Privacy Policy
Effective date: 26 March 2025
Data controller: Prizelonvak, trading in connection with the Actyvera product line, with registered business address at Shop L2/345 Bourke St, Melbourne VIC 3000, Australia.
Contact for privacy matters: Email contact@prizelonvak.world, telephone +61396713833. For postal correspondence, use the address above and mark the envelope “Privacy”.
This Privacy Policy explains how Prizelonvak (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal information when you visit https://prizelonvak.world/, submit forms, place orders, communicate with us, or otherwise interact with our services. We aim to be transparent and to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) applies to our processing, we describe the relevant legal bases and rights below.
1. Scope and acceptance
This policy applies to personal information we handle in the course of operating our website and related commercial activities, including marketing, sales fulfilment, customer support, and legal compliance. By using the website or providing information to us, you acknowledge this policy. If you do not agree, please discontinue use and do not submit personal data.
We do not knowingly offer services directed at children under 16 years of age. We do not knowingly collect personal information from children without parental authority where required by law.
2. Categories of personal information we may collect
The types of data depend on how you interact with us. We collect only what is reasonably necessary for the purposes described in section 4.
2.1 Identity and contact data
Full name, email address, telephone number, delivery address (if you provide one for shipping), billing address where relevant, and similar identifiers you enter in order forms, contact forms, or correspondence.
2.2 Transaction and account-related data
Order references, product selections, payment status references (we do not store full payment card numbers on this marketing site; payment processors hold card data according to their terms), delivery preferences, and communication history related to your purchase.
2.3 Technical and usage data
Internet protocol (IP) address, browser type and version, device type, operating system, referring URLs, pages viewed, approximate location derived from IP (country or region level), timestamps, and diagnostic logs needed to secure and operate the site.
2.4 Cookie and similar technologies
Data associated with cookies, local storage, or similar tools as described in our Cookie Policy, including consent records where applicable.
2.5 Communications content
Free-text messages you send through forms or email, including any additional personal details you choose to include.
3. Sources of personal information
We obtain personal information directly from you when you complete forms, place orders, subscribe to updates (if available), or contact us. We may receive limited data from payment service providers (for example confirmation of successful payment) and delivery partners (for example tracking events). We may also generate technical data automatically when you load our pages.
4. Purposes of processing and legal bases
Under Australian law we collect, hold, use, and disclose personal information only for legitimate purposes connected to our functions and activities, and where required we obtain consent for direct marketing as described below.
| Purpose | Examples | GDPR legal basis (where applicable) |
|---|---|---|
| Providing the website and core features | Loading pages, security, fraud prevention, remembering cookie preferences | Performance of a contract; legitimate interests in security |
| Processing orders and payments | Confirming purchases, arranging shipment, invoicing, after-sales support | Performance of a contract |
| Customer communications | Answering enquiries, sending transactional emails about your order | Performance of a contract; legitimate interests in support |
| Legal and regulatory compliance | Tax, consumer law, record-keeping, responding to lawful requests | Legal obligation; legitimate interests in compliance |
| Analytics (if you consent) | Understanding aggregate traffic to improve content and performance | Consent |
| Marketing measurement (if you consent) | Assessing campaign performance in aggregated form | Consent |
Where we rely on legitimate interests, we balance our interests against your rights and offer opt-out mechanisms where appropriate, particularly for non-essential cookies and marketing.
5. Disclosure of personal information
We may share personal information with:
- Service providers who assist us with hosting, email delivery, payment processing, logistics, IT security, and analytics, bound by contractual confidentiality and data-processing terms.
- Professional advisers such as lawyers and accountants where required.
- Authorities when we believe disclosure is required by law, court order, or regulatory request, or to protect our rights, users, or the public.
We do not sell your personal information as a commercial asset. We do not list personal data for purchase by third-party advertisers on this site.
6. International transfers
Our operations are based in Australia. Some of our service providers may process data in other countries. Where we transfer personal information outside Australia, we take steps that are reasonable in the circumstances to ensure the overseas recipient does not breach the APPs (for example contractual clauses and vendor assessments). Where the GDPR applies, we implement appropriate safeguards such as standard contractual clauses where required.
7. Retention
We retain personal information only as long as necessary for the purposes above, including statutory retention periods:
- Order and accounting records: generally at least seven (7) years from the end of the financial year to which they relate, in line with Australian tax and commercial record-keeping practice, unless a longer period is required by law.
- Marketing consents and cookie logs: for the life of the consent plus a short period to prove compliance, typically up to three (3) years after withdrawal unless a longer period is justified.
- Support tickets and general correspondence: up to three (3) years after the last interaction unless a dispute or legal hold requires longer retention.
- Security logs: typically ninety (90) days to twelve (12) months depending on system configuration and incident investigation needs.
When retention periods end, we delete or de-identify personal information where feasible.
8. Security
We implement administrative, technical, and organisational measures appropriate to the nature of the data we hold, including HTTPS encryption for data in transit to this site, access controls for systems that process orders, patching and monitoring, staff training on confidentiality, and vendor due diligence. No method of transmission or storage is completely secure; we encourage you to use strong passwords where accounts exist and to contact us if you suspect unauthorised access.
9. Your rights
9.1 Rights under Australian privacy law
Subject to the APPs, you may request access to the personal information we hold about you and request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information. You may make a complaint about our handling of your personal information; we will respond within a reasonable period (typically thirty (30) days) and outline next steps. If you are not satisfied, you may refer the matter to the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/.
9.2 GDPR rights (where applicable)
If you are in the European Economic Area or the UK and the GDPR applies, you may have the right to access, rectify, erase, restrict processing, data portability, object to certain processing, and withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. You may lodge a complaint with a supervisory authority in your country of residence.
9.3 How to exercise rights
Contact us using the details at the top of this policy. We may need to verify your identity before fulfilling access or correction requests.
10. Direct marketing
We will not send you promotional emails unless you have opted in where required by law or we are otherwise permitted to contact you (for example existing customer relationship in compliance with the Spam Act 2003). Every promotional message will include a functional unsubscribe mechanism where applicable.
11. Automated decision-making
We do not use solely automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.
12. Links to other websites
Our website may link to external sites. We are not responsible for their privacy practices. Please read their policies before providing personal information.
13. Changes to this Privacy Policy
We may update this policy to reflect legal, technical, or business changes. The effective date at the top will be revised, and for material changes we will provide a notice on the website where appropriate. Continued use after the effective date constitutes notice of the update where permitted by law.
14. Contact
For any privacy-related questions, requests, or complaints:
Prizelonvak
Shop L2/345 Bourke St
Melbourne VIC 3000
Australia
Email: contact@prizelonvak.world
Phone: +61396713833