1. OUR PRIVACY COMMITMENT
We are committed to protecting the privacy of your personal information. We will handle your personal information in a transparent and accountable way, and take steps to ensure that it is held securely.
We will always collect, store, use and disclose personal information in accordance with all applicable privacy laws, including the Privacy Act 1988 in relation to our activities in Australia and Privacy Act 2020 in relation to our activities in New Zealand.
2. WHAT PERSONAL INFORMATION MIGHT WE COLLECT ABOUT YOU?
We collect personal information that we need for one or more of our business functions or activities. We will collect personal information about you by lawful and fair means, and will not do so in an unreasonably intrusive manner.
We have provided details in this policy on the information that we collect in a number of ways, including:
You can read more about the types of personal information we may collect and the ways that we may do this in the sections below.
a. Information that you provide to us
In order to handle your purchases, provide customer service, improve our products, provide in-person experiences or events and send you information about our products, trends and promotions, we may ask you to provide us with your:
We may also collect some personal information from our vendors and suppliers when we conduct and manage our business, with or if we need to undertake a credit assessment. In New Zealand, the Privacy legislation covers the personal information of employees and job applicants, and so we may also collect your personal information if we make you an offer for employment purposes or to undertake employment, human resource and payroll related functions in New Zealand.
Where we can, we will allow you to deal with us anonymously or by using a pseudonym. However, in some circumstances, this may not allow us to provide you with a service you have asked for (such as delivery). If you ask us about this option, we will inform you if it is possible for an interaction to occur on an anonymous basis. Whilst you may opt to not to provide us with your personal information, you should be aware that without this personal information, we may not be able to provide you with some of the services and/or products you are seeking.
Whilst links to third party websites may be provided on our various websites, we are not responsible for the content or practices of third-party websites. These links are provided for your convenience and are not endorsed by us. No links may be made to our websites without our prior written consent.
b. Other information we collect about you
We may collect information about you or your activities from our related brands, entities, business partners, affiliates and digital services, such as web hosting providers, analytics companies, social media platforms, data companies, advertising services, smart phones and computers. This could include information such as:
Most of the personal information that we hold about you will be from your direct dealings with us, but we may also collect your personal information from a third-party, anyone authorised to act on your behalf, or via social media. We will only do this if we have been advised that you have consented to the collection of your personal information, or if you would reasonably expect us to collect your personal information in that way.
We may also collect personal information from our businesses or related brands, entities, business partners, affiliates and digital services that have collected your information, or by accessing data from other sources. We may then analyse that data and match it with the information that we already hold about you, in order to learn more about your preferences and interests. If we receive your personal information from a third-party, and it is not information we need for the purposes of our business activities, we will destroy or de-identify that information (provided it is lawful to do so).
You may be offered the option to join one of our loyalty programs, including our LH Rewards Loyalty Program. If you choose to do this, we will collect personal information including your profile information, purchase history and the contents of any online wish list. In our stores, we may collect your name, address and other relevant personal details if this is needed to comply by local fiscal and legal requirements such as to provide a tax receipt.
When you make a purchase via one of our online stores, we will collect information such as your name, shipping and billing address and contact details such as telephone and email address, ordered and returned products, delivery information and invoice information. We also collect data on your usage vouchers and/or gift cards.
If you interact with any of our chatbots (automated messengers) where we make these available, we will record what you respond to these chatbots, how you interact with them and we will store data related to the device that you use. Depending on the platform for the chatbot and your permissions, the data we collect may include your IP address, social media handle, time zone, country and GPS location. The platform that provides the chatbot may also collect some of this data. For example, if the chatbot is provided on Facebook, this platform will collect your user data as well.
c. Third party automated information collection
When you visit any of our websites or access our in-store Wi-Fi (if this is made available), we may automatically collect your:
d. Collection of Cookies
Cookies are pieces of information that a website transfers to your computer for record-keeping purposes. Cookies help provide additional functionality to the web site or to help us analyse site usage more accurately. We use information collected from cookies to better understand, customise and improve user experience with our websites, services and offerings, as well as to manage our advertising. For instance, our server may set a cookie that keeps you from having to enter a password more than once during a visit to one of our sites. Also, we may use web analytics services that leverage cookies to help us to understand how visitors engage with and navigate our site (e.g., how and when pages in a site are visited and by how many visitors).
