Privacy policy

In this privacy policy We’ or ‘Us’ means Buntu Bakery. The words ‘You’ and ‘Your’ mean the person or entity contacting Buntu Bakery including via https://www.BuntuBakery .com (Site) for any purpose.
Buntu Bakery is committed to taking reasonable steps to implement practices, procedures and systems that will ensure it complies with the Australian Privacy Principles (APPs) and any binding registered APP code. We understand the importance You attach to information that identifies You. This privacy policy tells You how We collect information when You visit our website and what We do with it.
This policy should be read together with Buntu Bakery ’ other policies, including the Terms and Conditions (accessible at https://www.buntuBakery .com/pages/terms-conditions).

1. WHAT INFORMATION WE COLLECT ABOUT YOU AND WHAT WE DO WITH IT

Buntu Bakery only collects personal information, including device and order information, that is reasonably necessary for Buntu Bakery’s functions and activities.

Device Information

When You visit the Site, we automatically collect certain information about Your device, including information about Your web browser, IP address, time zone, and some of the cookies that are installed on Your device. Additionally, as You browse the Site, we collect information about the individual web pages or products that You view, what websites or search terms referred You to the Site, and information about how You interact with the Site. We refer to this automatically collected information as “Device Information”.
We collect Device Information using the following technologies:
  • (a) “Cookies” are data files that are placed on Your device or computer and often include an anonymous unique identifier. The cookies are used to identify You for the purposes of monitoring use and aiding security in Your use of the website. The cookies do not allow Us to gather any personal information to identify You or Your email address. You have the option of setting Your web browser to reject cookies, which may impact negatively on Your experience of this website;
  • (b) “Log files” track actions occurring on the Site, and collect data including Your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps;
  • (c) “Web beacons”, “tags” and “pixels” are electronic files used to record information about how You browse the Site.
We use the Device Information that we collect to help Us screen for potential risk and fraud (in particular, Your IP address), and more generally to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

Order Information

We collect Order information which includes the following:
  • (a) full name;
  • (b) contact details (including email, billing and delivery addresses and contact phone numbers); and
  • (c) payment information (including credit card numbers).
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing Your payment information, arranging for shipping, and providing You with invoices and/or order confirmations). Additionally, we use this Order Information to:
  • (a) communicate with You;
  • (b) screen our orders for potential risk or fraud; and
  • (c) when in line with the preferences You have shared with us, provide You with information or advertising relating to our products or services.
When You place an order through the Site, we will maintain Your Order Information for our records unless and until You ask Us to delete this information.
Buntu Bakery does not collect sensitive information about an individual such as information about an individual's racial or ethnic origin, political opinions, professional or political or religious affiliations or memberships, sexual orientation or practices, criminal record, health, genetics and/or biometrics.

2. OPEN AND TRANSPARENT MANAGEMENT OF PERSONAL INFORMATION

Buntu Bakery will manage personal information in an open and transparent manner. In doing so, Buntu Bakery will ensure that individuals are notified at the time of collecting their personal information:
  • (a) what type of personal information is being collected;
  • (b) the fact and circumstances of collection;
  • (c) whether the collection is required or authorised by law;
  • (d) how Buntu Bakery collects and holds personal information;
  • (e) the purposes for which Buntu Bakery collects, holds, uses and discloses personal information;
  • (f) Buntu Bakery usual disclosures of that kind of person information; and
  • (g) who that personal information will be disclosed to, including whether the personal information is likely to be disclosed to overseas recipients.
Buntu Bakery regularly updates this privacy policy.

3. COLLECTION OF PERSONAL INFORMATION

Buntu Bakery only collects personal information that is reasonably necessary for Buntu Bakery ’ functions and activities. Buntu Bakery collects personal information for the following purposes:
  • (a) to conduct Buntu Bakery ’ business;
  • (b) to provide and market Buntu Bakery ’ services;
  • (c) to communicate with an individual;
  • (d) to comply with The Buntu Bakery ’ legal obligations;
  • (e) to help Us manage and enhance Buntu Bakery ’ services;
  • (f) to protect individuals and Buntu Bakery from error or fraud; or
  • (g) to provide individuals with the products or services they have requested, including placing an order on the Site.
Where practical, Buntu Bakery will collect personal information directly from the individual and not from third parties unless otherwise required by the law.

