Skip to content

Privacy policy and notice

Privacy policy

Effective date: Wednesday, 5 April 2023

impactsociety.co (the “Site”) is owned and operated by Impact Society. This Site is an e-commerce website.

Impact Society is the data controller and can be contacted at:

privacy@impactsociety.co

Impact Society
PO Box 55
Fremantle, WA 6959
Australia

Purpose

The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:

  1. The personal data we will collect;
  2. Use of collected data;
  3. Who has access to the data collected;
  4. The rights of Site users; and
  5. The Site’s cookie policy.

This Privacy Policy applies in addition to the terms of service of our Site.

GDPR

For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the “GDPR”). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.

We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.

Consent

By using our Site users agree that they consent to:

  1. The conditions set out in this Privacy Policy.

When the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.

You can withdraw your consent by e-mailing privacy@impactsociety.co.

Legal basis for processing

We collect and process personal data about users in the EU only when we have a legal basis for doing so under Article 6 of the GDPR.

We rely on the following legal basis to collect and process the personal data of users in the EU:

  1. Users have provided their consent to the processing of their data for one or more specific purposes.

Personal data we collect

We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.

Data collected automatically

When you visit and use our Site, we may automatically collect and store the following information:

  1. IP address;
  2. Location;
  3. Hardware and software details;
  4. Date and time of the page view;
  5. Referring URL;
  6. Purchase activities;
  7. Downloads;
  8. Clicked links; and
  9. Content viewed.

Google Analytics

We use the web analytics service Google Analytics from Google on our website.

The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on our behalf as the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The following information, among others, can be collected: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activities. The IP address of your browser transmitted by Google Analytics is not linked to any other Google data.

Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information about your use of our website generated by the Google Analytics cookies is normally transmitted to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place i.a. on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data and is available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/ adsprocessorterms/. Both Google and US government agencies have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google has about you.

You can find more information on terms of use and data protection at https://marketingplatform.google.com/about/analytics/terms/us/ or at https://policies.google.com/?hl=en&gl=de and at https://policies.google.com/technologies/cookies?hl=en. Our website also uses Google Analytics reports for performance, based on demographic characteristics and interests as well as reports to impressions in the Google Display Network. You may deactivate Google Analytics for display advertising and set the displays in the Google Display Network by accessing the display settings under this link: https://www.google.de/ads/preferences?ac_tld=de&continue=aHR0cHM6Ly9hZHNzZXR0aW5ncy5nb29nbGUuZGUvYW5vbnltb3Vz.

Data collected in a non-automatic way

We may also collect the following data when you perform certain functions on our Site:

  1. First and last name;
  2. Email address;
  3. Phone number;
  4. Address;
  5. Information regarding your occupation; and
  6. Information regarding your education.

This data may be collected using the following methods:

  1. Creating an account;
  2. Making a purchase; and
  3. Downloading our tools and content.

How we use personal data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

The data we collect automatically is used for the following purposes:

  1. Statistics.

The data we collect when the user performs certain functions may be used for the following purposes:

  1. Communciation, including for marketing purposes;
  2. Developing content, products and services tailored to our users;
  3. Tailoring marketing efforts; and
  4. Statistics.

Who we share personal data with

Employees

We may disclose user data to any member of our organisation who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.

Other disclosures

We will not sell or share your data with other third parties, except in the following cases:

  1. If the law requires it;
  2. If it is required for any legal proceeding;
  3. To prove or protect our legal rights; and
  4. To buyers or potential buyers of this company in the event that we seek to sell the company.

If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and have no control over their privacy policies and practices.

How long we store personal data

User data will be stored until the purpose the data was collected for has been achieved.

How we protect your personal data

In order to protect your security, we use browser encryption and store our data on secure servers. All data is only accessible to our employees. Our employees are bound by strict confidentiality agreements and a breach of this agreement would likely result in the employee’s termination.

While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

Your rights as a user

Under the GDPR, you have the following rights:

  1. Right to be informed;
  2. Right of access;
  3. Right to rectification;
  4. Right to erasure;
  5. Right to restrict processing;
  6. Right to data portability; and
  7. Right to object.

Children

We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 years of age has provided us with personal data their parent or guardian may contact our privacy officer.

How to access, modify, delete or challenge the data collected

If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please contact us here:

privacy@impactsociety.co

Impact Society
PO Box 55
Fremantle, WA 6959
Australia

Cookie policy

A cookie is a small file, stored on a user’s hard drive by a website. Its purpose is to collect data relating to the user’s browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience.

