Privacy Policy

Heart Harmony Communications (“us”, “we”, or “our”) operates the www.heartcomms.com.au  website (the “Service”). Heart Harmony Communications is an Australian company subject to the laws of Australia. This website was not created to serve, nor does it actively market to residents of the EU (European Union) or the United Kingdom. This privacy notice provides you with details of how we collect, process, use and disclose your personal data through your use of our site www.heartcomms.com.au, including any information you may provide through our site when you purchase a product or service, sign up to our newsletter or take part in a giveaway or competition, and the choices you have associated with that data.

Also, please read our Website & Product Terms & Conditions.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from our Website & Product Terms & Conditions

Definitions

Service Service is the www.heartcomms.com.au website operated by Heart Harmony Communications Personal Data Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession). Usage Data Usage Data is data collected automatically either generated using the Service or from the Service infrastructure itself (for example, the duration of a page visit). Cookies Cookies are small pieces of data stored on your device (computer or mobile device). Data Controller Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data. Data Processors (or Service Providers) Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively. Data Subject (or User) Data Subject is any living individual who is using our Service and is the subject of Personal Data.

Information Collection

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). It does not include anonymized data. We may process certain types of personal data about you as follows:

• Identity Data may include your first name, maiden name, last name, username, marital status, title, date of birth and gender.
• Contact Data may include your billing address, delivery address, email address and telephone numbers.
• Financial Data may include your bank account and payment card details.
• Transaction Data may include details about payments between us and other details of purchases made by you.
• Technical Data may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access this site.
• Profile Data may include your username and password, purchases or orders, your interests, preferences, feedback and survey responses.
• Usage Data may include information about how you use our website, products and services. This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
• Marketing and Communications Data may include your preferences in receiving marketing communications from us and our third parties and your communication preferences.

We may also process Aggregated Data from your personal data but this data does not reveal your identity and as such in itself is not personal data. An example of this is where we review your Usage Data to work out the percentage of website users using a specific feature of our site. If we link the Aggregated Data with your personal data so that you can be identified from it, then it is treated as personal data.

Sensitive Data

We do not collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any information about criminal convictions and offenses. Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver goods or services to you). If you don’t provide us with the requested data, we may have to cancel a product or service you have ordered but if we do, we will notify you at the time.

How We Collect Your Personal Data

We collect data about you through a variety of different methods including:

• Direct interactions: You may provide data by filling in forms on our site (or otherwise) or by communicating with us by mail, phone, email or otherwise, including when you:
  • order our products or services;
  • create an account on our site;
  • subscribe to our service or publications;
  • request resources or marketing be sent to you;
  • enter a competition, giveaway, promotion or survey; or
  • give us feedback.
• Automated technologies or interactions: As you use our site, we may automatically collect Technical Data about your equipment, browsing actions and usage patterns. We collect this data by using cookies, server logs and similar technologies. We may also receive Technical Data about you if you visit other websites that use our cookies. Please see our cookie policy below for further details.
• Third parties or publicly available sources: We may receive data about you from various third parties and public sources including Gravatar, GetResponse, Wordfence, Antispam Bee.
• Social Media platforms such as Facebook/Instagram, Twitter, Pinterest
• Analytics providers such as Google; and
• Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as Paypal.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

If you fill in our contact form, we collect the data shown in the contact form, and also the visitor’s IP address and browser user agent string to help spam detection. We keep all data submitted via contact forms for 12 months. We do not use the data submitted for marketing purposes.

Use of Data

We will only use your personal data when legally permitted. The most common uses of your personal data are: Heart Harmony Communications uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

Generally, we do not rely on consent as a legal ground for processing your personal data, other than in relation to sending marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by clicking unsubscribe at the bottom of any email or by emailing us at info@heartcomms.com.au

Marketing communications

You will receive marketing communications from us if you have:

• requested information from us or purchased goods or services from us; or
• if you provided us with your details and given consent at the point of entry of your details for us to send you marketing communications; and
• in each case, you have not opted out of receiving that marketing.

In compliance with the Spam Act, all email sent from us will clearly state who the email is from and provide clear information on how to contact the sender. In addition, all email messages will also contain concise information on how to remove yourself from our mailing list so that you receive no further email communication from us. You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you OR by emailing us at info@heartcomms.com.au at any time. Where you opt out of receiving our marketing communications, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.

