
SECTION 6 – Security
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 – Cookies
A cookie is typically a small piece of data sent to your computer device from a website and stored in your web browser while you are browsing a website. When you browse the same website again, the data stored in the cookie may be retrieved by the website to notify the website of your previous activity. To read more about these technologies and how they work, please see for example http://www.allaboutcookies.org.
From time to time, a ‘cookie’ file may be placed on your computer to improve the effectiveness of this site and/or Hippy Soap Co.s services to you. Most browsers are set to accept cookies. You can change your settings to refuse all cookies or to tell you when a cookie is being sent.
This Privacy Policy details how Hippy Soap Co. utilizes cookies and cookie-like files and technologies on the site. If you visit our site and your browser settings accept cookies, Hippy Soap Co. considers this as an express consent of Hippy Soap Co.s use of cookies.
Purposes of use of cookies
The use of certain cookies is necessary to run basic functions on the site. These cookies are essential for running the Site and are needed to provide you a pleasant experience when visiting the site.
Hippy Soap Co. may also use cookies to provide better services and products to you. These cookies are used for e.g. site improvement, and personalisation. From your point of view this means that the site may remember e.g. the language and country choices you have made. Hippy Soap Co. does also analytical profiling to discover e.g. what is popular among users. Hippy Soap Co. looks at where the content of the site is accessed to help Hippy Soap Co.s arrange the site for best possible user experience. Hippy Soap Co. also looks at what kinds of references are used to reach the site in order to evaluate the effectiveness of Hippy Soap Co.s campaigns and promotions.
The length of storage of information depends on the type of cookie used. Session cookies expire when the browser is closed, while persistent cookies have typical expiration dates between two months and a couple of years.
To view Stripes Cookies policy https://stripe.com/cookies-policy/legal
SECTION 8 – Age of consent
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
SECTION 9 – Changes to this privacy policy
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at hello@hippy.nz or by mail at
Hippy Soap Co.
37 Kirkcaldy Street, Dunedin 9012
New Zealand