4. UNSOLICITED PERSONAL INFORMATION

If Buntu Bakery receives unsolicited personal information, Buntu Bakery will determine whether Buntu Bakery could have collected that personal information by lawful and fair means, and whether it is related to one of the purposes of collecting personal information above. Buntu Bakery will do this by looking at its relationship with the individual and whether the personal information relates to its relationship with them.
If Buntu Bakery determines that it could have collected the personal information by lawful and fair means, Buntu Bakery will deal with that personal information in accordance with clauses 4 to 15 of this policy.
If Buntu Bakery could not have collected the personal information by lawful and fair means, or the personal information does not relate to one of The Buntu Bakery ’ purposes for collecting the personal information, Buntu Bakery will destroy the personal information.

5. NOTIFICATION OF THE COLLECTION OF PERSONAL INFORMATION

When Buntu Bakery first collects personal information from an individual, Buntu Bakery will notify them that it has collected its personal information and notify them about:
  • (a) the contact details for Buntu Bakery ;
  • (b) the purposes of the collection of their personal information;
  • (c) those entities that Buntu Bakery usually disclose personal information to;
  • (d) what happens if the individual chooses not to provide Buntu Bakery with personal information;
  • (e) direct marketing that may be undertaken by Us or any related companies;
  • (f) when Buntu Bakery is required to collect personal information under an Australian law,
  • (g) Buntu Bakery ’ privacy policy and where it can be found;
  • (h) how they may complain about a breach of the APPs or any registered binding APP code;
  • (i) how they may access their personal information and seek correction of such information; and
  • (j) any disclosure of personal information that Buntu Bakery makes to an overseas entity.
If Buntu Bakery knows that as part of its relationship with the individual, Buntu Bakery will disclose their personal information to another identifiable entity, Buntu Bakery will notify the individual of the following matters at the time Buntu Bakery first collects their personal information:
  • (a) the identity and contact details of that organisation; and
  • (b) why their information may be disclosed to the organisation.
If the information is collected from another entity, or the individual may not be aware that the entity has collected their personal information, Buntu Bakery will explain to the individual at the commencement of dialogue either:
  • (a) the name of the entity that provided their information; or, if this is not practical
  • (b) the kinds of entities from which it collects this information.

6. USE OR DISCLOSURE OF PERSONAL INFORMATION

If during Buntu Bakery’ relationship with the individual Buntu Bakery wishes to use an individual’s personal information for an additional purpose, Buntu Bakery will obtain their consent unless the purpose is related to the primary purpose, or Buntu Bakery is permitted under law to do so.

7. DIRECT MARKETING

We may use Your information to provide You with special offers, information about new products and special promotions that We think may interest You.
In all Buntu Bakery’ direct marketing communications Buntu Bakery will provide a prominent statement about how You can elect not to receive direct marketing. If the direct marketing communication is an email, Buntu Bakery will provide an ‘unsubscribe’ function within the email.
Buntu Bakery will keep appropriate records to ensure those individuals that have made requests not to receive direct marketing communications do not receive them. Buntu Bakery does not apply a fee to unsubscribe from direct marketing communications. Buntu Bakery does not sell personal information.
If Buntu Bakery purchases personal information for the purposes of direct marketing, Buntu Bakery will conduct appropriate due diligence to ensure appropriate consents from the individuals have been obtained.

8. CROSS-BORDER DISCLOSURE OF PERSONAL INFORMATION

Generally, Buntu Bakery does not disclose personal information overseas.
Buntu Bakery may use cloud storage and IT servers that may be located overseas to store the personal information Buntu Bakery holds.
Buntu Bakery will notify the individual of any proposed disclosure of personal information that Buntu Bakery makes to an overseas entity.

9. ADOPTION, USE OR DISCLOSURE OF GOVERNMENT RELATED IDENTIFIERS

Buntu Bakery does not use government related identifiers to identify individuals.

10. QUALITY OF PERSONAL INFORMATION

Buntu Bakery relies on individuals to help it to ensure that their personal information is accurate, up-to-date and complete.
If Buntu Bakery becomes aware that personal information is inaccurate, out-of-date or incomplete, Buntu Bakery will update its systems accordingly.

