Privacy Policy
Last Updated [08/09/2024]
TG Christmas ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.tgchristmas.com.au ("Website"), interact with us on social media platforms ("Platforms"), or purchase our products ("Products"), or use our services ("Services"). We adhere to the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) and the New Zealand Privacy Act 2020 and where required by law, the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act.
By accessing or using our Website or making a purchase, you agree to our use of your information in accordance with this Privacy Policy. We encourage you to read through and contact us if you have any questions.
What kind of information do we collect?
Personal Information
Where necessary, we collect information from you that enables you to be identified as an individual, such as your name, email address, phone number, or identifiable as a household, such as your address. This kind of information is defined in the APPs, the New Zealand Privacy Act and the CCPA as personal information and in the GDPR as personal data. The terms “personal data” and “personal information” are used interchangeably throughout this privacy policy.
Generally, the type of personal data we collect is the information that we need to enable you to use our Website and to process your order. To minimise the impact on your privacy, we will never knowingly collect more personal data than is strictly necessary to perform the activities described in this privacy policy.
Photo Sessions
For our photo session services, we collect additional personal information such as:
-
Names of children and adults participating in photo sessions
-
Contact information of parents/guardians (e.g., phone number, email)
-
Booking details (date, time, session type)
-
Photographs taken during the sessions
Payment Information
If you make a purchase from us, we may collect and process your payment details. Please note that we do not store or retain complete credit card information, as all transactions are securely processed by our trusted third-party payment processor, Square. Please refer to Square’s privacy policy for more information https://squareup.com/au/en/legal/general/privacy.
Order Information
We collect information related to your orders, including the products you purchase, the quantities, pricing details, shipping address, and any special instructions or preferences you provide. This information is necessary to fulfill your orders, communicate with you regarding your purchases, and provide customer support.
Account Creation and Login
When you visit our Site, you have the option to create an account by providing certain personal information, such as your name, email address, and password. Creating an account allows you to access additional features and services, such as order history, saved addresses, and faster checkout.
Information Collected for Account Creation
When you create an account, we collect the following personal information:
-
Name
-
Email
-
Password
-
Optionally, you may choose to provide additional information such as your shipping address or contact number.
Login Process
To access your account, you will need to log in using your registered email address and password. Your login credentials are securely stored and encrypted to protect your account information.
Use of Personal Information
The personal information collected during account creation and login is used to:
-
Provide access to your account and its features.
-
Process your orders and transactions.
-
Communicate with you about your account, orders, and promotions.
-
Improve our website and services based on your preferences and feedback.
Protection of Personal Information
We take the security of your personal information seriously and employ industry-standard security measures to safeguard it against unauthorised access, disclosure, or misuse.
Your password is encrypted and cannot be viewed by anyone, including our staff.
Accessing and Updating Your Information
You have the right to access, update, or delete the personal information stored in your account at any time. You can do so by logging in to your account and accessing the "Account Settings" or "Profile" section. If you encounter any difficulties or require assistance with managing your account information, please contact our customer service team for support.
Device Information
When you visit our Website, we automatically collect certain information about your device, that may include information about your IP address, time zone, location, device type and model and/or some of the cookies that are installed on your device. Additionally, as you browse the Website, we collect information about the individual web pages or services that you view, what websites or search terms referred you to the Website, and information about how you interact with the Website.
Photo Session Services
When you book a photo session with TG Christmas, we collect personal information including the names of participating children, contact details of parents/guardians, and booking details. We also create and store photographs from these sessions. This information is used to facilitate the photo sessions, create photo products, and, with your consent, may be used for advertising and social media purposes. By booking a session, parents/guardians provide consent for the collection and use of their children's personal information.
Social Media Platforms and Testimonials
We may collect and use personal information shared on social media platforms for the purpose of client testimonials. Your testimonial or review may include personal information such as your first name, initials, or general geographic location. However, we are committed to protecting your privacy, and we will take reasonable steps to ensure that any personal information shared in testimonials or reviews is anonymised or used with your explicit consent.
Behavioural Advertising
We utilise Google Ads, to present targeted advertisements based on our users' search history, browsing behaviour and interactions with our Site. Google Ads allows us to understand our users’ preferences and interests, enabling us to share things that may be of interest to you.
You can opt-out of Google Ads through the following methods:
You can manage your ad personalisation preferences directly through Google's Ad Settings page.
Most web browsers provide options to manage cookies and control ad tracking. You can adjust your browser settings to limit the data collected for behavioural advertising purposes.
Website Improvements
We use Google Analytics to analyse website traffic, track user engagement, and understand user preferences. This information helps us improve our website's content, design, and user experience. The data collected through Google Analytics is aggregated and anonymised, and we do not use it to identify individual website visitors.
