Privacy Policy

MagicEzy Pty Ltd

Privacy Policy

The privacy of your personal information has always been important to MagicEzy Pty Ltd. We are committed to respecting your right to privacy and protecting your personal information.

This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

About this privacy policy

This privacy policy aims to give you information on how MagicEzy Pty Ltd collects and processes your personal data through your use of our website magicezy.com.au (the “Site” or “we”) including any data you provide through this website when you purchase a product, provide feedback or seek customer support.

The website is not intended for children, and we do not knowingly collect data relating to children.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”.

It does not include data where the identity has been removed (anonymous data) as this data does not directly or indirectly reveal your identity

See the list below for more information about what Personal Information we collect and why.

Device information

• Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
• Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimise our Site.
• Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
• Disclosure for a business purpose: shared with our processor Shopify.

Order information

• Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
• Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
• Source of collection: collected from you.
• Disclosure for a business purpose: shared with our processor Shopify 

Customer support information

• Examples of Personal Information collected: As stipulated above
• Purpose of collection: to provide customer support.
• Source of collection: collected from you.
• Disclosure for a business purpose: No third party provides customer support.

We also collect, use and share Aggregate data such as statistical or demographic data for any purpose. Aggregate data may be derived from your personal data but is not considered personal data by law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregate Data with your personal data so that it can directly or indirectly identify you, we treat the combine data as personal data which will be used in accordance with this privacy policy.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade membership, information about your health and genetic and biometric data). Nor do we collect information about criminal convictions and offences.

Where we need to collect personal data by law, or under the terms of the contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods and services). In this case, we have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
• We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
• This website may contain links to third-party websites, plugins and applications. Clicking on those or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Facebook and Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en.You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

• FACEBOOK - https://www.facebook.com/settings/?tab=ads
• GOOGLE - https://www.google.com/settings/ads/anonymous

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Using Personal Information

We will only use your personal data when the law allows us to. Most commonly we will use your personal data in the following circumstances:

• Where we need to perform the contract, we are about to enter into or have entered into with you. Including offering products for sale, processing payments, shipping and fulfilment of your order and keeping you up to date on new products, services and offers.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with legal or regulatory obligations.

Generally, we do not rely on consent as a legal basis for processing your personal data.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

• Your consent;
• The performance of the contract between you and the Site;
• Compliance with our legal obligations;
• To protect your vital interests;
• To perform a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Security

We have put in place appropriate security measures to prevent your personal data from being accidently lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Retention

When you place an order through the Site, we will retain your Personal Information for as long as necessary to fulfill the purpose that we collected it for, including for the purposes of satisfying our legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purpose for which we process your personal data and whether we can achieve these purposes through other means, and the applicable legal requirements.

By law we have to keep basic information about our customers (including contact, identity, financial and transaction data) for 6 years after they cease being customers for tax purposes.

In some circumstances you can request us to delete your data. For more information on your right of erasure, please refer to ‘your rights’ section below.

In other circumstances we may anonymise your personal data, so that it can no longer be associated with you, for research or statistical purposes in which cases we may use this information indefinitely without further notice to you.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
• Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

Selling Personal Information

If you are a Californian resident, the California Consumer Privacy Act of 2018 (“CCPA”) requires us to disclose the following information with respect to our collection, use and disclosure of personal data.

Categories of Personal Data Collected: We may collect the following categories of personal data: identifiers, characteristics of protected classifications under California or U.S law, commercial information, internet and electronic network activity, geolocation, audio and visual information, inferences drawn about your preferences and other categories of personal data that relates to or is reasonably capable of being associated with you. For examples of the precise data points that we collect, please refer to Collecting Personal Information above.

Business or Commercial Purpose for Collecting and Using Data: we collect personal data for the business purposes described in Collecting Personal Information section above.

Categories of Personal Data Disclosed: We collect personal data from you and the sources described in Collecting Personal Information

Categories of Personal Data Disclosed: We may disclose the following categories of personal data for business or commercial purposes: identifiers, internet and electronic network activity information, commercial information, audio and. Visual information, geolocation data, demographic information, inferred information and other information that we have derived or inferred about you or that relates to or is reasonably capable of being associated with you.

Categories of Third Parties with Whom We Share Personal Data: We may share your personal data with the third parties as described in the Sharing Personal Information section above.

Sale of Personal Data: MagicEzy does not sell your personal data.

Your rights

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

CCPA

Consumers in California have the right to request access to their personal data, additional details about our information practices and deletion of their personal data (subject to certain exceptions). California consumers also have the right to opt out of sales of personal data, if applicable. We describe how California consumers can exercise their rights under the CCPA below. Please note that you may designate an authorized agent to exercise these rights on your behalf by providing written materials demonstrating that you have granted the authorized agent power of attorney. Please note that if an authorized agent submits a request on your behalf, we may need to contact you to verify your identity and protect the security of your personal data. We will not discriminate against you if you choose to exercise your rights under the CCPA.

Right to Know: You may request access to the specific pieces of personal data we have collected about you in the last 12 months. You may also request additional details about our information practices, including the categories of personal data we have collected about you, the sources of such collection, the categories of personal data we share for a business or commercial purpose, and the categories of third parties with whom we share your personal data. You may make these requests by emailing admin@magicezy.com After submitting your request, please monitor your email for a response. We are required by law to verify your identity prior to granting access to your data in order to protect your privacy and security.

Deletion: You may request that we delete the personal data we have collected about you. Please note that we may retain certain information as required or permitted by applicable law. You may make these requests by emailing admin@magicezy.com After submitting your request, please monitor your email for a response. We are required by law to verify your identity prior to deleting your data in order to protect your privacy and security. If you request to delete your personal data, certain of our products and services may no longer be available to you.

Cookies

Our website uses cookies to distinguish you from other users of our website. This assists us to provide you with a good experience when you browse our website and allows us to improve our site. By continuing to browse this site you are agreeing to our use of cookies.

A cookie is a small file of letters and numbers that we store on your browser or hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Cookies Necessary for the Functioning of the Store

Name	Function
_ab	Used in connection with access to admin.
_secure_session_id	Used in connection with navigation through a storefront.
cart	Used in connection with shopping cart.
cart_sig	Used in connection with checkout.
cart_ts	Used in connection with checkout.
checkout_token	Used in connection with checkout.
secret	Used in connection with checkout.
secure_customer_sig	Used in connection with customer login.
storefront_digest	Used in connection with customer login.
_shopify_u	Used to facilitate updating customer account information.

 

Reporting and Analytics

Name	Function
_tracking_consent	Tracking preferences.
_landing_page	Track landing pages
_orig_referrer	Track landing pages
_s	Shopify analytics.
_shopify_fs	Shopify analytics.
_shopify_s	Shopify analytics.
_shopify_sa_p	Shopify analytics relating to marketing & referrals.
_shopify_sa_t	Shopify analytics relating to marketing & referrals.
_shopify_y	Shopify analytics.
_y	Shopify analytics.

 

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email address] or by mail using the details provided below:

MagicEzy Pty Ltd, 1 Kerryl Street, Unit 2, Kunda Park QLD 4556, Australia

Last updated: 18 June 2021

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here:  https://www.oaic.gov.au/privacy/privacy-complaints/