SECTION 1 – WHAT WE DO WITH YOUR INFORMATION?
When you purchase something from Sassy Organics, as part of the buying and selling process, we collect the personal information you provide us such as your name, physical and postal address, email, date of birth and payment details.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. With your permission, we use your email address to email you about our store, new products and other updates.
Mobile terms of service
The Sassy Organics mobile message service (the "Service") is operated by Sassy Organics (“Sassy Organics”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.
By consenting to Sassy Organics’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Sassy Organics through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages may include updates, alerts, and information (e.g., order updates, account alerts, etc.). Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).
You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Sassy Organics. Your participation in this program is completely voluntary.
We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.
You may opt-out of the Service at any time. Text the single keyword command STOP to Sassy or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Sassy Organics mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.
For Service support or assistance, text HELP to Sassy or email firstname.lastname@example.org.
We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.
The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.
To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.
We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.
Last updated: May 6, 2023
SECTION 2 - CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, (for example, verification of your email address) or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at email@example.com or mailing us at: Sassy Organics, PO Box 2665, Dunearn, Vic, 3175.
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 - MAROPOST
Our store is hosted on the Maropost Server Farm located in the world class Global Switch Data Centre in Sydney, Australia. Maropost provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Maropost’s data storage, and databases. Neto stores your data on a secure server behind a firewall. The server is quarterly scanned by the Comodo PCI Certification Service to meet Payment Card Industry Data Security Standard (PCI DSS) security requirements. Scanning of the server consists of a three-step process that includes dynamic port scanning; port-level network services vulnerability testing, and web application vulnerability testing.
Sassy Organics has access to Maropost’s web application firewall to monitor and control advanced security settings for its web store. This includes the ability to run security treat reports by accessing Maropost’s web application firewall to block suspicious traffic by IP addresses or country. Furthermore, Sassy Organics offers additional website and credit card transactions by using the industry standard Secure Sockets Layer (SSL). SSL is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.
Sassy Organics utilises the Stripe payment gateway. Anyone involved with the processing, transmission, or storage of card data must comply with the Payment Card Industry Data Security Standards (PCI DSS). Stripe has been audited by an independent PCI Qualified Security Assessor (QSA) and is certified as a PCI Level 1 Service Provider. This is the most stringent level of certification available in the payments industry.
PCI compliance is a shared responsibility and applies to both Stripe and businesses such as Sassy Organics. When accepting payments, we must do so in a PCI compliant manner and this is done by never seeing (or having access to) card data at all. Sassy Organics achieves PCI compliance by:
- Using one of Stripes' recommended payments integrations to collect payment information, which is securely transmitted directly to Stripe without it passing through Maropost servers.
- Serving our payment pages securely using Transport Layer Security (TLS) so that they make use of HTTPS
- Reviewing and validating our account’s PCI compliance annually.
SECTION 5 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. You can access this information by clicking on these links, NAB Transact Terms and Conditions.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL). The site has a valid Comodo SSL certificate, activated at all times.
Furthermore, to ensure our online store’s data is always unharmed; the server where our site resides is backed up automatically. The backups are stored at multiple off-site locations for 30 days allowing Sassy Organics to roll back at any time to view any mysterious activity or catch anyone misusing our site for further criminal investigation. In addition, we utilise Stripes' Payment Gateway, which complies with the Payment Card Industry Data Security Standards (PCI DSS).
SECTION 7 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
SECTION 9 - GENERAL DATA PROTECTION REGULATION
The European Union General Data Protection Regulation (the GDPR) contains new data protection requirements that impact how businesses process and handle data, effective from 25 May 2018. You can learn more about GDPR here. The GDPR requires every business to allow any EU citizen (whom the business is storing personal data pertaining the EU citizen) to:
- Demand a copy of the data we have on them
- Demand the deletion/anonymisation of this data
Sassy Organics has the ability to both give EU citizens this data and anonymise this data, on request. This request needs to be made to Sassy Organics via email at firstname.lastname@example.org or by mail to Sassy Organics, PO Box 2665, Dunearn, Vic, 3175.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact us at email@example.com or by mail to Sassy Organics, PO Box 2665, Dunearn, Vic, 3175.