Consumer Data Policy

Privacy Policy:

Able is dedicated to keeping your details private. Any information we collect in relation to you is kept strictly secured. We do not pass on, sell or swap any of your personal details with anyone. We use this information to identify your orders, provide you with our monthly newsletter (if applicable) and to personalise your shopping experience with us. Able uses cookies to allow you to login to your account, maintain a shopping cart and to purchase items in your shopping cart. Cookies sent to your computer from Able only last while you are browsing our website. We do not store persistent cookies on your computer. Cookies also allow us to give you a more personalised shopping experience by displaying products that interest you throughout our product pages, thus providing you with a more friendly, interesting and enjoyable shopping experience.

Whenever you use our website or any other website, the computer on which the web pages are stored (the Web server) needs to know the network address of your computer so that it can send the requested web pages to your Internet browser. The unique network address of your computer is called its "IP address," and is sent automatically each time you access any Internet site. From a computer's IP address, it is possible to determine the general geographic location of that computer but otherwise, it is anonymous.

We do not keep a record of the IP addresses from which users access our site except where you have specifically provided us with information about yourself, in which case we also record your IP address for security purposes. An example of this would be when proceeding to a checkout to finalise an order you may wish to make. After completing the form provided, your IP address will be stored along with a transaction number that allows us to track your order.=

A Scan of your ID will be required if you have prepaid online via Credit Card or Paypal for a pickup order. This will occur upon your collection of the order instore. This is done to allow Able to prevent fraudulent chargebacks. We apologise for this inconvenience and appreciate your understanding in this matter. When scanning your ID we collect the front and back of the license. The purpose of collecting this ID scan is the prevent fraudulent transactions when you have prepaid the order online. This information is collected with a standard consumer scanner which only prints out a physical copy of the scan. This information is held as a physical scan and is stored in a secure building with 24-hour surveillance and alarms. This information is held for the same length as the legal requirement for tax invoices to be held. After this period this information will be shredded.

Security capabilities and policy for transmission of payment card details

Security Policy

All card transactions are processed through Windwave. 

Windcave is a one-stop provider of ecommerce, retail and unattended payment solutions for customers around the world. Certified with all major acquirers and card schemes, they provide PCI-compliant payment solutions, ensuring your payments are safe, seamless, and secure.

 

How Windcave Collects Information

To enable Windcave to acquire information which may include a cardholder's name, credit card number (with the expiry date) and billing address. That information is collected when a card and its information is provided to a Windcave payment solution.

 

How Windcave Uses and Discloses Information

Windcave uses the information it collects to obtain authorization for Transactions from the payment card’s issuing bank (the bank that issued your credit or debit card) and from Windcave's own or the Merchant's bank (the “acquirer” or “Acquiring Bank”). Some details from the Transaction (such as name, email and delivery address) may be made available to the Merchant or Acquiring Bank through Payline - Windcave’s web-based transactions management system. Payline allows Merchants to track Transactions and process refunds. Payment card numbers are encrypted and stored by Windcave securely, and are not provided to the Merchant. Please note that your personal data may be shared with legal authorities if required by law. In addition, and separate from its performance of the services set forth in this Privacy Policy, Windcave may aggregate and disclose the aggregated data that is not personally identifiable to its partners or third parties. This aggregated, non-identifiable data may be used for statistical analysis or similar purposes.

 

Data Security

Windcave is committed to data security. Windcave uses a variety of technologies and procedures to help protect personal information from unauthorized access, use or disclosure. Windcave stores the data in computer servers with limited access that are located in controlled facilities secured by advanced surveillance and security technology. When Windcave transmits sensitive information (such as a payment card number), Windcave protects it through the use of encryption, such as the Secure Socket Layer (“SSL”) protocol. Credit card details stored onsite are encrypted using 168bit 3DES encryption. Windcave is a level 1 certified PCI-DSS compliant provider.

 

Storage of Information

Windcave may transfer your information to countries outside of your country of residence, and those countries may have information protection rules that are different from those of your country of residence. Generally, Windcave stores and processes information in countries where we operate offices, such as New Zealand, Australia, the United States, and the United Kingdom. Windcave takes measures to ensure that information transfers comply with applicable data protection laws and that your information remains protected to the standards described in this Privacy Policy.

 

Your Rights With Respect to Your Personal Data

You, as the customer of a Merchant using Windcave, have certain rights with respect to your personal data.

 

You have the right to revoke your agreement to the collection, processing, and use of your personal data at any time. You have the right to request access and know what information is held about you. You have the right to verify, update, or correct your information, and to have obsolete information removed. You have the right to erasure, or otherwise to have your personal data deleted or removed upon written request to Windcave.

 

How long will we retain your information?

We will not retain your Personal Information for longer than permitted by applicable law and regulation, and in no event longer than 7 years. If you have questions about our data retention policy, or about the deletion of your data, please contact us at [email protected].

 

Updating this Policy

Able reserves the right to change this Privacy Policy at all times. It is your responsibility to periodically verify the applicable privacy statement and to comply with its most recent version. This Privacy Policy statement was last modified in April 2020.