Privacy policy
1. INTRODUCTION
LABOUTIK Bali recognizes the importance of protecting the privacy of your personal data. We have instituted strict policies and security measures to protect the information you provide us.
2. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
The Indonesian company PT LABOUTIK SPACE BALI, reg. No. 427006739906000 (“Laboutik Bali”), is the controller of your personal data. Laboutik Bali’s affiliated companies (including other companies within the Laboutik Bali group, joint ventures, franchisees and licensees) and selected suppliers may process your personal data on Laboutik Bali’s behalf and in accordance with Laboutik Bali’s instructions as stated below and are thereby processors of your personal data. You may contact Laboutik Bali at any time, please find our contact details below.
Mail address: LABOUTIK Bali, Jl. Petitenget No. 882, Seminyak - Bali 80361
Visiting address: LABOUTIK Bali, Jl. Petitenget No. 882, Seminyak - Bali 80361
Phone: +62 811 2814 114
E-mail: bali_office@laboutik.com
3. CATEGORIES OF DATA PROCESSED, PURPOSE AND LEGAL BASIS FOR PROCESSING
3.1 GENERAL
- Contact details: If you make a purchase online we will collect your name, address, e-mail address, telephone number, country of residence, date of birth, title (Ms./Mr. or other title) and social media account contact details (if any). Not all information is mandatory for making a purchase. We have marked mandatory information with the symbol (*) on our website. We will use your contact information to (i) process your purchase/orders and any returns, exchanges and complaints you may have relating to your purchase; and to (ii) communicate with you regarding your purchase and to answer and administer any questions or comments you may have regarding our products or services. The legal basis is that it is necessary to process your data in order for us to be able to fulfil our contractual obligations to you under the purchase agreement. We will retain your data for as long as necessary for this purpose. We may also process your contact details to keep you informed, via e-mail or other messenger services, of our special events or promotions. The legal basis is our legitimate interest in being able to market our products to our existing customers. We may use your contact details for direct marketing purposes for up to 12 months after your latest purchase subject to your ongoing right to opt-out. You are entitled to reject our marketing messages, that is, to opt out, at any time by clicking on the unsubscribe link included in each message or by contacting customer service at bali_office@laboutik.com.
- Credit card details: If you make a purchase online and choose to pay by credit card, you will provide your credit card information on our website to finalise your purchase. Your credit card details will be protected using Global Sign Encryption. The legal basis is that the processing is necessary in order for us to be able to fulfil our contractual obligations to you under the purchase agreement. We will retain your data for as long as necessary for this purpose.
- Previous purchases and returns: If you have signed up for an account we will store information regarding (i) your online purchases and returns, and (ii) your purchases and returns in physical stores, if you have provided your email address to our personnel. Such information encompasses product, size, price and date of purchase. We will also store information regarding your recently viewed items. This will allow you to keep track of your purchases and returns, and recently viewed items, by logging into your personal account. The legal basis is our legitimate interest to provide you with the service of a personal account as requested by you when you signed up for the account. You may choose to deregister your account at any time. We will also save information on your contact details and previous purchases and returns during 36 months after the purchase to be able to administer returns and/or complaints. The legal basis is our legitimate interest to provide our customers with speedy and efficient service after the purchase.
- Social Security number: If you chose to apply for credit, allowing you to make your payment by invoice, you may be required to provide your social security number on our website. Your social security number will be directly transferred and available only to our payment service provider, which will process your social security number to be able to obtain a credit report and to facilitate your payment. The legal basis is that the processing is necessary for us to ensure accurate identification of our customers for invoice purposes and to fulfil our contractual obligations to you under the purchase agreement. It is our policy to retain your social security number only as long as reasonably necessary for this purpose.
3.2.2 DATA COLLECTED WHEN YOU SHOP IN OUR PHYSICAL STORES
If you make a purchase in one of our physical stores and request a digital receipt, we may process your email address in order to be able to send the digital receipt to you. We will only collect your email address and send you a digital receipt if this has been requested or accepted by you. This processing is based on our legitimate interest of being able to provide our customers with a digital receipt on a voluntary basis.
- Allowing you to keep track of your purchases and returns by logging into your account. The legal basis is that the processing is necessary in order for us to be able to fulfil our contractual obligations to you under the Membership Policy.
