Lorna Jane Privacy Policy
We regularly update our privacy policy, with the latest update in April 2025, and any future changes will be posted on our website, so we recommend reviewing it from time to time.
1. OUR COMMITMENT TO PRIVACY
Your trust matters to us, and we’re committed to protecting your personal information. This Privacy Policy explains how we collect, use, and share your details while ensuring you stay in control and can make choices about your personal information.
This policy applies to Lorna Jane Pty Ltd, our affiliates, and subsidiaries (‘we’, ‘us’, ‘our’ and ‘Lorna Jane’). It covers personal information collected through our websites (www.lornajane.com.au, www.lornajane.com, www.lornajane.sg, and www.lornajane.nz) our retail stores, and our mobile apps. It also outlines your choices regarding how we use your information and how you can update it.
Lorna Jane is a global brand with businesses in Australia, New Zealand, China, Singapore, and the USA. We therefore manage your personal information in line with the Privacy Act 1988 (Cth), the Privacy Act 2020 in New Zealand, the Personal Information Protection Law (PIPL) in China, the Personal Data Protection Act 2012 (PDPA) in Singapore, and the California Consumer Privacy Act of 2018 (CCPA) in the USA where applicable. We follow best practices to keep your details secure and comply with legal requirements in each jurisdiction.
This policy applies to individuals in these countries whose personal information we collect through our websites, apps, in-store purchases, Wi-Fi use, and marketing activities such as promotions and communications. Our eCommerce operations fulfil online orders worldwide from our warehouses in New Zealand and Brisbane, Australia.
1.1 Making Informed Privacy Choices
We respect your privacy choices and seek your consent before collecting, using, or handling your personal information. Our goal is not just to meet legal requirements but to go beyond them and set a high standard in how we manage your personal information.
Where possible, you have the option to interact with us anonymously or using a pseudonym, but some details may be required to provide certain products or services.
If you engage with our AI-powered systems, such as chatbots, please avoid sharing any sensitive personal information.
You have control over how your personal information is used. You can:
• opt out of marketing emails by clicking ‘unsubscribe’
• reply ‘STOP’ to text messages and SMS to stop receiving them
• adjust your browser’s cookie settings to manage tracking
• limit interest-based ads through settings on Google, Meta, or your browser
• request access to or correction of your personal information
For details, see the ‘How to Manage Your Personal Information’ section of this policy.
1.2 Children’s Privacy
Lorna Jane’s websites and services are for users 18 years and over, and only adults can purchase products. We do not knowingly collect personal information from children under 16 and obtain parental consent where required by law. If we learn a child under 16 has provided information without consent, we will delete it and, if needed, terminate the account. We aim to protect children's privacy with strict controls and do not knowingly use their information for marketing or profiling. If you believe your child has shared personal information with us, contact privacy@lornajane.com.au
By providing your personal information to Lorna Jane, you accept this privacy policy and any additional notices relevant to specific interactions.
If you have any questions, we are always here to help!
2. PERSONAL INFORMATION HANDLING
2.1 TYPES OF PERSONAL INFORMATION WE COLLECT
Lorna Jane collects personal information to enhance your shopping experience, personalise recommendations, and improve our services. The type of information we collect depends on how you interact with us, whether online, through our mobile apps, or in-store. This information helps us tailor your shopping experience, improve our services, and ensure compliance with legal and security requirements.
The types of personal information we collect are:
Personal details
We collect your name, date of birth (month/year) or age range, gender, and identification details to verify your identity, provide personalised promotions, and offer tailored recommendations. Identification details may also be required for fraud prevention and specific promotions.
Contact details
We collect your email, phone number, shipping and billing addresses, and social media handles to process orders, send order updates, and provide customer support. Your email and phone number may also be used for marketing communications if you have opted in.
Activewear preferences & product interests
We collect details such as your size, fit preferences, fabric choices, performance needs, activity level, and style preferences. This information may be gathered in a number of ways including through fit quizzes, consultation services, product reviews, wish list selections, and interactions with our personalised recommendation tools.
