Thank you for visiting and shopping at www.harbourlane.com.au (“Website”)

Harbour Lane Furniture and Bedding Pty Ltd (ABN 72 642 718 527) (“we”, “us”, the “Business”) takes pride in providing products of the highest quality and are very much committed to customer satisfaction. This Privacy Policy explains how we collect, hold, use and disclose your personal information when you shop with us online through the Website or in person at our store(s), and how you can access or correct your information, or make a complaint.

By using our website, placing an order, visiting our store, or otherwise providing personal information to us, you agree to the collection, use and disclosure of your
personal information as described in this Privacy Policy.

We will treat all personal information in accordance with all obligations that are binding upon us under the Privacy Act 1988 (Cth) (“Privacy Act”). The Privacy Act lays down 13 key principles in relation to the collection and treatment of personal information, which are called the “Australian Privacy Principles” (“APP”).  We are committed to protecting your privacy in accordance with the Privacy Act and the APPs set out in that Act.

The type of personal information we collect depends on how you interact with us. Whether you browse our website, place an order online, visit our store, or contact our customer service team.

The information we collect
may include:

Identity and contact information

• Full name
• Delivery and billing address
• Email address
• Phone number
• Date of birth (only if provided, e.g. for promotions requiring age verification)

Order and transaction information

• Products purchased, order history and order value
• Delivery instructions and preferences Payment details necessary to process a transaction, such as the last four digits of a card, transaction reference numbers and payment method used (note: we do not directly collect or store full credit/debit card numbers)
• Buy Now, Pay Later (BNPL) account information collected by our BNPL provider(s) to facilitate your instalment purchase
• Records of returns, refunds, warranty claims and customer service correspondence

Technical and online usage information

• IP address, browser type and device information
• Website usage data, such as pages viewed, time on site, and referring/exit pages, collected via cookies and similar technologies  
• Information you provide when you create an online account, add items to a wishlist or cart, or subscribe to communications

Marketing preferences

• Your consent status and preferences in relation to receiving marketing emails or SMS from us (e.g. newsletters, promotions and abandoned cart reminders)

We generally do not need to collect sensitive information (as defined in the Privacy Act, e.g. health information) to provide furniture retail services, and we will not seek to collect this information from you unless it is necessary and you have provided your consent, or collection is otherwise permitted or required by law.

Wherever reasonable and practicable, we collect personal information directly from you. We may collect personal information in the following ways:

• When you browse our website or make a purchase online;
• When you place an order, make a purchase, or interact with staff in our physical store(s);
• When you create an online account or subscribe to our newsletter or SMS marketing;
• When you contact our customer service team by phone, email, live chat or social media;
• When you participate in a competition, survey, promotion or provide a product review;
• When you apply for or use a Buy Now, Pay later service at checkout;
• Through cookies and similar tracking technologies when you visit our website.

In some cases, we may collect personal information about you from a third party, such as our website hosting and e-commerce platform (Shopify), our payment processors, our delivery and logistics partners, or a person who places an order on your behalf (e.g. a gift purchase). Where we do this, we will take reasonable steps to ensure you are made aware of the collection in line with APP 5.

We collect, hold, use and disclose personal information for the following purposes:

• To process and fulfil your online or in-store orders, including payment processing, delivery and installation;
• To create and manage your customer account;
• To communicate with you about your order, including confirmations, delivery updates and after-sales support;
• To respond to enquiries, complaints and warranty or return claims;
• To send you direct marketing communications (where you have consented, or as otherwise permitted by law);
• To personalise and improve your shopping experience, both online and in store;
• To operate, protect, improve and maintain our website, systems and business,
  including fraud prevention and IT security;
• To comply with our legal and regulatory obligations, including under Australian Consumer Law, tax and financial record keeping laws;
• For internal business purposes such as accounting, auditing and record-keeping.

We will only use or disclose personal information for a purpose other than the primary purpose of collection where this is permitted under APP 6 (for example, where you would reasonably expect such use, where you have consented, or where required or authorised by law).

Online payments. Online payments are processed securely through third-party payment gateways, including Shopify Payments and Stripe. When you make an online purchase, your payment card or account details are collected and processed directly by these providers in accordance with their own privacy policies and security standards (including PCI-DSS compliance). We do not store your full card details on our own systems.

In-store payments. In our store(s), you may pay by cash, EFTPOS/credit or debit card, or through a Buy Now, Pay Later (BNPL) provider available at the point of sale. Card payments made in-store are processed through our EFTPOS/payment terminal provider, and BNPL purchases are processed directly between you and the relevant BNPL provider, who will collect and hold information in accordance with their own privacy policy. We recommend you review the privacy policies of Shopify, Stripe, and any BNPL provider you choose to use, as their handling of your information is governed by their own terms.