There are four main types of cookies that we use:
If you have provided us with personal information (for example, if you join one of our loyalty programs or order a product), we may associate this personal information with information gathered through cookies. This allows us to offer increased personalisation and functionality.
In all cases in which cookies are used, the cookie will not collect personal information except with your permission. Your web browser can be set to allow you to control whether you will accept cookies, reject cookies or to notify you each time a cookie is sent to your browser. If your browser is set to reject cookies, websites that are cookie-enabled will not recognise you when you return to the website, and some website functionality may be lost.
e. Collection of information via Interest Based Advertising
We may use third-party advertising companies to display ads that are tailored to you based on how you browse and shop online. This is a practice commonly referred to as ‘interest-based’ or ‘behavioural’ advertising.
We allow these third parties to collect certain information when you visit our websites or use our applications, including non-personally identifiable information (browser type, subject of advertisements clicks on, session IDs) and personal data (such as static IP address). The information that we obtain about you from social media platforms depends on your account and privacy settings within the platforms and the platforms privacy policies. For example, you can use Ads Settings on your browser to manage the Google ads that you see and to opt out of Ads Personalisation. Please note that you may need to opt-out separately from each service.
The services that we may use from time to time include those offered by Facebook (Custom Audience), Google (including Google Display Network and DoubleClick), Yahoo, Adobe (including Campaign Manager and Analytics), and Microsoft. You can find out more information about these services in the privacy policies for those services, including information on how to opt-out of certain things (for example, Google Analytics Advertising Features which uses age, gender, and interests categories to target our ads to you on the Google Display Network).
If you are offered the use of a third-party authentication service or social account (for example, Google or Facebook) to log into one of our websites, this allows our website to make a request for data about you. If you if you choose to log in with an authentication service or social account, your data will be shared between those social networks and us. You should therefore stay updated on your social networks' privacy policies, and only use the social log-in for sites you feel comfortable sharing data with.
If you choose to connect your social media account to a member account or loyalty program with us (where such a feature is made available), you will share certain personal data from your social media account with us, for example, your name, email address, photo, list of social media contacts, and any other information that may be or you make accessible to us when you connect your social media account to a member account or loyalty program with us. We will engage in these activities to manage our contractual relationship with you, with your consent or where we have a legitimate interest. If you have the option to logon to your account through Facebook, Google, Instagram or other social media accounts, we collect profile information from your social media account including your name and email address. Please note that when accessing your account through a social media platform, the social media provider will be notified of your access to the account. Please refer to the privacy notice of the respective social media provider(s) for more information on how your personal information is stored.
f. Website Usage
Please note that our websites are not directed to individuals under the age of sixteen (16). We ask that you do not provide your personal information to us if you are under that age. We also ask that you do not share the personal information of anyone else under that age with us, unless this is required by us and you are their parent or guardian, or have the express consent of their parent or guardian to do this.
Your personal information and other data is stored on our cloud based systems which are only accessed by our authorised staff or authorised suppliers.
However, the Internet is not in itself a secure environment and we cannot give an absolute assurance that your personal information will be secure at all times. Transmission of personal information over the Internet is at your own risk and you should only enter, or instruct the entering of, personal information within a secure environment.
If we assess that there is a risk of ‘serious harm’ to you or a related individual, we will advise you at the first reasonable opportunity upon discovering or being advised of a security breach where your personal information is lost, stolen, accessed, used, disclosed, copied, modified or disposed of by any unauthorised persons or in any unauthorised manner (as required by law).
It is your responsibility to keep your login details, password and security questions in respect of our business with you safe and secure. You should notify us as soon as possible if you become aware of any unauthorised use of your login details, password or security questions, and immediately change that security information promptly.
To ensure you are accessing a secure server, check for the unbroken key or closed lock symbol located generally either at the bottom left or top right of your browser window. If it appears, then SSL is active. You can double check this by looking at the URL as well. If SSL is active, then the first characters of that line will read ‘https’ rather than just ‘http’. It is important for you to protect against unauthorised access to your password and to your computer. Ensure you logout when you have finished visiting our websites especially if you accessed them from a shared computer.
