This Privacy Policy describes how Glitch Productions ("Glitch Productions", "we", "us", or "our") collects, uses, stores, and discloses your personal information when you visit, use our services, or make a purchase from glitchproductions.store (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

This Privacy Policy details how we comply with thePrivacy Act 1988(Cth) (“Privacy Act”), the Australian Privacy Principles (“APPs”), and, to the extent that it applies, the EU General Data Protection Regulation 2016/679 (“GDPR”).

Please read this Privacy Policy carefully before using the Services. If you do not agree with any part of this Privacy Policy, please do not use the Services.

We may update this Privacy Policy from time to time, without notice to you, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law. We encourage you to check for updates. Your continued use of the Services following the publication of the Privacy Policy will be taken as your acceptance of the Privacy Policy as amended from time to time, except where we are otherwise required by law to seek your direct consent.

To provide the Services, we collect Personal Information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

We collect your Personal Information directly from you unless it is unreasonable or impractical to do so.

Personal Information may be collected directly from you when you:

• Subscribe to our mailing list hosted by Shopify or other direct marketing communications;
• Contact us via the Site or email; 
• Buy our products or services;
• Participate in contests, giveaways and promotions; 
• Complete a form, survey or questionnaire provided by us;
• Access, browse, use, or otherwise interact with the Site; and 
• Do any other reasonably expected activity required to provide our Services to you.

It is your choice to provide Personal Information to us. Wherever it is lawful and practicable, you have the option not to identify yourself when interacting with us. Please be aware that it may be necessary for us to collect your Personal Information to enable us to provide the Services to you. As such, if you do not wish to provide your Personal Information, this may limit our ability to provide the Services to you.

We may collect Personal Data about you from sources other than you directly. If we collect your Personal Data from third parties in circumstances where you may not be aware that we have collected such Personal Data, we will take reasonable steps to notify you of the collection and circumstances surrounding the collection.

“Personal Information” means information (or an opinion) about an identified individual, or an individual who is reasonably identifiable (whether true or not, and whether recorded in a material form or not). 

The types of Personal Information we obtain about you depends on how you interact with our Site and use our Services. The following sections describe the categories and specific types of Personal Information we collect.

Information that you directly submit to us through our Services may include:

Including your name, address, phone number, and email.

Including your name, billing address, shipping address, payment confirmation, email address, and phone number.

Including the items you view, put in your cart, review, or purchase.

Including the information you choose to include in communications with us, for example, when sending a message through the Services.

We may also automatically collect certain anonymous information about your interaction with the Services, including information about how you access and use our Site and your account, device information, your operating system, browser information, information about your network connection, your IP address, dates and times that you access and use the Services and other information regarding your interaction with the Services ("Usage Data"). 

The GDPR recognises that Usage Data, whilst for the most part anonymous, can be cumulatively used to directly or indirectly identify you. Usage Data that can be used to identify you in any way, together with your Personal Information, will collectively be referred to in this Privacy Policy as “Personal Data”.

To do this, we may use cookies, pixels and similar tracking technologies ("Cookies"). Cookies are small packets of data that are downloaded onto your device when you access a website. Cookies hold specific information that helps a website ‘remember’ your actions and preferences over time. These are the types of Cookies that we may use to operate our Services:

• Strictly Necessary Cookies – these Cookies are essential to ensure that the Services work correctly, and record information that allows you to move around our website and navigate its features;
• Performance Cookies – these Cookies collect information about how you use the Services, such as how often you access the Services and if you encounter any errors;
• Functionality Cookies – these Cookies allow the Services to remember the choices you make to provide a more personalised experience;
• Advertising Cookies – these Cookies collect information about your use of the Services to tailor marketing to you and your interests and provide you with a more personalised service in the future;
• Social Media and Content Cookies – these Cookies are placed on the site via social media plugins and other tools to improve your experience of browsing and interacting with our site.

Cookies can stay on your device temporarily (“Session Cookies”) or until you manually delete them (“Persistent Cookies”). You can adjust your browser settings at any time to block Cookies, however, please note that doing so may limit our ability to provide the Services to you in a fully operational form

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

Including bank account, credit or debit card information, and billing address to process your payment;.