By using our Website, you consent to the processing of data by Google Analytics. You can opt-out of Google Analytics tracking by disabling cookies in your web browser or using the Google Analytics Opt-out Browser Add-on https://tools.google.com/dlpage/gaoptout.
Please note that this privacy policy does not cover the data practices of Google. For more information about Google's data handling practices, please review Google's Privacy Policy (https://policies.google.com/privacy).
Email Marketing
With your consent, we may send you marketing emails about our products and promotions. You can opt-out at any time by clicking the "unsubscribe" link in our emails or by contacting us at admin@tgchristmas.com.au.
Cookies
Our Website uses cookies. Cookies are very small files that are saved to your computer and a website uses to identify you when you come back to the Site and to store details about your use of the Website. Cookies enable us to provide a better website visitor experience. Most web browsers automatically accept cookies, but you can choose to reject cookies by changing your browser settings. However, this may prevent you from taking full advantage of our Website.
Do not track
Please note that we do not alter our data collection and usage practices when we detect a do not track signal.
How do we collect your information?
You directly provide us with almost all the information that will collect except for device information and cookies. We collect information from you in many ways including when you:
-
Enquire about our Products;
-
Sign up to our emailing list;
-
Create an account;
-
Book a photo session
-
Interact with our Platforms
-
Place an order with us;
-
Provide testimonials or feedback;
-
Use or view our Website.
How do we use your information?
Order Information
We use the order information that we collect to fulfil any orders placed through our Website, including processing your payment information, arranging for shipping, and providing you with invoices and order confirmations.
Additionally, we use this order information to communicate with you, screen our orders for potential risk or fraud and when in line with the preferences you have shared with us, provide you with information or advertising relating to our Services.
Photo Session Information
We use the information collected during photo sessions to:
-
Facilitate the booking and execution of photo sessions
-
Identify participants and manage session logistics
-
Create and deliver photo products (e.g., USB drives with photos)
-
With your consent, use photos for advertising and social media purposes
Device Information
We use device information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our Website. For example, by generating analytics about how our customers browse and interact with the Website and emails, to better understand our customers’ interests and site usage patterns and what type of content may help to encourage those visits.
We will only use your personal information for the purposes for which it was collected, unless we reasonably consider that we need to use it for another purpose that is compatible with the original purpose. If we need to use your information for an unrelated purpose, we will seek your consent.
Data Security
We take appropriate measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. We implement industry-standard security practices and regularly review our systems to ensure your data is securely stored.
Please note that the transmission of information via the internet is not completely secure. While we do our best to protect your personal information, we cannot guarantee the security of data transmitted to our website or through electronic communication channels. Any transmission is at your own risk.
Disclosure of your information
We may disclose your personal information to third-party service providers who assist us in operating our business and providing our services, such as payment processors and IT support providers. These service providers are authorised to use your personal information only as necessary to provide their respective services to us.
We may also disclose your information if required to do so by law.
Our Platforms
If you have voluntarily provided a testimonial or review on our social media platforms, you understand and agree that your testimonial or review may be used for promotional or marketing purposes on our Website, social media platforms, advertisements, or any other promotional materials. We may use your testimonial or review in its entirety or in part, and we reserve the right to edit or modify it for clarity, length, or any other necessary purpose.
You retain the right to withdraw your consent for the use of your testimonial or review at any time. To do so, please contact us at admin@tgchristmas.com.au. We will promptly remove or anonymise your testimonial or review from our promotional materials, as applicable.
How do we store your data?
We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online.
To keep your personal data secure, we have chosen a secure web hosting service, Wix which is SSL certificate encrypted.
We also store personal information (except credit card information which is encrypted) on our local secure networks, all of which are password protected.
Data Retention
We do not erase any of your data unless specifically requested by you. If you wish to have your data erased, you have the right to make that request. We respect your control over your information, and our team is ready to assist you in managing your data preferences.
Maintaining data quality and accuracy
It is important to us to maintain the quality of the personal information that we hold. We take reasonable steps to make sure that your personal information is accurate, complete and up-to-date.
If you find that your personal information held by us is not up to date or is inaccurate, please advise us and we will amend it, where appropriate.
Payment Information
When you make a purchase via our Website, we do not store or retain complete credit card information, such as credit card numbers, expiration dates, or CVV codes. Instead, we rely on the secure payment processing services of our trusted third-party payment processor, Square.
Square handles the collection and processing of payment information on our behalf. When you enter your payment details during the checkout process, the information is securely transmitted directly to Square. Square retains and stores your payment information in accordance with their own data security and retention practices. You can review Square’s privacy policy and terms of service for more information on how they handle and protect your payment information.