3. HOW YOUR PERSONAL INFORMATION IS HANDLED BY US
We may use your personal information for a number of purposes, including but not limited to:
Use of your information for Direct Marketing
When you provide your personal details to us, you consent to us using your personal information for direct marketing purposes (for an indefinite period). From time to time, we may contact you with information about products and services offered by us and our related brands, entities, business partners, affiliates and digital services, which we think may be of interest to you. When we contact you it may be by mail, telephone, email, SMS or via social media. These communications may relate to products and services offered by us and any of our related brands, entities, business partners, affiliates and digital services, and other products that may be of interest to you.
De-identified personal information may also be used to allow corporate reporting within our business and with our related our related brands, entities, business partners, affiliates and digital services.
We will not use Australian Government Identifiers, such as Medicare numbers, or a driver’s licence number as its own identifier of individuals. In New Zealand, unique identifiers such as driver’s licence numbers, passport numbers, or IRD numbers will only be used when this is necessary. We will take reasonable steps to protect unique identifiers from misuse.
Where we use or disclose your personal information for the purpose of direct marketing, we will:
If you do not wish to be contacted by us, please click the unsubscribe link at the bottom of any email we send you or email email@example.com (for Australia) or firstname.lastname@example.org (for New Zealand).
Using your information for Interest Based Advertising and Social Media Targeting
Social media and other IT platforms offer us the possibility to connect with you via those platforms and to share content from our website and other advertising with you. We may therefore use the personal Information that we obtain from you to maintain your personal advertising profile.
We are only allowed to use personal information or data from customers for social media targeting if they have given us their consent to market to them. If you have given us your consent to use your personal information for marketing, we may use your personal information to create a customer list that we can use to advertise to you, or create a lookalike audience to find new people who share similar behaviours and interests as you.
If you do not want your information to be used by us for the purposes of interest based advertising or social media targeting, please email email@example.com (for Australia) or firstname.lastname@example.org (for New Zealand).
How your personal information is disclosed or shared by us
In the course of conducting our business and providing our products and services to you, we may disclose or share your personal information. We only disclose personal information for the purposes for which it was given to us, or for purposes which are directly related to one of our functions or activities.
We do not give it to anyone else unless one of the following applies:
If we engage third party agents or contractors, we will take all reasonable steps to ensure that they do not breach privacy requirements in relation to the information we share with them, before we share your personal information with them.
We may disclose your personal information to:
In all circumstances where your personal information is disclosed, we will take reasonable steps to ensure that those third parties undertake to protect your privacy (for example, putting in place a data sharing agreement where this is reasonable and practicable).
Disclosure to overseas recipients
Your personal information may be disclosed to our related companies and affiliates in Australia and in other overseas countries. If we do this, we will take reasonable steps to ensure that the overseas recipient does not breach the relevant privacy laws in relation to that information.
Sometimes we use third-party platforms and services to process sales, provide web support, send marketing messages, deliver products or otherwise deliver information.
Our service providers are mainly located in Australia and New Zealand. However, from time to time we may need to engage service providers in other countries. These services may also involve geographic locations which change from time to time which include data protection and processing efficiency. Where these services are used by us, it may not be practicable for us to notify you which country your personal information may be located in. We may also be required to report to regulatory authorities, within or outside of Australia or New Zealand.
Your personal information may also be stored in a secure and/or encrypted form overseas (e.g. in data storage and cloud computing facilities operated by us or by third parties on our behalf). By providing us with your personal information, you are agreeing to the disclosure of your personal information to third parties operating outside of Australia or New Zealand. We will take all reasonable steps to ensure that any personal information we disclose overseas is handled in accordance with the law.
Business transfer clause
It is possible, moving forward, that there could be a change in our business ownership or structure (including but not limited to a merger, acquisition or sale of a portion of all or some of our assets, (including our customer databases)), or we may undertake a corporate reorganisation or other action or transfer the personal information we handle between our related brands, entities, business partners, affiliates and digital services.
In the event that this should happen, you should be aware, that when you provide your personal information (by any means, whether verbal, written or electronic) or through your use of our websites at any time, you are consenting to the future transfer of your personal information to a potential or actual new owner or successor entity so that services can be continued to be provided to you. It is possible that our member information, including your personal information, may be transferred to the new business entity as one of our assets. In such an event, we will update this policy to reflect any change in ownership or control of your personal information.