With your consent, we may use your contact details to send you marketing communications by email and/or SMS, including:

• Newsletters, new product announcements and promotional offers;
• Sale and event notifications;
• Abandoned cart reminders, where you have started but not completed an online order.
• You can opt out of receiving marketing communications from us at any time by:
• Clicking the "unsubscribe" link at the bottom of any marketing email;
• Replying "STOP" to any marketing SMS;
• Contacting us using the details set out in this Privacy Policy.

We will process your opt-out request promptly. Please note that even if you opt out of marketing, we may still send you transactional or service-related communications (such as order confirmations, shipping updates or responses to enquiries), as these are necessary to provide our services to you and are not marketing communications.

Where our marketing emails or SMS are sent using third-party marketing platforms, those providers will process your contact details on our behalf, solely for the purpose of sending communications in accordance with our instructions and applicable law.

We may disclose your personal information to third parties who assist us in operating our business and providing our products and services, including:

• E-commerce and website platform providers (e.g. Shopify), who host our online store and support website functionality and analytics
• Payment processors and gateways (e.g. Stripe, Shopify Payments, EFTPOS providers), to process online and in-store payments
• Buy Now, Pay Later providers where you choose to pay using their service
• Delivery, freight and installation providers engaged to deliver and, where applicable, assemble or install your furniture
• IT service providers, including cloud hosting, data storage, email and marketing platform providers, and website analytics providers
• Professional advisers, such as our accountants, auditors and legal advisers
• Government and regulatory bodies, where required or authorised by law (for example, the Australian Taxation Office or law enforcement agencies)
• Prospective buyers of our business, in the event of a sale, merger or restructure of our business, subject to appropriate confidentiality protections

We do not sell your personal information to third parties for their own independent marketing purposes.

Some of the third-party service providers we use, including Shopify and Stripe, store and process data on servers that may be located outside Australia. This means your personal information may be transferred to, and held or processed in, countries outside Australia.

Where we disclose personal information to overseas recipients, we take reasonable steps, as required by Australian Privacy Principle 8, to ensure that those recipients handle your information consistently with the APPs, including by relying on the contractual and security commitments that reputable global providers such as Shopify and Stripe make regarding data protection. However, please note that the protections available in an overseas jurisdiction may differ from those under Australian law, and in certain circumstances the Privacy Act may not hold us accountable for the recipient's handling of your information (for example, where you have consented to that transfer, such as by agreeing to a BNPL provider's terms).

If you have questions about the specific overseas locations where your data may be processed, please contact us.

Our website uses cookies and similar technologies (such as pixels and local storage) to:

• Enable core website functionality, such as your shopping cart and checkout
• Remember your preferences and login details
• Understand how visitors use our website, through analytics tools
• Deliver and measure the effectiveness of online advertising, including retargeting

Most web browsers allow you to control or delete cookies through their settings. If you disable cookies, some features of our website, including checkout, may not
function correctly. Our website may also contain links to third-party sites (such as social media platforms); we are not responsible for the privacy practices of those third-party sites, and we encourage you to review their privacy policies.

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure, in accordance with APP 11. These steps include:

• Storing electronic records on secure, access-controlled systems and with reputable cloud and platform providers
• Using encryption and secure payment gateways for online transactions
• Restricting access to personal information to staff who need it to perform their role
• Staff training on privacy and data handling practices
• Secure destruction or de-identification of personal information that is no longer required for any purpose for which it may be used or disclosed, unless we are required by law to retain it (for example, tax and financial record-keeping obligations, which generally require retention of transaction records for at least five years)

While we take reasonable steps to protect your personal information, no method of electronic storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.

You have the right under APPs 12 and 13 to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, please contact us and we will respond to your request within a reasonable period (generally within 30 days). We may need to verify your identity before providing access or making corrections. In some circumstances permitted under the Privacy Act, we may decline a request for access or correction, in which case we will provide you with reasons for our decision. We will not charge you for making a request, but may charge a reasonable fee for giving access, which will be advised to you in advance.

We have processes in place to identify, assess and respond to data breaches. If we experience a data breach involving your personal information that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC), in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

If you have any questions about this Privacy Policy, wish to access or correct your personal information, or want to make a complaint about how we have handled your personal information, please contact us:

• Business name: Harbour Lane Furniture and Bedding Pty Ltd
• Email: umer@harbourlane.com.au
• Phone: 0414588850
• Post/Designation: General Manager Operations 

If you make a complaint, we will acknowledge receipt and aim to investigate and respond within 30 days. We take all complaints seriously and will work with you to resolve the matter. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

Our products and services are intended for adults, and we do not knowingly collect personal information from children without the consent of a parent or guardian. If you believe we have inadvertently collected information from a child, please contact us so we can address it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. We encourage you to review this policy periodically.