11. SECURITY OF PERSONAL INFORMATION

Buntu Bakery will take reasonable steps to protect personal information that Buntu Bakery holds from misuse, interference and loss and from unauthorised access, modification or disclosure.
Buntu Bakery hold personal information on secure IT systems. All IT systems are appropriately updated with passwords, virus scanning software and firewalls when needed.
When reasonable, Buntu Bakery will usually destroy personal information that is held electronically and in paper form seven years after Buntu Bakery’ relationship with the individual ends. Buntu Bakery will do this by shredding paper copies and deleting electronic records containing personal information about the individual or permanently de-identifying the individuals within those records.

12. ACCESS TO PERSONAL INFORMATION

Individuals may request access to any personal information that Buntu Bakery holds about them. Buntu Bakery will not charge an individual for requesting access to their personal information. An individual does not need to state that they are making a request under the Privacy Act and the request does not need to be made in writing.
Buntu Bakery will verify the individual’s identity prior to disclosing any personal information or ensure the person seeking access has appropriate authority from the person to whom the personal information relates.
When an individual requests access to their personal information Buntu Bakery will conduct a search of our database. This search will also indicate if there are any paper records that contain personal information.
Buntu Bakery will not give access to the personal information that Buntu Bakery holds about an individual where it is unreasonable or impracticable to provide access, or in circumstances where the request would likely:
  • (a) pose a serious threat to the life, health or safety of any individual, or to public health or public safety;
  • (b) unreasonably access the privacy of other individuals;
  • (c) be frivolous or vexatious;
  • (d) relate to anticipated legal proceedings, and the correct method of access to personal information is by the process of discovery in those legal proceedings;
  • (e) reveal the intentions of the entity in relation to negotiations with the individual in such a way as to prejudice those negotiations;
  • (f) be unlawful or in breach of an Australian law or court / tribunal order;
  • (g) prejudice the taking of appropriate action in relation to a matter where unlawful activity or misconduct that relates to our functions or activities;
  • (h) prejudice enforcement related activities of a regulatory body (such as ASIC); or
  • (i) reveal commercially sensitive information.
When Buntu Bakery receives a request for access, Buntu Bakery will usually respond to the individual within seven days. However, depending on the nature of the request Buntu Bakery may provide the personal information when the request is made.
If the individual is requesting a large amount of personal information, or the request cannot be dealt with immediately, then after Buntu Bakery has investigated the request for access, Buntu Bakery will advise the individual what personal information Buntu Bakery holds and provide details of that personal information.
Buntu Bakery will comply with all reasonable requests by an individual to provide details of the personal information that Buntu Bakery holds in the requested format.
If Buntu Bakery does not provide access to the information, Buntu Bakery will provide written reasons setting out why Buntu Bakery does not believe it need to provide access.

13. CORRECTION OF PERSONAL INFORMATION

If Buntu Bakery holds personal information about an individual and Buntu Bakery is reasonably satisfied that the information is inaccurate, out of date, incomplete, irrelevant or misleading, or Buntu Bakery receives a request to correct the information, Buntu Bakery will take reasonable steps to correct the information. Buntu Bakery will not charge an individual for requesting correction of their personal information.
If Buntu Bakery corrects personal information that Buntu Bakery has previously disclosed, it will take reasonable steps to notify the entity to which Buntu Bakery disclosed the information of the correction. Buntu Bakery may not always make corrections to an individual’s personal information. When Buntu Bakery does not make requested corrections, it will provide written reasons for our refusal to make the correction.
When Buntu Bakery receives a request for correction, Buntu Bakery will usually respond to the individual with seven days. However, depending on the nature of the request Buntu Bakery may correct the personal information when the request is made.
If, after notifying the individual of Buntu Bakery’ refusal to correct personal information, the individual requests Buntu Bakery to issue a statement that the personal information on the record is inaccurate, out of date, incomplete, irrelevant or misleading, Buntu Bakery will take reasonable steps to do so.

14. COMPLAINTS

Any complaint that about a breach of this policy or the APPs must be in writing and delivered to Buntu Bakery at info@buntuBakery .com
Any complaint Buntu Bakery receives will be acknowledged within seven days.
A decision will be reached within 30 days, or a longer period if agreed. Individuals may contact the Office of the Australian Information Commissioner if they are unhappy with the handling of a complaint.

15. OTHER INFORMATION

You may be able to access various other sites by clicking on links that Buntu Bakery have provided. You should be aware that other sites may not be subject to Buntu Bakery ' privacy standards and procedures.

16. CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

17. CONTACT US

For more information about our privacy practices, if You have questions, or if You would like to make a complaint, please contact Us by e-mail at hello@buntuBakery .com.