4. WHAT CHOICES CAN YOU MAKE ABOUT YOUR PERSONAL INFORMATION?
You can unsubscribe from general marketing or promotions via the ‘unsubscribe’ or ‘opt out’ button at the bottom of any email we send you, or by sending an email to email@example.com (for Australia) or firstname.lastname@example.org (for New Zealand). A request to opt-out may take three to five business days to take effect. If you are a member of any of our loyalty clubs or membership programs, you may still receive communications related to your account, loyalty points or special officers (such as birthday discounts). Also, an opt-out request will also not stop transactional emails related to your purchases.
If you no longer wish to receive the text messages that you had consented to previously, you can text “STOP” after receiving a message.
If you would like to cancel your membership of any of our loyalty clubs or membership programs and stop receiving communications related to your account please contact email@example.com (Australia) firstname.lastname@example.org (New Zealand).
If you do not want your information to be used by us for the purposes of interest based advertising or social media targeting, please email email@example.com (for Australia) or firstname.lastname@example.org(for New Zealand).
Access or correction of your personal information
You can request access to, or correction of, the personal information we hold about you at any time please contact email@example.com (Australia) firstname.lastname@example.org (New Zealand) to make this request.
We will provide you with the information you have requested unless we are prevented by law from giving it to you. If we are unable to give you access to the information you have requested, or make the correction you require, we will give you reasons for this decision when we respond to your request.
You will not be charged for accessing your information, although we might have to charge the reasonable cost of processing your request, including photocopying, administration and postage if required. We will advise you of any fee payable before we process your request. If you believe that your personal information is not accurate, complete or up to date or you wish to request that we delete (or refrain from processing) any of your personal information that we handle, please contact email@example.com (Australia) firstname.lastname@example.org (New Zealand).
Sale of personal information
We do not share your personal information directly with third-parties for their own marketing purposes in exchange for monetary consideration. However, as mentioned in this policy, we may engage in Interest-Based Advertising, where we allow third parties to place cookies, pixels, and trackers on our site to provide you with personalized ads. The ‘Help’ section of your browser may tell you how to prevent your browser from accepting cookies.
5. HOW WE PROTECT YOUR PERSONAL INFORMATION
We hold personal information, at our premises in Australia and New Zealand and with the assistance of our service providers. We have a number of security controls in place, and we take all reasonable steps to ensure that your personal information is stored securely and is protected from misuse and loss or unauthorised access, modification or disclosure.
Our computer systems may be operated by us or by our service providers. In all cases, we have rigorous information security requirements aimed at eliminating risks of unauthorised access to, and loss, misuse or wrongful alteration of, the personal information that we handle.
Examples of these measures include:
We have measures in place to protect your personal information including credit card information. Your credit card details are not held or processed on our website or systems and all transactions are processed through a secure payment service provider.
We use Limepay, Afterpay, ZIP, Tyro, Latitude pay, Apple Pay, Humm Pay to process local and international transactions. All transactions are processed using encrypted methods. Your credit card details are not held by us and cannot be accessed by any of our staff members. However, they may be held by our secure payment service provider.
Data Retention Policy
We will only keep your personal information for as long as we require it for the purposes of operating our business. However, we may also be required to keep some of your personal information for specified periods of time, for example under certain laws relating to companies, money laundering and financial reporting legislation.
6. PRIVACY OFFICER CONTACT
You can request access to the personal information we hold about you at any time, and we will provide you with that information unless we are prevented by law from giving it to you.
If we are unable to give you access to the information you have requested, we will give you reasons for this decision when we respond to your request.
You will not be charged for accessing your information, although we might have to charge the reasonable cost of processing your request, including photocopying, administration and postage. We will advise you of any fee payable before we process your request.
If you have any queries, concerns or complaints about the manner in which your personal information has been collected or handled by us or would like to request access to or correction of the personal information we hold about you please contact email@example.com (Australia) firstname.lastname@example.org (New Zealand).
You can call us on 1300 350 886 or attention your mail to:
Privacy Officer Linen House, PO Box 2000, Moorabbin, Victoria, 3189.
Our office is located at 60 Corporate Drive, Heatherton, Victoria 3202, Australia.
For New Zealand:
You can call us on 0800 546 364 or attention your mail to:
Privacy Officer Linen House, PO Box 305-314, Triton Plaza, Auckland, 0757.
Our office is located at Unit A1, 40 Triton Drive, Rosedale, Auckland 0632.