Emails

If you choose to correspond with us through email, we may retain the content of your email messages together with your email address and our responses. We provide the same protections for these electronic communications that we employ in the maintenance of information received online, mail and telephone. This also applies when you register for our website, sign up through any of our forms using your email address or make a purchase on this site. We are committed to keeping your -mail address confidential. We do not sell, rent, or lease our subscription lists to third parties, and we will not provide your personal information to any third-party individual, government agency, or company at any time unless strictly compelled to do so by law. We will use your email address solely to provide timely information from and about Heart Harmony Communications. We will maintain the information you send via email in accordance with applicable laws. Email is not recognised as a secure medium of communication. For this reason, we request that you do not send private information to us by email. However, doing so is allowed, but at your own risk. Some of the information you may enter on our website will be transmitted securely via a secure medium known as Secure Sockets Layer, or SSL. Credit Card information and other sensitive information is never transmitted via email.

Service Providers

We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used. For example, if it is necessary to provide you something you have requested (like enable a feature such as recurring payments), then we may share your and/or your Subscribers’ Personal Information with a Service Provider for that purpose. Examples of Service Providers include payment processors, hosting services and content delivery services. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Payments

We may provide paid products and/or services within the Service. In that case, we use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information. The payment processors we work with are: PayPal or Braintree Their Privacy Policy can be viewed at https://www.paypal.com/webapps/mpp/ua/privacy-full

Analytics

We may use third-party Service Providers to monitor and analyse the use of our Service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: http://www.google.com/intl/en/policies/privacy/

GetResponse Newsletter Tracking

The newsletter of the Heart Harmony Communications is delivered by our third-party service, GetResponse, and contains tracking pixels.  Their privacy policy is available here https://www.getresponse.com/legal/privacy.html A tracking pixel is a miniature graphic embedded in such emails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the Heart Harmony Communications may see if and when an email was opened by a data subject, and which links in the email were called up by data subjects. Such personal data collected in the tracking pixels contained in the newsletters are stored and analysed by the controller in order to optimise the delivery of the newsletter, as well as to adapt the content of future newsletters to better match your interests. You can choose to opt out of our newsletters and marketing messages at any time by following the opt-out links on any marketing message sent to you OR by emailing us at info@heartcomms.com.au at any time.

Other providers

We use Monster Insights to assist the collect Google Analytics data. The Monster Insights privacy policy is available here https://www.monsterinsights.com/privacy-policy/ We use Monarch to assist social media sharing, their privacy policy is available here https://www.elegantthemes.com/policy/privacy/

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Legal Basis for Processing Personal Data Under General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), Heart Harmony Communications legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it. Heart Harmony Communications may process your Personal Data because:

• We need to perform a contract with you
• You have given us permission to do so
• The processing is in our legitimate interests and it’s not overridden by your rights
• For payment processing purposes
• To comply with the law

Set out below is a description of the ways we intend to use your personal data and the legal grounds on which we will process such data. We have also explained what our legitimate interests are where relevant. We may process your personal data for more than one lawful ground, depending on the specific purpose for which we are using your data. Please email us info@heartcomms.com.au if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. Purpose: To register you as a new customer Type of Data:  Identity and Contact Lawful Basis for Processing: Performance of a contract with you Purpose: To manage our relationship with you which will include: 1. Notifying you about changes to our terms or privacy policy, 2. Asking you to leave a review or take a survey Type of Data:  Identity, Contact, Profile, Marketing and Communications Lawful Basis for Processing: Performance of a contract with you 1. Necessary to comply with a legal obligation, 2, Necessary for our legitimate interests to keep our records updated and to study how customers use our products/services Purpose: To process and deliver your order including: 1. Manage payments, fees and charges, 2. Collect and recover money owed to us Type of Data: Identity, Contact, Financial, Transaction, Marketing and Communications Lawful Basis for Processing: 1. Performance of a contract with you, 2. Necessary for our legitimate interests to collect fees and/or recover debts owed to us Purpose: To use data analytics to improve our website, products/services, marketing, customer relationships and experiences Type of Data: Technical, Usage Lawful Basis for Processing: Necessary for our legitimate interests to define types of customers for our products and services, to keep our site updated and relevant, to develop our business and to inform our marketing strategy Purpose: To administer and protect our business and our site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) Type of Data: Identity, Contact, Technical Lawful Basis for Processing:  1. Necessary for our legitimate interests for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise, 2. Necessary to comply with a legal obligation Purpose: To enable you to partake in a giveaway, competition or complete a survey Type of Data: Identity, Contact, Profile, Usage, Marketing and Communications Lawful Basis for Processing: 1. Performance of a contract with you, 2. Necessary for our legitimate interests to study how customers use our products/services, to develop them and grow our business Purpose: To deliver relevant content and advertisements to you and measure and understand the effectiveness of our advertising Type of Data: Identity, Contact, Profile, Usage, Marketing and Communications, Technical Lawful Basis for Processing: 1. Necessary for our legitimate interests to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy. 2. Necessary for our legitimate interests to offer related services and solutions for a fee that will compensate for the amount of work we put into providing free information Purpose: To make suggestions and recommendations to you about goods or services that may be of interest to you Type of Data: Identity, Contact, Technical, Usage, Profile Lawful Basis for Processing: Necessary for our legitimate interests to develop our products/services and grow our business

