Privacy policy

This page describes how personal information is handled when you use this website. It is written against the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and against the EU and UK GDPR for visitors in those regions.

Who is responsible

Inanna Rose operates from Ubud, Bali, Indonesia. The legal entity responsible for your information — and its registered address — is still being confirmed. Until that is settled, enquiries reach Venus Rose directly at inannarose@protonmail.com.

What is collected

When you use the contact form

Your first and last name, email address, phone number if you provide one, and the content of your message. It is used only to answer you.

When you browse

The site itself sets no analytics or advertising cookies. The shopping cart stores your selections in your own browser (local storage) and sends them nowhere. Our hosting provider records standard server logs, including IP address and user agent, for security and reliability. See the cookies policy.

When you buy

No purchases are processed through this site yet. When they are, this section must describe the order, payment, and delivery information collected, and name the payment processor. Card details will be handled by the payment processor and are not stored by us.

Why it is used

• To respond to your enquiry and to any conversation that follows from it.
• To fulfil and support orders once commerce is live.
• To keep the site secure and working.
• To meet legal obligations, including tax and consumer-law record keeping.

Where the GDPR applies, the bases relied on are your consent (enquiries you choose to send), performance of a contract (orders), legal obligation (records), and legitimate interests (security). Personal information is never sold.

Who it is shared with

Only with service providers that make the site work, and only as far as they need it. Today that means the site host and, once configured, the email delivery provider that carries contact form submissions. The full processor list, and their locations, will be named here before launch.

Information sent overseas

Because the business operates from Indonesia and its providers operate globally, your information will be handled outside Australia. Australian Privacy Principle 8 requires reasonable steps to ensure overseas recipients handle it consistently with the Australian Privacy Principles; where the GDPR applies, transfers rely on the providers' standard contractual clauses. Recipient countries to be listed once providers are fixed.

How long it is kept

Enquiries are kept while the conversation is live and for a reasonable period afterwards. Specific retention periods are still to be set — see the open questions below.

Your rights

You can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct anything that is wrong or out of date;
• delete it, where we are not required to keep it;
• stop using it for a particular purpose, or withdraw a consent you gave.

If you are in the EU or UK you also have rights to restrict processing, to object, and to data portability. Ask by emailing inannarose@protonmail.com.

Complaints

Tell us first and we will work it through with you. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to your local data protection authority in the EU or UK.

Children

This site is not directed at children, and these products are not intended for anyone under 18.

Changes

When this page changes the date at the top changes with it. Material changes will be flagged on the site.