Blue Sky Drinks Co Privacy Policy

About this Privacy Policy

The Privacy Act 1988 requires entities bound by the Australian Privacy Principles to have a privacy policy.

This Privacy Policy outlines the personal information handling practices of Blue Sky Drinks International Pty Ltd (ABN 16 169 376 167), trading as Blue Sky Drinks Co, and its related bodies corporate (“Blue Sky Drinks Co”, “we”, “us” or “our”).

This policy explains how Blue Sky Drinks Co collects, holds, uses and discloses personal information about an identified individual or an individual who is reasonably identifiable.

Our obligations when collecting and handling personal information are governed by the Privacy Act 1988 and the Australian Privacy Principles.

We may update this Privacy Policy from time to time when our information handling practices change. Updates may be published on our website and communicated through our email lists.

Overview

We collect, hold, use and disclose personal information that is reasonably necessary for our business functions and activities.

These activities may include:

• development, manufacture, sale and distribution of our products;
• manufacture of products for third parties;
• developing marketing plans and carrying out marketing activities;
• event sponsorship and management;
• carrying out our legitimate business purposes;
• employment and entering into contracts with individuals;
• communicating with customers, suppliers, partners and the public; and
• complying with Commonwealth, State and Territory regulatory requirements.

Collection of Your Personal Information

We aim to collect only the personal information that we reasonably need for the particular business function or activity we are carrying out.

The main way we collect personal information is when you provide it directly to us.

This may include when you:

• provide information by phone, email or online;
• place an order for our products;
• create an online customer account;
• communicate with us through our website or social media channels;
• access one of our websites;
• subscribe to our email marketing;
• participate in promotions, competitions, events, surveys or focus groups;
• become a member of a club or loyalty program promoted by us; or
• interact with a third party conducting promotional or marketing activities on our behalf.

We may also collect personal information when we investigate or review a complaint, or where you participate in meetings, consultations, product development groups or similar activities.

We may collect personal information about you from other sources and analyse that information alongside information we already hold in order to better understand your likely preferences and interests.

Sensitive Information

In limited circumstances, we may collect sensitive information.

This may occur for purposes such as:

• determining public or product liability matters;
• investigating or responding to a complaint; or
• where you access one of our manufacturing facilities or operational sites.

Sensitive information may include information relating to:

• health or medical history;
• racial or ethnic origin;
• political opinions;
• association memberships;
• religious beliefs;
• sexual orientation;
• criminal history;
• genetic information; or
• biometric information.

We will only collect, use or disclose sensitive information where permitted by law and for the purpose for which it was collected, unless another permitted use applies.

Kinds of Personal Information We Collect

The personal information we collect and hold may include:

• your name;
• residential, billing or delivery address;
• email address;
• telephone number;
• date of birth;
• age;
• gender;
• information about what, how and when you purchase from us;
• information about products you have expressed an interest in;
• your stated or likely preferences;
• information about promotions or products that may be relevant to you;
• information about gift recipients where required to fulfil a gift purchase;
• information relating to clubs, loyalty programs or membership programs;
• customer reference numbers or loyalty numbers;
• rewards and redemption details;
• information about family members or other individuals linked to your account or membership, where applicable;
• order history;
• website browsing and engagement information; and
• payment or transaction information where required to process an order.

Information about gift recipients is used for fulfilment purposes and is not used for marketing purposes unless that person separately provides consent.

Collecting Information Through Our Website

Blue Sky Drinks Co and its related brands may operate websites through which we collect personal information and website usage information.

Main website:
https://www.blueskydrinks.com.au/

Our online store is operated using Shopify.

Other websites operated by Blue Sky Drinks Co or our portfolio brands may also be covered by this Privacy Policy where stated.

Shopify and Online Purchases

We use Shopify to operate our online store.

When you browse our website, create an account, place an order or make a purchase, we may collect personal information necessary to process and manage your transaction.

This may include:

• your name;
• email address;
• telephone number;
• billing address;
• shipping address;
• order details;
• purchase history;
• account details; and
• information required to process your payment.

Shopify and payment service providers used through our online store may process personal information in order to provide website, checkout, payment and e-commerce services.

These providers may handle information in accordance with their own privacy policies, terms and legal obligations.

Where payment details are processed through Shopify or another payment provider, Blue Sky Drinks Co may not directly store complete payment card information.

Web Analytics

We use Google Analytics and may use other analytics tools to understand how visitors interact with our websites.

We may use this information to:

• improve our websites and digital experiences;
• understand how visitors use our websites;
• measure website performance;
• analyse customer journeys;
• measure marketing effectiveness;
• improve advertising activities; and
• improve the customer experience.

