Legal
Privacy Policy
1. Introduction
SWAGG HEELS ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (swaggheels.com.au) and services. We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.
2. Information We Collect
We may collect the following types of personal information: Identity & Contact Data (full name, email address, phone number); Account Data (username, hashed password, account preferences, purchase history); Transaction Data (payment details processed securely through Stripe — we do not store full credit card numbers); Booking Data (class reservations, attendance records, points balance, credit usage); Usage Data (IP address, browser type, pages visited via standard server logs); Communication Data (messages submitted through our contact form or sent to our email addresses).
3. How We Collect Information
We collect information when you create an account or sign up on our website; when you make a purchase or book a class; when you contact us via our contact form, email, or social media; and automatically through cookies and similar technologies when you browse our website.
4. How We Use Your Information
We use your personal information to create and manage your account; to process bookings, payments, and ticket purchases; to send booking confirmations, reminders, and account-related notifications; to respond to your enquiries and provide customer support; to improve our website, services, and user experience; to comply with legal obligations and protect our rights; and with your consent, to send marketing communications about classes, events, and promotions (you may opt out at any time).
5. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your data in limited circumstances: with Stripe for payment processing (Stripe receives transaction data but does not have access to your full account); if required by law, court order, or government authority; or in the event of a merger, acquisition, or sale of assets.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include encrypted password storage (bcrypt), HTTPS encryption in transit, and restricted access to personal data on a need-to-know basis. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymise your personal data within a reasonable timeframe, except where we are required to retain certain information by law (for example, financial transaction records required by Australian tax law).
8. Cookies
Our website uses essential cookies to maintain your login session and enable core functionality such as authentication and form submissions. We do not use third-party tracking or advertising cookies. You can configure your browser to refuse cookies, but this may prevent certain features of the website from functioning properly.
9. Your Rights
Under the Australian Privacy Act, you have the right to access the personal information we hold about you; to request correction of inaccurate or outdated information; to request deletion of your personal data (subject to legal retention requirements); to withdraw consent for marketing communications at any time; and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Australian Privacy Principles.
10. Children's Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it. Parents or guardians who believe their child has provided us with personal data should contact us immediately.
11. Cross-Border Data
Our servers are located in Australia. If you access our website from outside Australia, your data may be transferred to and processed in Australia. By using our website, you consent to this transfer. We take reasonable steps to ensure that any overseas recipients of your data comply with the Australian Privacy Principles.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted to this page with an updated "Last updated" date. We encourage you to review this policy periodically. Material changes may be communicated to you via email or a notice on our website.
For questions, access requests, or complaints about this Privacy Policy, contact us at our contact page.