Who we are
Gluten-free Lunchboxes is a food blog. Our website address is www.glutenfreelunchboxes.com.au
Email contact can be made via admin@glutenfreelunchboxes.com.au
What personal data do we collect and why do we collect it?
If you are a visitor to this website, your personal data will not be collected. If you use a link on this website to visit a social media site (Facebook, Instagram, Pinterest, Google+ or Twitter), that social media site may collect your data. To find out more, you should check the privacy policy of each social media site that you use.
If you subscribe to receive email updates from this site, or if you subscribe to the site’s newsletter, your name and email address will be collected so that we can send you the information to which you have subscribed. This data will not be used for any other reason and will not be shared with third parties. Newsletters are managed and sent via Mailchimp. For further information, please refer to Mailchimp’s Privacy Policy.
To unsubscribe from the update emails and/or from the newsletters, activate the unsubscribe link at the bottom of the emails.
If you visit the site’s shop and purchase an eCookbook, we collect the following data:
- Name
- Address
- Your company (if relevant)
- Country of residence
- Phone number
- Email address
This data is used to contact you if there has been an issue with your transaction. It is not used for any other reason.
Personal data may also be generated from cookies, analytics and third party embeds. These are technical processes used to assist the smooth functioning of the site. The data is not used for any other reason.
Payment for eCookbooks is processed by Paypal, which will also collect personal data from you. To find out more about collection and use of this data, please refer to Paypal’s Privacy Policy.
Comments
If you leave a comment on the site, your name, IP address and browser user agent string will be collected. This information is used to assist with spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. For further information, please refer to the Gravatar service Privacy Policy. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Contact forms
If you use the site’s Contact form, you will be asked to provide your name, email address and website (if relevant). You will also be asked to leave a comment about the nature of your enquiry. This data is used to contact you to address or resolve your enquiry. We do not use it for any other reason.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
Embedded content from other websites
Articles on this site may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
This site uses Google Analytics. Google Analytics stores cookies on users’ browsers to keep track of usage data. For further information, see Google’s Privacy Policy.
By default WordPress does not collect any analytics data.
How we share your data
We do not share your data with any other party, except as outlined in this policy.
This site operates on the WordPress platform. By default, WordPress does not share any personal data with anyone.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
Data for other functions of this website, for example newsletters, emails and purchases, is held indefinitely or until a user requests that their data be erased.
What rights you have over your data
If you have made a purchase on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data that we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Any comments made by visitors to this site may be checked via an automated spam detection service.
Our Responsibilities under the GDPR
If you are a resident of the EU or UK you have certain rights and protections under the EU and UK GDPR regarding the processing of your Personal Data (also known as “Personal Information”).
We collect, use and store your Personal Data to enable us to provide you with our goods or services and information about them. We rely on the following lawful means of processing your Personal Data:
- Where it is necessary to fulfil a contract with you. This includes where we collect your Personal Data to enable us to send you our goods or provide you with our services.
- Where you have given us valid consent to use your Personal Data. We will rely on that consent and only use the Personal Data for the specific purpose for which you have given consent. This includes where we email newsletters or send mobile phone notifications.
- We may also process your Personal Data where it is to further our legitimate interests which could include usage statistics, analytics and internal analysis so we can improve our services to you.
Your rights as an EU or UK resident
If you are a resident of the EU or UK you have various rights including the:
- Right to be informed;
- Right of access;
- Right to rectification;
- Right to object;
- Right to restriction of processing;
- Right to erasure or to be forgotten;
- Right to data portability; and
- Right not to be subject to automated processing.
If you want to access your Personal Data or ask for the information to be corrected, please contact us. In some circumstances, you also have a right to object to or ask that we restrict certain processing activities or delete your Personal Data. If you would like to limit or request deletion of your Personal Data or exercise any other rights you can do so by contacting us.
Withdrawing your consent
You can withdraw your consent to our collection or processing of your Personal Data. You can do so by contacting us or by opting out of email newsletter communications by following the instructions in those emails, by clicking unsubscribe or by using the opt out option through our App. If you withdraw your consent to the use of your Personal Data, you may not have access to our services and we might not be able to provide you with our services. In some circumstances, where we have a legal basis to do so, we may continue to process your information after you have withdrawn consent. For example, if it is necessary to comply with an independent legal obligation or if it is necessary to do so to protect our legitimate interest in keeping our services secure.
Our compliance
We comply with the GDPR protection directives set out by the EU and UK regarding the collection, use and retention of Personal Data from EU member countries and the UK. All Personal Data stored on our platform is treated as confidential. It is stored securely and is only accessed by authorized personnel. Our collection is limited in relation to what is necessary, for the purpose for which the Personal Data is processed, and kept only for so long as is necessary for the purpose for which the Personal Data was collected. We implement and maintain appropriate technical, security and organisational measures to protect Personal Data against unauthorized or unlawful processing or use, and against accidental loss, destruction, damage, theft or disclosure. We ensure the encryption and pseudonymisation of Personal Data and we have adequate cyber security measures in place.
Your acknowledgement
By providing us with your Personal Data, you consent to us disclosing it to third parties who reside outside the EU or UK. We will ensure that those third parties are GDPR compliant.
If you feel that your data has not been handled correctly or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have a right to lodge a complaint with the Office of the Australian Information Commissioner through its website: https://www.oaic.gov.au/privacy/privacy-complaints/
Our contact information
For any concerns about how this site handles your personal data, please address them in an email to admin@glutenfreelunchboxes.com.au
How we protect your data
We take the following measures to protect your data: encryption; security measures such as two factor authentications; and training in data protection. Our Email Marketing Supplier, Mailchimp has extensive data protection. Please refer to their website for further information https://mailchimp.com/legal/privacy/