Privacy Policy
Effective Date: July 9th 2020
Funfar Australia (“us”, “we”, or “our”) operates the website https://funfarstore.com (in the future referred to as the “Service”).
This page informs you of our policies regarding collecting, using, and disclosing personal data when you use our Service and the choices you have associated with that data.
Information Collection and Use
We collect various types of information to provide and improve our Service.
Types of Information Collected
- Personal Data: While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:
- Name
- Email address
- Phone number
- Mailing address
- Social media applications are used to log in
Purpose of Data Collection
Funfar Australia collects user data for the following purposes:
- Processing orders
- Providing customer support
- Sending marketing communications
Data Retention Period
Funfar Australia retains user data for the longest 4 years for further marketing and business communication purposes only, and information will be deleted after four years.
Data Sharing
Funfar Australia may share user data with third parties, such as payment processors, shipping companies, and marketing partners. Data is shared under standard security website and hosting controls to ensure protection.
User Rights
Users can access, rectify, or delete their data. If you have any inquiries regarding your data, please contact us at reception@funfarstore.com.
Security Measures
Funfar Australia implements security measures to protect user data from unauthorized access, disclosure, alteration, or destruction. These measures include
SSL/TLS Encryption: This is the first line of defence in protecting the data transferred between the user’s browser and your website. Encrypt all data. Make sure your SSL certificate is always up to date.
Secure Payment Gateways: Process transactions using secure, reputable payment gateways. These gateways ensure that sensitive payment information, like credit card numbers, is encrypted and securely processed.
Web Application Firewall (WAF): A WAF can help protect your web applications by filtering and monitoring HTTP traffic between them and the Internet. It helps protect against attacks such as SQL injection, cross-site scripting (XSS), and other vulnerabilities.
Data Encryption at Rest: Encrypt the data stored on your servers to ensure that sensitive data, such as customer information and transaction history, is encrypted not only in transit but also at rest.
Regular Security Audits and Penetration Testing: Conduct regular security and penetration tests to identify and mitigate vulnerabilities. This includes testing both the website and its underlying infrastructure.
Multi-Factor Authentication (MFA): Implement MFA to access your website’s administrative features. This adds a layer of security by requiring more than one authentication method.
DDoS Protection: Deploy measures to protect against Distributed Denial of Service (DDoS) attacks, which can overwhelm your site with traffic and take it offline.
Content Security Policy (CSP): Implement CSP to prevent XSS attacks by specifying which dynamic resources are allowed to load, thereby helping to avoid malicious script execution.
Access Controls: Ensure strict access controls are in place, especially for administrative functions. Limit access based on roles and ensure employees have access only to the data and systems necessary for their job functions.
Secure Coding Practices: Ensure that your website is developed using secure coding practices to prevent vulnerabilities that can be exploited by attackers. Regular updates and patch management are crucial.
HTTPS Everywhere: Use HTTPS not just for transactions or login pages but across the entire site, securing the browsing experience on all parts of your website.
Cookies and Tracking Technologies
Our website may use cookies and other tracking technologies to enhance your experience. You can manage your preferences for cookies and tracking technologies. For more information.
Legal Compliance
This privacy policy complies with relevant privacy laws and regulations in Australia, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us at reception@funfar.com.