From online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. Also see the section below, Third Party Websites and Links

We use your Personal Information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and other features and functionalities related to your account. 

We may use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email or text message and to show you advertisements for products or services where you have consented for us to do so, and always in compliance with applicable privacy and spam laws. This may include using your personal information to better tailor the Services and advertising on our Site and other websites. If you are an EEA resident, the legal basis for these data processing activities is our legitimate interest in selling our products, according to Art. 6 (1) (f) GDPR.

We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you are an EEA resident, the legal basis for these data processing activities is our legitimate interest in keeping our website secure for you and other customers, according to Art. 6 (1) (f) GDPR.

We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you according to Art. 6 (1) (f) GDPR.

We recognise your right under the Spam Act 2003 (Cth) and the GDPR to opt out from direct marketing, and as such these consents can be modified at any time by emailing our Privacy Officer (per the details at the end of this Privacy Policy) or clicking unsubscribe on any direct marketing communications.

Please note certain non-marketing related correspondence from us, including messages relating to payment and shipping, will be automatically sent to you by virtue of your use of the Services and you may not have the option to unsubscribe from receiving this correspondence.

In certain circumstances, we may disclose your personal information to third parties for contract fulfillment purposes, legitimate purposes and other reasons subject to this Privacy Policy. Such circumstances may include:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets, with your consent.
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you. You can withdraw your consent for us to share your Personal Data with third parties at any time by emailing our Privacy Officer, but please note that withdrawal of such consents may affect your ability to access and use the Services.

Our Site may provide links to websites or other online platforms operated by third parties (“Third Party Sites”). We do not have access to, or control over, the technologies that third parties (including the Third Party Sites) may use to collect information about you. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services, and we disclaim all liability in connection with the services of any Third Party Sites integrated or otherwise linked to the Services.

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

To the extent permitted by law, we accept no liability for any breach of security, or direct hacking of our security measures, or any unintentional disclosure, loss or misuse of any information or data, or for the actions of any third parties that may obtain any information or data.

Notwithstanding the above, we acknowledge our obligation to report any data breach that is likely to risk the rights and freedoms of natural persons to the Office of the Australian Information Commissioner and, where our data breach involves the information of EU subjects, report to the European Data Protection Supervisor. We will also inform you, where possible, if your data has been breached in circumstances where such breach poses a risk of serious harm to you or your rights and freedoms.

We also train our personnel who may have access to your Personal Data about this Privacy Policy and our obligations under the Privacy Act, APPs, and GDPR. For more information on our internal policies, email the Privacy Officer.

We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. How long we retain your personal information depends on different factors, such as whether we need the information  to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

You have a general right to access any Personal Information that is held about you by us subject to verifying your identity before providing you with any such information, unless a valid exception applies. You can request this at any time by contacting our Privacy Officer.

In accordance with the GDPR, we acknowledge the additional rights of EU subjects to:

1. Have their data erased that is no longer being used for a legitimate purpose;
2. Request a copy of all Personal Data held about them by us in a readable format, along with supplementary information to verify that such Personal Data is being processed lawfully; and
3. Request restricted processing of their Personal Data whilst any complaints or concerns are being resolved.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.

We will amend, correct and modify your Personal Information in accordance with your reasonable instructions, request and notification. You acknowledge and agree that you are responsible for maintaining the truth, accuracy, and completeness of your information at all times, and we shall have no liability to you or any third party arising from your failure to do the same.

We will not discriminate against you for exercising any of these rights. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority such as the Office of the Australian Information Commissioner (for more information, please seewww.oaic.gov.au) or with the European Data Protection Supervisor (for more information, please seehttps://edps.europa.eu).

Please note that we may transfer, store and process your Personal Information outside the country you live in. Your Personal Information is also processed by staff and third party service providers and partners in these countries. Where such transfers occur, we will take reasonable steps to ensure that the recipients of your information deal with your Personal Information in accordance with the privacy laws relevant to your jurisdiction.

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us our Privacy Officer at glitch@finalfinalproject.com or contact us at 32 Phillip Street, Level 12, Parramatta, NSW, 2150, AU.

For the purpose of applicable data protection laws and if not explicitly stated otherwise, we are the data controller of your Personal Information.