Information collected through analytics tools may include:

• your device’s IP address;
• device screen size;
• device type;
• operating system;
• browser information;
• approximate geographic location, such as city;
• referring website or domain;
• outgoing links;
• search terms;
• pages viewed;
• links clicked;
• website interactions; and
• the date and time pages were accessed.

Google may process this information in accordance with its own privacy policies and data handling practices.

Cookies and Similar Technologies

Our websites use cookies and similar technologies to support website functionality, understand website usage and improve the customer experience.

Cookies may be used for purposes including:

• remembering your preferences;
• maintaining your shopping cart;
• enabling website functionality;
• processing and managing online orders;
• understanding website performance;
• measuring marketing effectiveness;
• personalising website experiences;
• supporting analytics;
• supporting advertising activities; and
• understanding how customers interact with our website and communications.

Cookies and similar technologies may be used by Shopify, Google Analytics, Klaviyo and other third-party services that support our websites and business operations.

Most browsers allow you to control or disable cookies through browser settings.

If you disable certain cookies, some parts of our website may not function as intended.

The technologies and service providers we use may change from time to time as our business requirements change.

Embedded Videos

Our websites may contain embedded video content from third-party providers such as YouTube.

Where available, embedded videos may use YouTube’s privacy-enhanced functionality.

When you interact with embedded video content, YouTube, Google or another third-party provider may collect and process information in accordance with their own privacy policies.

We recommend reviewing the privacy policies of those providers if you would like more information about how they handle your information.

Email Marketing, Registrations and Feedback

We may collect personal information that you provide when:

• subscribing to our mailing lists;
• entering competitions or promotions;
• registering for events;
• making a purchase;
• submitting an enquiry;
• participating in promotional activities; or
• providing feedback about our websites, products, brands or services.

Klaviyo

We use Klaviyo to manage email marketing, customer communications and certain marketing activities.

Klaviyo may help us understand how customers interact with our marketing communications.

This may include information such as:

• whether an email was delivered;
• whether an email was opened;
• links clicked;
• purchases or website activity associated with a communication;
• device information;
• browser information; and
• other engagement information.

We may use this information to:

• send marketing communications where permitted;
• personalise communications;
• understand customer interests and preferences;
• segment audiences;
• measure campaign performance; and
• improve our marketing.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our communications.

Customer Accounts and Order Information

Where customer accounts are available through our Shopify website, we may collect and store personal information necessary to create and manage those accounts.

This may include:

• your name;
• email address;
• telephone number;
• billing address;
• shipping address;
• order information;
• purchase history; and
• account preferences.

We may use this information to:

• process and fulfil orders;
• communicate with you about purchases;
• manage returns or customer service enquiries;
• maintain customer accounts;
• understand customer preferences; and
• provide a more personalised customer experience.

Social Networking Services

Blue Sky Drinks Co and its portfolio brands may use social networking services such as:

• Facebook;
• Instagram; and
• other social media platforms.

We use these platforms to communicate with customers and the public about:

• our business;
• products;
• brands;
• events;
• promotions; and
• other activities.

When you communicate with us through these platforms, we may collect personal information that you choose to provide.

We generally use that information to communicate with you and respond to enquiries, feedback or other interactions.

Social networking platforms may also collect and process your information for their own purposes and in accordance with their own privacy policies.

Why We Collect, Hold and Use Personal Information

We collect, hold and use personal information primarily to:

• sell and promote our products and services;
• process and fulfil customer orders;
• provide customer service;
• manage customer accounts;
• communicate with customers;
• provide transactional communications;
• provide marketing communications where permitted;
• improve our products, brands and services;
• improve our websites and digital experiences;
• understand customer preferences;
• develop marketing strategies and activities;
• deliver promotions, offers and campaigns;
• measure marketing performance;
• analyse website and customer activity; and
• investigate complaints and enquiries.

For example, we may use personal information to better understand your likely preferences so that we can communicate products, services, promotions or offers that may be relevant to you.

Disclosure of Personal Information

We may disclose personal information where reasonably necessary for our business operations or where permitted or required by law.

Marketing of Our Products and Services

We may disclose personal information where this is incidental to the sale and promotion of our goods and services.

For example, we may disclose personal information:

• within Blue Sky Drinks Co and its related bodies corporate;
• to service providers assisting with our day-to-day operations;
• to marketing and advertising providers;
• to technology providers;
• to e-commerce providers;
• to logistics and fulfilment providers; or
• in connection with the purchase, sale, restructuring or promotion of businesses or brands.

You may opt out of receiving direct marketing communications from us at any time.

Our direct marketing communications will generally include instructions explaining how you can unsubscribe or manage your communication preferences.

Disclosure to Service Providers

Blue Sky Drinks Co uses third-party service providers to support our business operations.

