THE COLLECTION OF INFORMATION.
INFORMATION YOU PROVIDE
We collect the information you provide directly to us or through our service providers. For example, we, or a third party acting on our behalf, collect information when you create an account, place an order or make a purchase, fill out a form, participate in contests, promotions, or surveys, apply for a job, inquire about becoming an authorized operator (including, but not limited to, a brand), contact us about potential real estate locations, host a charity fundraiser at one of our stores or request charity donations from us, engage with us via third party social media sites, request customer support or otherwise communicate with us.
THE DIFFERENT TYPES OF INFORMATION WE MAY COLLECT
Your name, email address, phone number, postal address, ZIP code, birth date, Sweet's account username and password, Subscription Customer, photographs, social media usernames; if you are applying for employment, your résumé information, such as employment and education history; if you request our participation in a fundraising event or seek charity donations from us, name and address of the charity organization, event details, tax-exempt ID, or any other information you choose to provide.
We may collect and store information about your transaction when you place an order or make a purchase through the Website, mobile app, or in our stores, such as the items ordered, the transaction amount, the date and location of the store of your order, and limited payment information, such as payment card type, expiration date, and the last four digits of your card number; however, we do not collect or store whole payment card numbers, and our third-party payment processors process all payment card transactions.
INFORMATION WE COLLECT AUTOMATICALLY WHEN YOU USE THE SERVICES
When you access or use our Services, we automatically collect certain information, including, but not limited to:
“Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. We may collect log information about your Website's access and use, including but not limited to your domain name, the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.
We may collect information about the computer or mobile device you use to access our Services, such as the hardware model, operating system and version, unique device identifiers, mobile network information, and browsing behavior.
When your device location identification setting allows, we may collect information about your device's precise location each time you access or use our Website or one of our mobile applications or otherwise configure your settings on your devices to allow the collection of this information.
INFORMATION COLLECTED BY COOKIES AND OTHER TRACKING TECHNOLOGIES:
Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience on these Services; see which areas and features of our Services are popular, and count visits. Web beacons are electronic images that may be used in our Services or emails and help deliver cookies, count visits and understand usage and campaign effectiveness. Please see "Your Choices" below for more information about cookies and how to disable them.
INFORMATION WE COLLECT FROM OTHER SOURCES
Certain functionalities on the Services permit interactions that you initiate between the Service and certain third-party services, such as third-party social networks ("Social Features"). Examples of Social Features include: enabling you to send content such as contacts and photos between the Services and a Third-Party Service; "liking" or "sharing" Sweet Treat World content; logging in to the Services using your third-party service account (e.g., using Facebook Connect to sign-in to the Service); and to otherwise connect the Service to a Third-Party Service (e.g., to pull or push information to or from the Service). If you use Social Features and other third-party services, the information you post or provide access to may be publicly displayed on the Services or by the third-party services you use. Similarly, if you post information on a third-party service that references the Services (e.g., using a hashtag or handle associated with Sweet's in social media post), your post may be used on or in connection with the Services or otherwise by Sweet Treat World. Both Sweet's and the third party may have access to certain information about you and your use of the Services and any third-party service.
INFORMATION WE COLLECT ABOUT OTHERS
In some cases, we may also collect the information you provide about others, such as when you refer someone to our Services (such as for specific promotions) or make a purchase for others or particular items for others in your party. We will use this information to fulfill your requests and will not send marketing communications to your contacts unrelated to your requests unless they separate consent to receive these communications from us.
HOW DO WE USE, YOUR PERSONAL INFORMATION?
We may use information about you for various purposes, including, but not limited, to:
provide, maintain and improve our Services, including your in-store and online experiences;
provide and deliver the products and services you request, process orders, transactions and send you related information, including confirmations and receipts;
send your technical notices, updates, security alerts, and support and administrative messages;
investigate and prevent fraudulent transactions and other illegal activities;
respond to your comments, questions, requests and provide customer service;
communicate with you about products, services, offers, promotions, rewards, and events offered by Sweet's and others, and provide news and information we think will be of interest to you (for information about how to manage promotional communications, please see "Your Choices" below);
Monitor and analyze trends, usage, and activities in connection with our Services (for example, by generating analytics about how our customers browse and interact with the Site and assess the success of our marketing and advertising campaigns).
personalize and improve the Services and provide advertisements, content, or features that match user profiles or interests;
process and deliver contest and promotion entries and rewards;
link or combine with information we get from others to help understand your needs and provide you with better Service;
share information you provide to us during an online or in-store transaction to a third party who will help us provide offers and product recommendations that may be of interest to you;
assess and respond to employment, brand/authorized operator, charity events or donations, or other applications; or
Carry out any other purpose for which the information was collected.
