Last Updated: May 12, 2025

This Privacy Policy describes how ANNYSFASHION (“we,” “us,” or “our”) collects, uses, and shares your Personal Information when you visit, make a purchase, or use any service on our website, www.annysfashion.com.au (the “Site”). We use your personal data to provide and improve our service.

We are committed to protecting your privacy and ensuring the security of your Personal Information. This Privacy Policy is designed to comply with various privacy laws, including the California Online Privacy Protection Act (CalOPPA), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), The Personal Information Protection and Electronic Documents Act (PIPEDA), and relevant privacy laws in Canada, Australia, and the United Kingdom. We aim to be transparent about how we collect, use, and share your information. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account: A unique account created for you to access our service or parts of our service.
• Affiliate: An entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Company: (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to ANNYSFASHION, St Marys, Sydney 2760.
• Cookies: are small files that are placed on your computer, mobile device or any other device by a website, containing the details of your browsing history on that website among its many uses.
• Country: Refers to Australia
• Device: Any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Personal Data: Any information that relates to an identified or identifiable individual.
• Our Service: Refers to website visit, purchase, or any activity conducted.
• Service Provider: Any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
• Usage Data: refers to data collected automatically, either generated using the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Website: refers to Annys Fashion Empire, accessible from annysfashion.com.au
• You: means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

2. Personal Information We Collect

We collect Personal Information from you when you interact with our Site. The types of Personal Information we may collect include:

• Contact Information: Email address, First name and last name, Phone number.
• Shipping and Billing Information: Address, State, Province, ZIP/Postal code, City.
• Device and Usage Information: Information about your device, browser, and how you interact with our Site. This includes your IP address, browser type, operating system, referring URLs, pages visited, and the dates and times of your visits. This information is collected automatically through cookies and similar technologies.
• Account Information: If you create an account, we collect your username, password, and other information you provide during the registration process.
• Transaction Information: Details about your purchases, including the items you buy, the date and time of your order, and the payment method used.
• Communications: Records of your communications with us, including emails, chat logs, and customer service interactions.
• Marketing Information: Your preferences for receiving marketing communications from us.
• Location Information: In some cases, we may collect your approximate location (e.g., city, state) based on your IP address.

3. How We Collect Your Personal Information

We collect Personal Information in the following ways:

• Directly from you: When you create an account, place an order, subscribe to our newsletter, contact us, participate in surveys or promotions, or fill out forms on our site. This includes information you provide when you register, make a purchase, or contact customer support.
• Automatically: Using cookies and other tracking technologies (as described in Section 6). This happens when you browse our website, use our services, or interact with our content.
• From third parties: We may receive information about you from third-party service providers who help us with payment processing, website analytics, and marketing.

4. How We Use Your Personal Information

We use your Personal Information for various purposes, including:

• Providing and managing our services: Processing your orders, managing your account, fulfilling your requests, personalizing your experience, and providing customer support. This includes order fulfillment, account management, and customer service.
• Communicating with you: Sending you order confirmations, shipping updates, responding to your inquiries, providing customer service, and, with your consent (where required), sending you marketing communications about our products and promotions that may be of interest to you.
• Improving our website and services: Analysing website usage, understanding customer preferences, conducting research and development, and developing new features and offerings. This helps us to optimize our website and improve the user experience.
• Marketing and advertising: Subject to your preferences and applicable laws, we may use your Personal Information to send you marketing communications, display targeted advertisements, and measure the effectiveness of our advertising campaigns.
• Security and fraud prevention: Protecting our site and customers from fraud, unauthorized access, and other illegal activities, monitoring and analysing website activity, and enforcing our terms of service.
• Complying with legal obligations: As required by applicable laws, regulations, or legal processes, such as responding to subpoenas or court orders.
• Business operations: To manage our business operations, including accounting, auditing, and legal compliance.

