Privacy policy

 iSTRAP Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from iSTRAP (the “Site”).

Different privacy and data protection laws may regulate your rights, depending upon where you are located, where the collection takes place, and where your personal data is stored.

For the most part, your personal data is handled by us in the same way regardless of the applicable law.  If the applicable law provides you with additional rights or protections than would otherwise be the case, however, we comply with that higher standard in the manner described in this privacy policy.

You may have rights, and we may have obligations, under more than one applicable law at the same time.

You should not hesitate to contact us, or seek independent advice, if you require any clarification as to the applicable law or your rights under that law or this policy.

 

iSTRAP IS THE CONTROLLER

For the purposes of the UK or EU GDPR, where applicable, we are the "data controller" of the personal information collected via or in connection with the Site.

 

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the site and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers & buy now pay later providers), email address, and phone number. We refer to this information as “Order Information.” When we contact you it may be by mail, telephone, email, SMS or via social media. These communications may relate to products and services that we and our affiliates provide, and other products that may be of interest to you.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information from which a natural person can be identified.

When we talk about "Device Information" or "Order Information" in this Privacy Policy, the reference is limited to Personal Information comprised within or capable of being derived from the Device Information or the Order information as the case may be.


HOW DO WE USE YOUR PERSONAL INFORMATION?

We will only process your personal information where we have a legal basis for doing so, and this will be determined by the purpose for which your personal information is processed.


Typically, we use the Order Information that we collect to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

  • Communicate with you;
  • Screen our orders for potential risk or fraud; and
  • When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We may use your Personal Information in other ways where you have provided us with consent, or because it is in our legitimate interests to do so.

 

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: 


https://www.google.com/intl/en/policies/privacy/. 


You can also opt-out of Google Analytics here:


https://tools.google.com/dlpage/gaoptout.

Furthermore, Personal Information may be shared with third parties:

  • if you have consented to us doing so;
  • if our company’s assets are merged or acquired by a third party, in which case your personal information may form part of the transferred or merged assets;
  • to provide anonymous statistical information about users of the Site and related usage information to reputable third parties; or
  • we are using a third party service provider to provide services that involve data processing (for example, hosting the Site).

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to otherwise protect our rights.


BEHAVIOURAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Additionally, you can opt-out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at http://optout.aboutads.info/.


If you are subject to the UK or EU GDPR when handling your Personal Information, you may have additional rights as set out below under "Your Rights".

 

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

 

YOUR RIGHTS

You have the right to access your Personal Information we hold about you, and to ask that your Personal Information be corrected or updated, subject to certain exceptions. If you would like to exercise this right, please contact us through the contact information below.

Subject to conditions imposed by applicable privacy legislation, we may impose a charge associated with your access to your Personal Information.

Additionally, if you have rights under the GDPR:

  • you have the right to erase your personal information, and the ability to receive a machine readable copy of your personal information;
  • you also have the right to ensure that we correct or delete any inaccurate or out of date personal information which we have about you,

in each case subject to any applicable legal exemption.

 

INTERNATIONAL DATA TRANSMISSION

Where and to the extent that you have privacy rights under Australian data protection laws, we will only transfer your Personal Information out of Australia if either:

  • we have your informed consent;
  • the recipient is located in a jurisdiction in which the recipient is subject to a law or binding scheme that has the effect of protecting the information in a way that, overall, is at least substantially similar to the way in which it would be protected under prevailing Australian privacy and data protection laws;
  • the recipient provides a binding commitment to handle the information in a manner consistent with the Australian Privacy Principles; or
  • the international transfer is expressly permitted under prevailing and applicable legislation.

Where and to the extent that you have privacy rights under New Zealand Data protection laws, we will only transfer your Personal Information out of New Zealand if either:


  • we have your informed consent
  • the recipient is located in a jurisdiction in which the recipient is subject to privacy laws (including New Zealand privacy laws) that overall provide comparable safeguards to New Zealand privacy legislation;
  • we believe the recipient is subject to a prescribed binding privacy scheme or to the privacy laws of a prescribed country; or
  • we otherwise believe on reasonable grounds that the recipient is required to protect your Personal Information in a way that, overall, provides comparable safeguards to New Zealand privacy legislation.


Where and to the extent that you have privacy rights under the UK or EU GDPR:

  • we will only transfer your Personal Information out of the jurisdiction in which it is collected if we will first ensure that appropriate safeguards are in place to protect it; and 
  • you may contact us for an explanation of the basis on which we have transferred your personal information and, where relevant, to request a copy of the legal safeguards which we have put in place. 


DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Not withstanding the foregoing, we will only keep your Personal Information for as long as we need it for the purposes set out in this Privacy Policy.

Where we no longer have a need to keep your information, we will delete or anonymise it. 

Please note that where you unsubscribe or opt-out from marketing communication, we need to keep a record of your email address to ensure we do not send you marketing emails in the future.

 

CHANGES

We may update this privacy policy from time to time to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

 

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us.  You may also make a complaint direct to the applicable privacy regulator.