Privacy Policy

This Privacy Policy sets out the principles that Nexora ABN 75725565508. In this Privacy Policy, ‘you’ refers to any individual about whom we collect personal information from in Australia and New Zealand.

Nexora is committed to managing personal information in accordance with the Australian Privacy Principles (‘APP’) in the Privacy Act 1988 (Cth) (‘Privacy Act’) and the Privacy Act 1993 (NZ) (the ‘NZ Act’) in New Zealand. Nexora will only collect, use or disclose personal information in accordance with the Privacy Act, NZ Act and this Privacy Policy.

What is covered by this Privacy Policy?

This Privacy Policy sets out our policies for managing your personal information, specifically:

the kinds of personal information we collect and hold, • how we collect and hold it; • the purpose for which we collect, hold, use and disclose it • how you can seek access to and correct it; • how you can contact us to make a complaint and how such complaints will be dealt with; and • how, and to who your personal information will be disclosed to overseas, and why. • If you need to contact us to discuss this policy, our contact details can be found below.

What is personal information?

In Australia, ‘personal information’ is any information or an opinion about an identified individual, or an individual who is reasonably identifiable.

In New Zealand, ‘personal information’ is information about an identifiable individual; and includes information relating to a death that is maintained by the Registrar-General under the Births, Deaths, Marriages, and Relationships Registration Act 1995 or any former Act (as defined in section 2 of the Births, Deaths, Marriages, and Relationships Registration Act 1995).

What kinds of personal information does Nexora collect and how does it collect this personal information?

Nexora will, from time to time, collect personal information in the course of its business.

When you use our services or interact with us, either electronically (e.g. via websites, apps, social media, chats, telephone, emails and/or SMS), telephone or as otherwise permitted by law, we may collect and hold personal information about you. We may also collect personal information about you from third parties where you have agreed with them that your information may be disclosed with us, and with whom we have business relationships.

Some examples of the types of information that Nexora collects from you and how we collect this personal information are outlined below.

If you sign up as a customer, including online or using our mobile apps: we will collect your name, date of birth, gender, delivery address, country of origin, billing address and email address. Your details will not be included in the mailing lists of any third parties. We may also collect login information (including registration passwords and usernames) and other user IDs (including for systems and third party services integrated with our service offering).

If you use a third-party authentication service or social account (for example, Google or Facebook) to log in to our website, this allows our website to make a request for data about you. If you choose to log in with an authentication service or social account, your data will be shared between those social networks and us. You should therefore stay updated on your social networks' privacy policies, and only agree to share the personal information that you wish to share. We will use the information we collect during this process to send you marketing communications unless you let us know that you want to opt-out.

If you do not sign up as a customer: we may collect general site traffic data (see the paragraphs on “When you use our websites” and “When you use our apps” below).

When you place an order, including online, or browse our sites or apps: we collect your name, billing address, delivery address, email address, telephone number, information about your orders and purchases, including what, how, and when you buy from us, information about your browsing behaviour on our internet sites and apps, including promotions you activated, as well as items you have added to your carts, information collected and held via our secure financial systems about the payment method you use for your purchases from us (including payment card and transaction details), website and app browsing data (see below “When you use our websites” and “When you use our apps”), comments, feedback or survey responses. This information must be provided to allow us to effect delivery of the products that you order, and to contact you if necessary. Your email address may also be used to contact you in the event that you discontinue a shopping session. We or our service providers may contact you by email to see if there were any problems and if we can help you to complete your transaction. Other information you provide at the checkout, such as comments or survey responses is stored by us and is used to better plan future items to add and developments for our websites or apps.

If you elect to pay online using your credit card: your credit card details are not stored by us. They are encrypted and passed directly to the Bank through our security provider. You can read more about our payment systems and security in the Help section of our website.

When you use our websites: General site traffic data is collected for the purpose of site maintenance and improvement and provides information about which and how often certain pages are viewed. This helps us to understand what sorts of products our customers are interested in and alerts us to any areas of the site that may be difficult to navigate. The data we collect may include your IP address, your approximate geographic location, and data sent to us by your web browser, such as your operating system, browser type and version, computer type, MAC address and screen resolution. We may also collect metadata including social media content (including tags, handles and other social media profile information). This information may be collected directly and/or via cookies. Cookies and other tracking technologies are used by us and our third-party partners, such as our advertising and analytics partners and our fraud prevention service provides, to provide functionality and to recognise you across different services and devices. You may opt out of sending us cookie data but this may adversely affect your experience using our services.

When you engage in business with us: Nexora may collect personal information from you when you provide it to us in the ordinary course of business, for example when you contract with us or otherwise engage with our business.

Enquiries: when you make an enquiry of us online or by phone, we may collect your name and contact details in order to respond to your enquiry.

By giving us access to this information, you are consenting to our ability to collect, store, use and disclose such information strictly in line with our Privacy Policy.

What happens if you do not provide personal information?

The main consequence for you, if some or all of the above personal information is not collected by us is that we may not be able to provide products, services or information to you, or be able to provide them to the same standard as if we had the information requested.