5. Sharing Your Personal Information

We may share your Personal Information with the following categories of third parties:

• Service Providers: We engage third-party service providers to perform functions on our behalf, such as payment processing (Apple Store In-App Payments, Google Play In-App Payments, Stripe), email sending via our website’s SMTP service, and security services (Invisible and visible reCAPTCHA). These service providers are contractually obligated to protect your Personal Information and only use it for the specific services they provide to us. We take steps to ensure that these providers adhere to data protection standards.
• Affiliates: We may share your information with our subsidiaries or affiliates for internal business purposes, such as marketing and improving our services.
• Business Partners: We may share your information with business partners to offer you products or services that may be of interest to you.
• Legal Compliance: We may disclose your Personal Information if required to do so by law or in response to a valid legal request, such as a subpoena, court order, or government investigation. We will only disclose information when we believe in good faith that disclosure is necessary to comply with the law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your Personal Information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your Personal Information.
• With Your Consent: We may share your information with third parties when we have your explicit consent to do so.

We do not sell your Personal Information to third parties for their direct marketing purposes. We may share information with partners to provide services to you, but we do not sell your data in the traditional sense.

6. Tracking and Analytics

We use the following tracking and analytics tools to understand how visitors interact with our site. These tools may use cookies, web beacons, and similar technologies, which are small text files placed on your device, to collect information about your browsing activities on our Site, such as the pages you visit, the time you spend on each page, the links you click, and other actions you take on our Site.

• Web Beacons: Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).
• Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, you may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. Learn more about cookies on the Free Privacy Policy website article.

We use both Session and Persistent Cookies for the purposes set out below:

• Necessary / Essential Cookies

Type: Session Cookies

Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

• Cookies Policy / Notice Acceptance Cookies

Type: Persistent Cookies

Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

• Functionality Cookies

Type: Persistent Cookies

Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You

having to re-enter your preferences every time You use the Website.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy.

7. Email Communications

We may send you emails related to your orders, account activity, and, with your consent (where required), marketing communications about our products and promotions. These emails may include order confirmations, shipping updates, account notifications, newsletters, and promotional offers. You can manage your email preferences and opt-out of marketing emails at any time by clicking the “unsubscribe” link at the bottom of our emails or by contacting us directly at [email protected]. Even if you unsubscribe from marketing emails, we will still send you transactional emails related to your orders and account.

8. Payment Processing

Payments for purchases made on our Site are processed through the following third-party payment gateways:

• Apple Store In-App Payments: For purchases made through our iOS app. Their privacy policy can be found here: Apple Pay Privacy Policy.
• Google Play In-App Payments: For purchases made through our Android app. Their privacy policy can be found here: Google Pay Privacy Policy.
• Stripe: For payments made directly through our website. Their privacy policy can be found here: Stripe Privacy Policy.

We do not directly collect or store your full payment information, such as credit card numbers. This information is securely handled by these payment processors. We receive confirmation of payment but do not have access to your complete payment details.

9. Security

We take reasonable measures to protect your Personal Information from unauthorized access, use, disclosure, alteration, or destruction. These measures include secure socket layer (SSL) encryption for data transmission, regular security assessments, firewalls, intrusion detection systems, access controls, and employee training on data privacy and security practices. We also implement measures to protect against data breaches and have procedures in place to respond to any suspected breaches. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach, we will notify affected users as required by law.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your Personal Information. These rights may include:

• The right to access: You may have the right to request information about the Personal Information we hold about you, including the categories of data, the purposes of processing, and the recipients or categories of recipients to whom the data have been or will be disclosed.
• The right to rectification: You may have the right to request that we correct any inaccurate or incomplete Personal Information we hold about you.
• The right to erasure (right to be forgotten): In certain circumstances, you may have the right to request that we delete your Personal Information. This right may be limited by legal obligations or other overriding interests.
• The right to restrict processing: You may have the right to request that we restrict the processing of your Personal Information in certain circumstances, such as when you contest the accuracy of the data.
• The right to data portability: You may have the right to receive your Personal Information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• The right to object: You may have the right to object to the processing of your Personal Information for certain purposes, such as direct marketing or profiling.
• Rights related to automated decision-making: You may have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• The right to opt-out of the sale or sharing of personal information (California): Under the CCPA/CPRA, California residents have the right to opt-out of the “sale” or “sharing” of their personal information. As stated earlier, we do not sell your Personal Information. We provide this right to comply with California law and respect the privacy of our users.
• The right to limit the use and disclosure of sensitive personal information (California): Under the CPRA, California residents have the right to direct businesses that collect sensitive personal information to only use that information for limited purposes. We do not collect sensitive personal information as defined under the CPRA.
• The right to non-discrimination: We will not discriminate against you for exercising your privacy rights. This means we will not deny you services, charge you different prices, or provide a different level of service because you have exercised your rights under privacy laws.
• The right to withdraw consent: If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Know: You may have the right to know what personal information is being collected about you, the source of the information, the purposes for which it is being used, and the categories of third parties with whom it is shared.

