Information We Collect
We may collect the following information when you place an order or contact us:
Name
Email address
Shipping address
Order details
How Your Information Is Used
Your information is used only to:
Process and fulfil orders
Arrange shipping
Provide order updates
Respond to enquiries
General Data Protection Regulation (GDPR) for the European Union (EU)
Annasidi will comply with the principles of data protection set out in the GDPR for the purpose of fairness, transparency, lawful data collection and use, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
(b) We process your personal information primarily as a Controller as defined in the GDPR. In limited circumstances where we process personal information on behalf of another entity, we act as a Processor.
(c) We must establish a lawful basis for processing your personal information. The legal basis for which we collect your personal information depends on the data that we collect and how we use it.
(d) We will collect your personal information based on a lawful basis under GDPR Article 6, which may include your consent, contractual necessity, legal obligations, vital interests, public tasks or our legitimate interests. Any data collected will be adequate, relevant, and limited to what is necessary for its purpose (data minimisation). We will keep your data safe and secure.
(e) We will also process your personal information if it is necessary for our legitimate interests, or to fulfill a contractual or legal obligation.
(f) We process your personal information if it is necessary to protect your life or in a medical situation, it is necessary to carry out a public function, a task of public interest or if the function has a clear basis in law.
(g) We do not collect or process any personal information from you that is considered "Special Categories of Personal Data" under GDPR Article 9 (such as personal information relating to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sex life or sexual orientation) or “Sensitive Information” under the Privacy Act 1988 (Cth) unless we have obtained your explicit consent, or another lawful exception under GDPR Article 9(2) or the Privacy Act 1988 (Cth) applies.
(h) You must not provide us with your personal information if you are under the age of 16 without the consent of your parent or guardian. We do not knowingly collect or process the personal information of children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information as soon as possible.
Contact
For privacy-related enquiries, please use the contact form.
Response time is 2–3 business days.