Why does Nexora collect personal information?

In Australia, we may use your personal information for the following purposes:

the purpose for which it was collected (and related purposes which would be reasonably expected by you); • purposes to which you have consented; or • as otherwise authorised or required by law.

In New Zealand, we may use your personal information for the following purposes:

the purpose for which it was obtained (and directly related purposes); • purposes to which you have consented; or • as otherwise authorised or required by law.

The personal information that we collect about you may be used by us for a number of purposes connected with our business including to:

provide you with information that you have requested;
verify your identity;
contact you;
process orders you make through our websites or apps;
add you to our mailing list;
send you marketing materials;
promote our products and services;
deliver to you the products that you have ordered and provide you with customer service following these orders;
improve the website experience of our visitors;
provide a personalised experienced and personalised recommendations;
provide goods or services to you or to receive goods or services from you;
address any issues, problems or complaints that we or you have regarding our relationship;
contract with you; and
comply with our legal obligations.

We also use personal information for our own internal business purposes including:

for data analysis to improve our products, services and business;
auditing our internal processes to ensure they function as intended and that we comply with regulatory requirements;
for fraud and security monitoring;
developing new products and services;
identifying usage trends so we can understand which part of our services are of most interest to our customers;
determining the effectiveness of marketing campaigns so that we can adapt to the needs and interests of our customers; and
operating and expanding our business activities such as understanding which of our services are of most interest to our customers, so we can focus on our customers’ needs.

Do you collect my sensitive information?

The Privacy Act defines some types of personal information as “sensitive information”. Sensitive information is personal information which is information or opinion about a person’s racial or ethnic origin, political opinions or memberships, religious or philosophical beliefs or religious affiliations, professional or trade association or union memberships, sexual orientation or practices, criminal record or health (including genetic and biometric information or templates). Nexora does not generally collect sensitive information about individuals.

If you provide sensitive information to us for any reason (for example if you provide us information about skin conditions in feedback to a product) you consent to us collecting, using and disclosing that information for the purpose for which you disclosed it and as permitted by the Privacy Act.

Do we engage in direct marketing?

As part of our promotional, educational and remarketing campaigns, we may contact you using the email address you have provided. If you prefer not to hear from us, you can opt-out at any time. To do so please click on the “unsubscribe” link at the bottom of any email we send you and you will be removed from any future communications. You can also unsubscribe (or re-subscribe) at any time by logging in using your email address and password, and then going to the “My Account” section of this site.

If you opt-out of receiving marketing material from us, Nexora may still contact you in relation to any ongoing relationship with you.

Who do we disclose your personal information to?

We do not provide any personal information provided by you to any third parties other than to our related entities and affiliates, where required by law or as set out in this privacy policy. However, we may disclose your personal data listed below or as otherwise permitted by the Privacy Act or NZ Act.

In the course of conducting our business we may provide your personal information to third parties, such as fraud prevention providers, web hosting providers, IT systems administrators, mailing houses, couriers, payment processors, data entry service providers and electronic network administrators, professional advisers, such as lawyers, auditors, accountants, insurers, credit reporting agencies and other financial institutions including our own bankers, other persons that we need to deal with in connection with the engagement of staff, any other commercial partner, supplier or service provider.

We may disclose your personal information to third parties:

to enable our websites or apps (and your shopping experience) to function in the manner it is intended;
for fraud detection and security detection or to prevent payment fraud;
as part of our business processes and for the purposes described above in ‘Why does Nexora collect personal information’;
to meet the purpose for which your personal information was submitted;
if we have your consent to do so or otherwise when we are authorised by law;
to comply with any applicable law, regulation, court order or other legal requirements, including supplying such information to third parties such as lawyers, regulators or law enforcement where applicable law compels us to do so;
to process product returns; and
as generally required when we need their assistance in our day-to-day business operations or so can work with them to provide goods or services to you.

We may also use and share your personal information:

to transfer your information to a third party as a result of a sale, merger or consolidation of us, insofar as, the third party has, as a minimum, agreed to comply with all privacy laws applicable to it and adhere to terms similar to this Privacy Policy;
to share among our related entities, or business units or brands within, Nexora; and affiliates to deliver our goods and services to you or receive goods and services from you; and
with any other persons and entities permitted under the Privacy Act and NZ Act.

We will not supply, sell or in any other knowing way, make available your personal information to other parties other than in the circumstances outlined above, unless you authorise us to do so.

Does Nexora store personal information outside of Australia or New Zealand?

Some personal information may be transferred to countries outside of Australia and/or New Zealand in the course of our business. We may share personal information overseas for reasons including:

where we have engaged a service provider to assist us with certain technology or data storage functions; and • for disclosures between our related entities. Our main business location is in Australia, but some of our related entities may be based or operating in other countries from time to time.

Your personal information may be shared with parties located in:

Australia; 2. New Zealand; 3. Ireland; 4. United States; 5. Israel; and 6. Singapore.