- For the purpose of sending out invitations to special events/promotions, personalised services in store and profiled marketing offers through email, SMS, Whatsapp and other social media. The legal basis is that the processing is necessary in order for us to be able to fulfil our contractual obligations to you under the Membership Policy.
Credit card details: If you make a purchase online and choose to pay by credit card, you will provide your credit card information on the website for the purpose of making payment for the purchase. The legal basis is that the processing is necessary in order for us to be able to fulfil our contractual obligations to you under the purchase agreement. As a member you may, but need not, also choose to have our system save your credit card details for future purchases, for the purpose of speeding up the checkout the next time you shop. The legal basis for this processing is your consent. We will retain your data for as long as necessary for this purpose.
Social Security number: If you chose to request credit, allowing you to make your payment by invoice, you may be required to provide your social security number on our website. Your social security number will be directly transferred and available only to our payment service provider, which will process your social security number to be able to obtain a credit report and to facilitate your payment. The legal basis is that the processing is necessary for us to ensure accurate identification of our customers for invoice purposes and to fulfil our contractual obligations to you under the purchase agreement. It is our policy to retain your social security number only as long as necessary for this purpose.
We will share your information with other companies in our Group, who may use it for their own business purposes, as set out in their privacy policy. These purposes may include financial reporting and analysis, strategic planning, the development of customer segmentation and metrics to provide a consistent view of our customer base, research and analytics, to help us source the right products in future and make better product recommendations, more effective targeting of our marketing campaigns, the creation of inspiring content and editorial features, the development of new products and collaboration opportunities with designer brands. It will also be used to provide more tailored marketing by phone, email, SMS or any other means (electronic or otherwise) and you expressly agree to such use.
From time to time, we may engage third party business partners to manage and deliver customer relationship management (CRM); some of our Services; email marketing campaigns; online advertising; customer analytics; events; booking of appointments; fulfilment of orders; delivery; returns; refunds; IT services; etc. In providing the services, your personal information will, where applicable, be used by the service provider on our behalf.
We will check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your personal information. We will have written contracts with them which provide assurances regarding the protections that they will give to your personal information and their compliance with our data security standards and international transfer restrictions.
We use social media platforms and third party advertisers such as Facebook, Instagram, and Google to facilitate targeted marketing communications (such as sponsored ads and search) for our customers. Where you have opted into receiving marketing communications from us, we may share your email address and name to tailor our messages to you.
5. SAFEGUARDING YOUR PERSONAL INFORMATION
We will take reasonable care to maintain appropriate safeguards to ensure the security, integrity and privacy of the information you have provided to us. We have put in place technology and security policies which are designed to protect the personal information we hold about you. We also follow the security procedures that applicable privacy laws require. These cover storing, using and releasing any information you have provided and, as well as measures designed to prevent unauthorised access or use. When you place an order or access your account information, we use a Secure Socket Layer (SSL) encryption which encrypts your information before it is sent to us to protect it from unauthorised use.
6. YOUR DATA SUBJECT RIGHTS
We have summarised your data subject rights to request access, portability, rectification, erasure of your personal data, to restrict the processing of your personal data, to object to processing, and your right to lodge a complaint with the supervisory authority.
If you want to exercise your rights, please send us an email at bali_office@laboutik.com. Please note however that if you want to lodge a complaint with the supervisory authority, you need to contact the authority directly.
If you have signed up for a membership with LABOUTIK you will also be able to access, rectify and erase some of your data by logging in to your private account.
Notwithstanding anything to the contrary herein, LABOUTIK reserves the right to keep and process your personal data in accordance with this policy to the extent necessary to perform our contractual obligations to you, and to the extent we are required to process your data by law or in order to defend ourselves in a dispute, to prevent fraud or abuse, or to enforce our Terms and Conditions.
- Right of access
You have the right to obtain confirmation of whether personal data concerning yourself are being processed and, where that is the case, access to the personal data and information regarding, inter alia, the purpose of processing, the categories of personal data concerned, the categories of recipients to whom your data have been or will be disclosed, and the envisaged period of time for which personal data will be stored (or the criteria for determining this).
- Right of rectification
You have the right to request rectification of inaccurate personal data concerning yourself, and to complete incomplete data.
- Right of erasure
Under certain circumstances you are entitled to request that we erase your personal data or restrict our processing of your data, namely in the following events.
When it is no longer necessary for us to process your data taking into consideration the purposes for which it was collected.