11. Exercising Your Rights

To exercise any of your privacy rights, please contact us at:

Email: [email protected]

We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before fulfilling your request to protect the security of your information. We will provide information to you free of charge, unless the request is manifestly unfounded or excessive.

12. Specific Provisions for Residents of Certain Jurisdictions

California (CalOPPA, CCPA/CPRA):

• CalOPPA: We comply with the California Online Privacy Protection Act. As required by CalOPPA, we provide detailed information about the categories of personally identifiable information we collect and how it will be shared with third parties. This Privacy Policy serves as our notice to you as required by CalOPPA.
• CCPA/CPRA Notice at Collection: We collect the categories of personal information listed in Section 1 for the purposes described in Section 3. We retain this information for as long as necessary to fulfill these purposes and as required by law. We also inform you of your rights under the CCPA/CPRA, as outlined in Section 10. We do not sell your personal information.

European Union (GDPR):

• Legal Basis for Processing: Our legal basis for processing your Personal Information depends on the specific context in which we collect it. Generally, we process your Personal Information based on your consent (Article 6(1)(a) GDPR), the necessity to perform a contract with you (Article 6(1)(b) GDPR), our legitimate interests (such as improving our services and marketing) (Article 6(1)(f) GDPR), or to comply with legal obligations (Article 6(1)(c) GDPR). We will always process your data in accordance with the GDPR.
• Data Transfers: If we transfer your Personal Information outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or other legally recognized mechanisms to protect your data. We will take all necessary steps to ensure that your data is treated securely and in accordance with this Privacy Policy and the GDPR.
• Data Protection Officer: If you have any questions or concerns about our GDPR compliance, you can contact us at [email protected].
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe that our processing of your Personal Information infringes the GDPR. The supervisory authority is responsible for ensuring that your rights under the GDPR are upheld.

Canada (PIPEDA and other applicable Canadian privacy laws):

• We collect, use, and disclose your Personal Information in accordance with PIPEDA and other applicable Canadian privacy laws. You have the right to access and request correction of your Personal Information held by us, subject to certain exceptions. You also have the right to withdraw your consent to the collection, use, or disclosure of your Personal Information, subject to legal or contractual restrictions and reasonable notice. To exercise these rights, please contact us at [email protected]. We are committed to protecting your personal information and adhering to Canadian privacy principles.

Australia (Privacy Act 1988):

• We are committed to complying with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You have the right to access and seek correction of your Personal Information held by us. You also have the right to make a complaint if you believe we have breached the Australian Privacy Principles. To exercise these rights or make a complaint, please contact us at [email protected]. We will handle your request or complaint in accordance with the Privacy Act. We take your privacy seriously and will respond to your inquiries in a timely manner.

United Kingdom (UK GDPR and Data Protection Act 2018):

• We process the Personal Information of UK residents in accordance with the UK GDPR and the Data Protection Act 2018. You have rights similar to those under the EU GDPR, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. To exercise your rights, please contact us at [email protected]. We are dedicated to protecting your data and upholding your rights under UK law.

13. Data Retention

We will retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected, including to provide you with our services, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period will depend on the type of Personal Information, the purpose for its collection, and the applicable legal requirements. We regularly review our data retention practices to ensure that data is not kept longer than necessary.

14. Children’s Privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect Personal Information from children under 13. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us immediately at [email protected] and we will take steps to delete such information. We are committed to protecting the privacy of children and encourage parents and guardians to monitor their children’s online activities.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidelines. We will post any changes on this page and update the “Last Updated” date at the top of the policy. We encourage you to review this Privacy Policy periodically. If we make significant changes to this Privacy Policy, we will provide you with more prominent notice, such as by email or by posting a notice on our website.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: [email protected]