These providers may include:

• Shopify for our e-commerce website and online store;
• Klaviyo for email marketing and customer communications;
• Google Analytics for website analytics and performance measurement;
• payment processors;
• logistics and delivery providers;
• fulfilment providers;
• advertising platforms;
• IT providers;
• data storage providers;
• professional advisers; and
• other technology or service providers necessary to operate our business.

These providers may process personal information on our behalf or in connection with the services they provide.

Where appropriate, we take reasonable steps to ensure service providers use or disclose personal information only for the purposes for which the information has been provided.

We may also include privacy and information security requirements in our contracts or agreements with service providers where appropriate.

Disclosure of Sensitive Information

We may disclose sensitive information:

• where required by law;
• where permitted by law;
• where you have provided consent; or
• where the disclosure is reasonably expected in connection with the purpose for which the information was collected.

We may also anonymise and aggregate personal information.

Aggregated or anonymised data may be used to understand:

• customer preferences;
• shopping behaviour;
• purchasing patterns;
• product trends; and
• marketing performance.

Where information has been appropriately anonymised so that an individual cannot reasonably be identified, we may share that information with trusted business partners.

We generally only provide personal information relating to a complaint to the media where the person concerned has agreed.

Disclosure of Personal Information Overseas

We do not generally disclose personal information overseas except where this occurs through the use of third-party technology and service providers.

Some providers we use, including Shopify, Klaviyo and Google, may process or store personal information using systems or servers located outside Australia.

Social networking services such as Facebook and Instagram may also process or store personal information overseas.

As a result, personal information may be disclosed to or processed in overseas jurisdictions.

Where we use overseas service providers, we take reasonable steps to ensure personal information is handled appropriately and in accordance with applicable Australian privacy requirements.

These providers may also handle information in accordance with their own privacy policies and terms.

Quality of Personal Information

We take reasonable steps to ensure that the personal information we collect, hold, use and disclose is:

• accurate;
• up to date;
• complete;
• relevant; and
• appropriate for the purpose for which it is being used.

We may do this by:

• recording information in a consistent format;
• confirming information collected from third parties or public sources where necessary;
• updating records when new or corrected information becomes available;
• reviewing and auditing contact lists; and
• reviewing information before it is used or disclosed.

Storage and Security of Personal Information

We take reasonable steps to protect personal information from:

• misuse;
• interference;
• loss;
• unauthorised access;
• unauthorised modification; and
• unauthorised disclosure.

Our security practices may include:

• regularly assessing privacy and security risks;
• implementing technical and organisational safeguards;
• restricting staff access where access is not required;
• maintaining audit trails or records of changes made to electronic information where appropriate;
• monitoring access to systems;
• reviewing privacy and security procedures; and
• conducting internal or external audits where appropriate.

We securely destroy or de-identify personal information when we no longer require it, subject to any legal or regulatory requirements requiring us to retain it.

Accessing and Correcting Your Personal Information

Under the Privacy Act 1988 and Australian Privacy Principles 12 and 13, you have the right to request access to personal information we hold about you.

You may also ask us to correct personal information that you believe is:

• inaccurate;
• out of date;
• incomplete;
• irrelevant; or
• misleading.

We may ask you to verify your identity before providing access to or correcting your personal information.

If we refuse a request for access or correction, we will provide written reasons where required by law.

Where personal information is corrected and we have previously disclosed the incorrect information to another organisation, you may ask us to notify that organisation of the correction where required by law.

If we refuse to correct personal information, you may ask us to associate a statement with that information indicating that you believe it is incorrect and explaining why.

Contact Us

If you would like to:

• request access to personal information;
• request a correction;
• ask a privacy-related question; or
• make a privacy complaint,

please contact:

Privacy Officer
Blue Sky Drinks International Pty Ltd
Trading as Blue Sky Drinks Co
ABN 16 169 376 167

Address:
9 Bourke Rd
Alexandria NSW 2015
Australia

Email:
david@blueskydrinks.com.au

Phone:
0414 199 284

Website:
https://www.blueskydrinks.com.au/

How to Make a Complaint

If you wish to complain about how Blue Sky Drinks Co has handled your personal information, please contact us in writing using the contact details above.

We may ask you to:

• provide your complaint in writing;
• provide further information about the circumstances; and
• provide any supporting information that may assist us in investigating your complaint.

We may discuss your complaint with:

• relevant employees;
• service providers; or
• other parties where reasonably necessary and permitted by law.

Our Privacy Officer, or another nominated representative, will investigate the matter and attempt to resolve the complaint in a timely manner.

We will communicate the outcome of the investigation to you.

If your complaint is not resolved to your satisfaction, you may have the right to refer the matter to the Office of the Australian Information Commissioner (OAIC) or another relevant privacy regulator.