When our processing is based on your consent and you have withdrawn your consent, and there is no other legal basis for the processing of your data.
When our processing of your data is based on a legitimate interest legal basis and you object to such processing, there is no overriding legitimate ground for our processing.
When you have objected to our processing of your data for direct marketing purposes.
When your personal data has been unlawfully processed.
When the personal data must be erased for compliance with a legal obligation that applies to us.
When the personal data collected concerns a child (under 13 years of age) in relation to the offer of information society services.
- Right to objection - direct marketing and profiling
You have the right to object at any time to our processing of your personal data for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. If you object to our processing of your personal data for direct marketing purposes, including profiling, we will cease such processing of your data.
- Data portability
If our processing is based on your consent or if the processing is necessary for our performance of a contract with you, you have the right to request that the data which you have provided to us shall be provided to you in a structured, commonly used and machine-readable format and you also have the right to transmit such data to another controller.
7. HOW DO I UNSUBSCRIBE FROM LABOUTIK NEWSLETTERS AND EMAILS?
We offer you the chance to receive news and fashion updates which, depending on your preferences, we will discuss with you by phone or live chat or send to you via email, SMS and/or direct mail. These include alerts for new products, features, enhancements, special offers, upgrade opportunities, contests, events of interest, and one-off marketing promotions. You can opt-out of receiving these updates, if you wish.
We, or our third party business partners, may also ask you if you want to receive marketing if you enter a promotion or attend an event thrown or sponsored by us. Other companies in our Group may also pass your personal information to us for marketing use.
Marketing communications you subscribe to will only be sent by our Group.
You have the right to ask us not to use your personal information for marketing. At all times, we will offer you the opportunity to unsubscribe from any service or update to which you have subscribed, if you change your mind. Whenever you receive direct marketing from us, we will tell you how to unsubscribe. Alternatively you can change your marketing preferences by signing into My Account. To opt out of direct mail, please contact our Customer Care team on +62 811 2814 114 or by email at bali_office@laboutik.com
If you tell us that you do not want to receive direct marketing, we will still contact you in order to provide you with products and services you request and for administration purposes.
8. HOW LONG DO WE KEEP YOUR DATA?
We will retain your personal information for as long as necessary in relation to the purposes for which the data was collected or otherwise processed. Under section 3 above, we have specified the retention time, or the criteria for determining the retention time, for our processing of data in relation to the different purposes the data is being processed. In addition to the retention time stated under section 3 above, please also note the following.
Members: If you have not made any purchases, logged in to your account or used any of our services during a consecutive period of 36 months, we will terminate your membership and consequently we will not use your data for any membership services or marketing purposes thereafter. In such cases we will delete your data unless we need to keep it for other purposes that are legally justifiable.
We will retain your personal information as necessary to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. Statutory obligations to retain data further remain unaffected.
9. IS IT MANDATORY TO PROVIDE PERSONAL DATA?
When you purchase our products online, or sign up for a membership with LABOUTIK, we will inform you which data is mandatory by marking certain fields with a symbol (*). The provision of mandatory data is necessary for LABOUTIK to be able to fulfil our contractual obligation to you, for example processing your order, or fulfilling the membership services requested by you.
When you purchase our products in our physical stores, you do not have to provide any personal data. Please note however that if you choose to receive a digital receipt, it is mandatory that you provide your email address or otherwise we will not be able to send you the digital receipt.
10. CHILDREN'S PRIVACY AND LEGAL PURCHASE AGE
We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data through the Sites and Services without their permission. No information should be submitted to LABOUTIK by any person under the age of 16 without the consent of a parent or guardian. Unless otherwise disclosed during collection, LABOUTIK does not knowingly collect any personally identifiable information about persons under the age of 16, provide any personally identifying information about such persons under the age of 16, regardless of its source, to third parties, and does not knowingly use such information for any marketing or promotional purposes.
We and our business partners collect information about your use of our online services using cookies. Cookies are very small files that are sent by us to your computer or other device which we can access when you visit our site in future. Cookies help us remember who you are and other information about your visits. They can help display the information on a website in a way that matches your interests. Most major websites use cookies.
12. MODIFICATIONS
LABOUTIK reserves the right to occasionally make changes to our privacy policy or practices. We will post the updated policy on our website, and thus we encourage you to review this page from time to time.
Last date for modification: November, 2022