Please note that while we do not store credit card information, we may retain certain transaction details provided by Square, such as the transaction amount, date, and confirmation status, for accounting, record-keeping, and customer service purposes. These stored transaction details do not include sensitive credit card information.
Third Party Links
Our Website may contain links to other websites of interest. Once you have used these links to leave our Website, you should note that we do not have any control over that other website. We are not responsible for the privacy practices of other such websites. We encourage our users to be aware, when they leave our Website, to read the privacy statements of each website that collects personal identifiable information.
Data Breach
We take the security of your personal information seriously and have implemented reasonable measures to protect it from unauthorised access, loss, or disclosure. However, in the event of a data breach that compromises the security of your personal information, we will take immediate action to mitigate the impact and comply with applicable laws and regulations.
In the unfortunate event of a data breach, we will:
Promptly assess the extent of the breach: We will conduct a thorough investigation to determine the scope and nature of the breach, identifying the affected systems, data types, and the potential risk to individuals.
Notify affected individuals: If we determine that the data breach poses a significant risk of harm to your rights and freedoms, we will notify you promptly, providing clear and transparent information about the breach, the potential consequences, and the actions you can take to mitigate any potential risks.
Engage relevant authorities: If required by applicable laws and regulations, we will report the data breach to the appropriate supervisory authorities and cooperate fully in their investigations.
Take necessary steps to secure and remedy the breach: We will take immediate action to contain the breach, prevent further unauthorised access, and restore the security and integrity of our systems. This may include, but is not limited to, implementing additional security measures, conducting forensic analysis, and cooperating with law enforcement agencies.
Provide support and assistance: In the event of a data breach, we are committed to providing support and assistance to affected individuals. This may include guidance on steps to protect your personal information, information about available resources for identity theft protection, and any other relevant support measures to help mitigate the impact of the breach.
If you suspect or become aware of any unauthorised access, loss, or disclosure of your personal information, please contact us immediately using the provided contact details.
Please note that while we implement reasonable security measures, no method of data transmission or storage is completely secure. We cannot guarantee the absolute security of your personal information.
By using our Website and providing your personal information, you acknowledge and understand the inherent risks associated with data transmission over the internet and agree that we are not liable for any unauthorised access, loss, or disclosure of your personal information beyond our reasonable control.
Your Rights
You have the right to access personal information we hold about you and ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
We note that we are processing your information to provide our Services to you, or otherwise to pursue our legitimate business interests listed above.
We would like to make sure you are fully aware of all your data protection rights.
You have:
Right to be Forgotten: You have the right to request the deletion or removal of your personal information when certain conditions are met, such as when the information is no longer necessary, consent is withdrawn, or processing is not based on legitimate interests.
Right to Rectification: If you believe that the personal information, we hold about you is inaccurate or incomplete, you have the right to request its correction. You can do so by contacting us using the information provided at the end of this policy.
The right to data portability: You have the right to request us to transfer the information that we have collected to another organisation, or directly to you, under certain conditions.
Right to Information and Access: You have the right to be informed about the collection, use, and processing of your personal information. You also have the right to request access to the personal information we hold about you. We may charge you a small fee for this service.
Right to Restriction of Processing: Under certain circumstances, you have the right to request the restriction of the processing of your personal information. If you would like to exercise this right, please contact us using the information provided at the end of this policy.
Right not to be Subject to Automated Decision-making: You have the right not to be subject to decisions based solely on automated processing, including profiling, if these decisions significantly affect you. Some exceptions apply, such as when the decision is necessary for a contract or authorised by law.
Right to Object: You have the right to object to the processing of your personal information based on legitimate interests or for direct marketing purposes. If you wish to object to the processing of your information, please contact us using the information provided at the end of this policy.
Right to Be Informed: You have the right to be informed about how your personal information is being used, including the purposes for processing, the categories of information being processed, and any recipients of the information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights under this policy. This means that we will not deny you goods or services, charge you different prices, or provide you with a lower quality of service based on your exercise of your privacy rights.
Right to Lodge a Complaint: If you believe that your privacy rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority, such as the data protection authority in your country.
If you make a request, we have 30 days to respond to you. If you would like to exercise these rights, please contact us, using the details below.
Changes to our privacy policy
Please be aware that we may change this privacy policy in the future. We may modify this policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our Website. Please check from time to time to review our privacy policy.
How to contact us
If you have any questions relating to our handling of your personal information or our use of cookies, or if you would like to invoke any of your rights under the New Zealand Privacy Act, APP’s, the GDPR or the CCPA, please email admin@tgchristmas.com.au.