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to find out more about how the processing for the new purpose is compatible with the original purpose, please email us at info@heartcomms.com.au If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will notify you and we will explain the legal ground of processing. We may process your personal data without your knowledge or consent where this is required or permitted by law.

Protecting your data

We are committed to protecting your privacy as an online visitor to our website. We use the information we collect about you to maximise the services that we provide to you. We respect the privacy and confidentiality of the information provided by you and adhere to the Australian Privacy Principles. You may change your details at any time by advising us in writing via email. All information we receive from our customers is protected by our secure server. Our secure server software encrypts all customer information before it is sent to us. Furthermore, all customer data collected is secured against unauthorised use or access. Credit card information is not stored by us on our servers. We will use all reasonable means to protect the confidentiality of your Personal Data while in our possession or control. We will not knowingly share any of your Personal Data with any third party other than our service providers who assist us in providing the information and/or services we are providing to you. To the extent that we do share your personal information with a service provider, we would only do so if that party has agreed to comply with our privacy standards as described in this privacy policy. Some of our service providers may be overseas and may not be subject to Australian Privacy Laws. Please contact us if you require specific details. Any non-personal information, communications and material you send to this website or to us by email, or which we obtain from third parties without promises of confidentiality, may be kept, used and disclosed by us on a non-confidential basis. We are free to use and reproduce any such information freely, and for any purpose whatsoever. Specifically, we will be free to use any ideas, concepts, know-how or techniques contained in such information for any purpose, including developing, manufacturing or marketing products.

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Retention of Data

Heart Harmony Communications will retain your Personal Data only for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable taxation laws), resolve disputes, and enforce our legal agreements and policies. If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and potentially approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. Heart Harmony Communications will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods. In some circumstances we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Transfer Of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside Australia and choose to provide information to us, please note that we transfer the data, including Personal Data, to Australia and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. Heart Harmony Communications will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure Of Data

We do not and will not sell or deal in personal or customer information. We may however use in a general sense without any reference to your name, your information to create marketing statistics, identify user demands and assist in meeting customer needs generally (see our Cookies policy). We may have to share your personal data with the parties set out below for the purposes set out in the table above:

• Service providers who provide IT and system administration services.
• Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
• Authorities who require reporting of processing activities in certain circumstances.

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

Business Transaction

If Heart Harmony Communications is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Disclosure for Law Enforcement

Under certain circumstances, Heart Harmony Communications may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

Heart Harmony Communications may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of Heart Harmony Communications
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Heart Harmony Communications aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights: The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you. The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete. The right to object. You have the right to object to our processing of your Personal Data. The right of restriction. You have the right to request that we restrict the processing of your personal information. The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format. The right to withdraw consent. You also have the right to withdraw your consent at any time where Heart Harmony Communications relied on your consent to process your personal information. Please note that we may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Children’s Privacy

Our Service does not address anyone under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: info@heartcomms.com.au
• By visiting this page on our website: https://www.heartcomms.com.au/contact/
• By phone number: (07) 3351 8844
• By mail: PO Box 476, Ferny Hills, QLD 4055

Effective Date: 19 May 2018