We use the following types of cookies on our Site:

  1. Functional cookies
    Functional cookies are used to remember the selections you make on our Site so that your selections are saved for your next visits.
  2. Analytical cookies
    Analytical cookies allow us to improve the design and functionality of our Site by collecting data on how you access our Site, for example data on the content you access, how long you stay on our Site, etc.
  3. Targeting cookies
    Targeting cookies collect data on how you use the Site and your preferences. This allows us to personalise the information you see on our Site for you.
  4. Third-Party Cookies
    Third-party cookies are created by a website other than ours. We may use third-party cookies to achieve the following purposes:
    a) Statistics; and
    b) Tailoring marketing communications and efforts.

Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the “Effective Date” at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates.

Complaints

If you have any complaints about how we process your personal data, please contact us through the contact methods listed in the Contact Information section below so that we can, where possible, resolve the issue. If you feel we have not addressed your concern in a satisfactory manner, you may contact a supervisory authority. You also have the right to directly make a complaint to a supervisory authority. You can lodge a complaint with a supervisory authority by contacting the Office of the Australian Information Commissioner.

Contact information

If you have any questions, concerns or complaints, you can contact us at:

privacy@impactsociety.co

Impact Society
PO Box 55
Fremantle, WA 6959
Australia

California Consumer Privacy Act Privacy Notice

Website: impactsociety.co

This Privacy Notice supplements the www.impactsociety.co Privacy Policy and applies solely to California consumers who visit impactsociety.co. Any terms defined in the California Consumer Privacy Act of 2018 (“CCPA”) have the same meaning when used in this Privacy Notice.

Information we collect

We have collected the following categories of personal information about consumers in the past 12 months:

  1. Identifiers such as a real name, alias, postal address, online identifier, internet protocol address, e-mail address, account name or other similar identifiers;
  2. Categories of personal information described in California customer records law (Cal. Civ. Code § 1798.80(e)) such as name, address, education, employment, or credit card number, debit card number or any other financial information;
  3. Characteristics of protected classifications under California or federal law, such as sex, age or national origin;
  4. Commercial information such as records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies;
  5. Internet or other electronic network activity information such as browsing history, search history and information regarding a consumer’s interaction with an internet website, application or advertisement;
  6. Geolocation data such as physical location;
  7. Professional or employment-related information such as occupation, job history or employer information; and
  8. Inferences drawn from any of the personal information listed above to create a profile about a consumer’s preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities or aptitudes.

Sources of information

We collect the categories of personal information listed above from the following categories of sources:

  1. Directly from users; and
  2. Indirectly through user activity on our website.

Use of personal information

We may use or disclose personal information for one or more of the following business purposes:

  1. Communciation, including for marketing purposes;
  2. Developing content, products and services tailored to our users;
  3. Tailoring marketing efforts; and
  4. Statistics.

Sharing personal information

We have not disclosed consumer personal information in the past 12 months.

Sale of personal information

We have not sold consumer personal information in the past 12 months.

Your rights and choices

The CPPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how you can exercise those rights.

Access to specific information and data portability rights

You have the right to request that impactsociety.co disclose to you certain information about our collection and use of your personal information in the past 12 months. Once we receive and confirm your verifiable consumer request (see the Exercising Your Access and Deletion Rights section below), we will disclose to you:

  1. The categories of personal information we collected about you;
  2. The categories of sources from which we collected personal information about you;
  3. Our business or commercial purpose for collecting personal information; and
  4. The categories of third parties with whom we share personal information.

Deletion request rights

You have the right to request that we delete any of your personal information that we collected and retained, subject to certain exceptions. Once we have received and confirmed your verifiable consumer request, we will delete, and direct any of our service providers to delete, your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

  1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
  2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
  3. Debug products to identify and repair errors that impair existing intended functionality;
  4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
  5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.);
  6. Engage in public or peer-reviewed scientific, historical or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when deletion of the information is likely to render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
  7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
  8. Comply with a legal obligation; or
  9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Exercising your access and deletion rights

To exercise your access and deletion rights described above, please submit a verifiable consumer request to us at:

privacy@impactsociety.co

Impact Society
PO Box 55
Fremantle, WA 6959
Australia

You may only make a verifiable consumer request for access once within a 12-month period. The verifiable consumer request must:

  1. Provide enough information for us to reasonably verify you are the person about whom we collected personal information or an authorised representative; and
  2. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. You are not required to make an account with us to make a verifiable consumer request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Non-discrimination

You have the right to not be discriminated against in pricing and services because you exercise any of your CCPA rights. Unless permitted by the CCPA, we will not use whether or not you have exercised your CCPA rights to:

  1. Deny you goods or services;
  2. Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
  3. Provide you a different level or quality of goods or services; or
  4. Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to this privacy notice

We may amend this Privacy Notice from time to time to maintain compliance with the law and to reflect any changes to our data collection process. We recommend you check this Privacy Notice from time to time to ensure you are aware of any changes.

Contact information

If you have any questions or concerns, you can contact us at:

privacy@impactsociety.co

Impact Society
PO Box 55
Fremantle, WA 6959
Australia