When you place an order through the Site, we will maintain your Order Information in our records unless and until you ask us to delete this information.
CHILDREN UNDER THE AGE OF 16
Our Website is not intended for children under 16 years of age. No one under age 16 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 16.
If you are under 16, do not use or provide any information on this Website through any of its features/register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to us, including your name, address, telephone number, email address or any screen name or user name you may use.
If we learn we have collected or received personal information from a child under 16 without verifying parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us via firstname.lastname@example.org
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address to:
Send information, respond to inquiries, and/or other requests or questions;
Process orders and send information and updates pertaining to orders;
Send you additional information related to your product and/or service;
Market to our mailing list or send emails to our clients after the original transaction.
Under CANSPAM, we agree to the following:
Not use false or misleading subjects or email addresses;
Identify the message as an advertisement in any reasonable way;
Include the physical address of our business or site headquarters;
Monitor third-party email marketing services for compliance if one is used;
Honor opt-out/unsubscribe requests quickly;
Allow users to unsubscribe by using the link at the bottom of each email.
If at any time you would like to unsubscribe from receiving future emails, you can email us at email@example.com and we will promptly remove you from ALL correspondence.
GENERAL DATA PROTECTION REGULATION (GDPR)
Sweet Treat World Is based in the Australia, and as mentioned above, we use Shopify to power our online store. As such, we are subject to the Shopify Data Processing Addendum ("Addendum") amends the Shopify Terms of Service (the "Agreement") by and between Sweet Treat World. and Shopify Inc., a Australian corporation with offices on behalf of itself, and its Irish affiliate Shopify International Ltd. (Collectively "Shopify").
For more information, you can access the Shopify Data Processing Addendum here: https://www.shopify.com/legal/dpa
Additionally, we note that Shopify generally processes your information to fulfill contracts they might have with SweetTreatWorld.com.au (for example, if you make an order through the Site), or otherwise to pursue legitimate business interests, unless we are required by law to obtain your consent for a particular processing operation. In particular, Shopify processes your Personal Information to pursue the following legitimate interests:
To provide Sweet's and its Customers with their services and applications;
To prevent risk and fraud on the Shopify platform;
To provide communications, marketing, and advertising;
To provide reporting and analytics;
To help Sweet's find and integrate with apps through our app store;
To provide troubleshooting, support services, or to answer questions;
To test out features or additional services; and
To improve our services, applications, and Sweet's websites.
When we process personal information to pursue these legitimate interests, we do so where we believe the nature of the processing, the information being processed, and the technical and organizational measures employed to protect that information can help mitigate the data subject's risks.
For more information about how your data is processed, visit: https://www.shopify.com/legal/privacy
Sweet Treat World. is not responsible for and makes no representations regarding third parties' policies or business practices (including where information is maintained and processed), including, without limitation, service providers and third-party services (including Social Features) associated with the Services.
SHARING OF INFORMATION
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here:
You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
with our affiliates, subsidiaries, and authorized operators to provide products and services you request and to support our business function and authorized operator network;
with third-party vendors, consultants, and other service providers who need access to such information to carry out work on our behalf;
in response to a request for information if we believe such disclosure is required to comply with any applicable law, rule, regulation, or legal process; or to protect our rights otherwise
if we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property, and safety of Sweet Treat World. or others;
in connection with, or during negotiations of any merger, acquisition, transfer, liquidation, restructure, sale of company assets, listing of our securities with a securities exchange, financing, reorganization, or acquisition of all or a portion of our business by another company; and with your consent or at your direction.
We may also use and share aggregated or de-identified information, which cannot reasonably be used to identify you.
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt-out of targeted advertising by:
COMMON LINKS INCLUDE:
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt-out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at http://optout.aboutads.info/.
DO NOT TRACK
Please note that we do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.
The Services may offer social sharing features and other integrated tools (such as the Facebook "Like" button), which let you share actions you take on our Services with other media, and vice versa. Your use of such features enables sharing information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the entities' privacy policies that provide these features.
ADVERTISING AND ANALYTICS SERVICES PROVIDED BY OTHERS
We may allow others to serve advertisements on our behalf across the Internet and to provide analytics services. Some information about your use of the Services and certain third-party services may be collected using Tracking Technologies across time and services, and used by Sweet Treat World. and third parties (including our service providers) for purposes such as to associate different devices you use, and deliver relevant ads and/or other content to you on the Services and certain third-party services. These entities may use Tracking Technologies to collect information about your use of the Services and other websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. This information may be used by Sweet Treat World. and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites and better understand your online activity. For more information about interest-based ads or opt-out of having your web browsing information used for behavioral advertising purposes, please visit aboutads.info/choices.
We may also work with third parties to serve you ads as part of a customized campaign on third-party platforms (such as Facebook, Instagram, Google, or Twitter). As part of these ad campaigns, we may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms to allow us to learn about your interests and to serve you advertisements customized to your interests. Note that the third-party platforms may offer you choices about whether you see these types of personalized advertisements.
Sweet Treat World. takes reasonable measures to help protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.
Shopify, the data processor, encrypts data sent to and from merchants and customers using the HTTPS protocol. Shopify also encrypts any sensitive stored information and salts and hashes merchant and customer passwords using bcrypt.
Sweet Treat World. may also set up additional security features such as Enabling multi-factor authentication for staff. Define, to a certain extent, what personal data is collected from customers. View certain activity logs, including recent login activity by staff. Set role-based permissions for staff accounts.
Sweet Treat World. has picked Shopify as a web platform due to the robust, cross-functional organizational measures taken for data protection. Of which consists of Internal Security, Legal, Operations, Production Security, and Processing Integrity.
SECURITY STANDARDS AND CERTIFICATIONS
Sweet Treat World.’s online stores powered by Shopify are Level 1 compliant.
Shopify uses third-party data centers with industry-standard certifications.
Examples include: Tier III, ISO 27001, PCI-DSS SOC reports for all facilities, including physical protection, and can be provided to Sweet Candy Company, Inc. on request under an appropriate NDA.
Shopify performs annual audits to ensure our handling of your credit card information aligns with industry guidelines. Additionally, the Shopify platform is audited annually by a third-party qualified security assessor.
No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee the absolute security of your personal information.
Account Information. You may update, correct or delete account information at any time by logging into your account. If you wish to deactivate your account, please send an email to firstname.lastname@example.org. Include your name, account name (if different), contact information, and a request to deactivate your account. Please note, however, that we may retain certain information that you provide through our Services as required or permitted by applicable law. We also may retain cached or archived copies of information about you for a certain period.
COOKIES AND OTHER TRACKING TECHNOLOGIES
Most web browsers accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that this could affect our Services' availability and functionality if you choose to remove or decline cookies. Your browser settings may allow you to automatically transmit a "Do Not Track" signal to websites you visit. Like many online services, we currently do not alter our practices (that is, honor the do-not-track signal) when we receive a "Do Not Track" signal from a visitor's browser. To find out more about "Do Not Track," you can visit http://www.allaboutdnt.com, but we are not responsible for the completeness or accuracy of this third-party information.
You may choose whether to receive some interest-based advertising by submitting opt-outs. Some advertisers and service providers that perform advertising-related services for us and third parties may participate in the Digital Advertising Alliance's ("DAA") Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise confident choices regarding Interest-based Advertising, including the use of Cross-device Data for serving ads, visit http://www.aboutads.info/choices/ for information on the DAA's opt-out program specifically for mobile apps (including use of precise location for third party ads). Some of these companies may also be members of the Network Advertising Initiative ("NAI"). To learn more about the NAI and your opt-out options for their members, see http://www.networkadvertising.org/choices/.
Please be aware that, even if you can opt-out of certain kinds of Interest-based Advertising, you may continue to receive other types of ads. Opting out means that those selected members should no longer deliver certain Interest-based Advertising to you but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browser configuration is to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective.
Sweet Treat World. is not responsible for the effectiveness of, or compliance with, any third parties' opt-out options or programs or the accuracy of their statements regarding their programs.
When you first visit one of the pages on our Website that collect location information, you may be asked to consent to collect location information. If you initially agree to our collection of location information, you can later stop this collection by changing your mobile device or Internet browser settings. If you do so, certain features of our Services may no longer function as intended.
You agree that we may send promotional and non-promotional notifications or alerts to you, including your mobile device. You may opt-out of receiving promotional communications from us by sending a letter to Sweet Treat World. (Attention: Customer Service) or in a manner that may otherwise be provided for in those communications or, if permitted through functionality, by editing the preferences of your account. If you opt-out, we may still send you non-promotional communications, such as those about your account, your transactions, or our ongoing business relations.