Shopping preferences & purchase history
We track your purchase history, basket activity, wish list items, returns and exchanges. This helps us provide personalised promotions, suggest relevant products, and improve our services based on your shopping habits.
Engagement & feedback
We collect customer reviews, survey responses, interactions with our customer service team (including AI-powered chatbots and recorded calls), and testimonials. Social media engagement, such as comments, messages, and direct interactions with our brand, may also be collected to understand customer sentiment and improve engagement.
Media & surveillance
Photos and videos shared on social media that tag or mention Lorna Jane may be collected for marketing and engagement purposes. CCTV footage may be collected in our warehouse, offices, or pop-up locations for security and fraud prevention.
Financial information
We collect transaction details such as payment amounts, methods, and billing addresses for order processing and fraud prevention. Credit card details are not stored by Lorna Jane; they are securely processed by third-party payment providers. Gift card and store credit usage may also be tracked for fraud prevention and account management.
Human resources personal information
We collect personal information from current, prospective, and former employees, including contact details for medical emergencies and beneficiaries under any insurance policy. This personal information is collected through information you provide directly to us, information received from third-party sources such as background checks, and information collected automatically through system and device usage. The personal information we collect may include your title, name, address, phone number, email address, date of birth, passport number, driver’s licence number, government-issued identification, financial information such as credit checks and bank details for payroll, taxation and superannuation details, CV or application form details, language abilities, and emergency contact information.
Sensitive information
We may collect and process certain sensitive personal information where necessary and in compliance with applicable privacy laws. This may include specific human resources related personal information, such as health and disability details (e.g., medical and maternity leave), next of kin, immigration status and optional demographic details supporting diversity initiatives. Sensitive information can include racial or ethnic origin, political views, religious beliefs, trade union memberships, sexual orientation, criminal records, and health-related personal information (such as genetic or biometric information). While Lorna Jane does not typically collect such information, if you voluntarily provide it (e.g., feedback on how a garment fits due to a medical condition), you consent to its use solely for the intended purpose and as permitted by privacy laws.
Additional information we may collect
Technical information, including your IP address, browser type, operating system, cookies, tracking data, and location data (if permitted by your device), may be collected to improve our website and personalise your experience. We may also combine this with third-party personal information, such as analytics, social media insights, and demographic information, to better understand your preferences.
2.2 HOW WE COLLECT YOUR PERSONAL INFORMATION
Lorna Jane collects personal information to provide a seamless shopping experience, personalise your interactions, and improve our services. Wherever possible, we collect information directly from you, whether through our website, mobile apps, or in-store interactions.
In some cases, we may also collect information from trusted third parties, including web hosting providers, analytics companies, social media platforms, data companies, and advertisers. This may include demographic details, shopping preferences, and interests. If you have consented or it is reasonably expected, we may obtain personal information from authorised representatives, external sources, or public records. To better understand your preferences, we may analyse third-party data alongside our own records. Any information received that is not required for our business purposes will be securely destroyed or de-identified.
We collect personal information:
When you place an order
When you make a purchase, either online or via our mobile app, we collect your billing and shipping address, email, phone number, and payment details. We also track information about what, when, and how you buy from us, including the use of promotional codes.
When you create a user profile
When you create a user profile with Lorna Jane. You may change the privacy settings of your profile through your account portal. Due to the nature of the goods and services we provide, it is only practicable or reasonable for Lorna Jane to transact and correspond with you on a named basis.
When you log in using a third-party authentication service (such as Google, Facebook, or Apple ID)
These platforms may share information with us, including your name, email address, profile picture, and linked contacts. We use this data to simplify login, personalise content, and improve customer engagement. You can review the privacy policies of these platforms to understand how they handle your personal information.
When you pay by credit card
If you choose to pay by credit card, we may conduct a credit check to help prevent fraudulent transactions or excessive chargebacks. Your name and banking details are processed securely by our payment service provider using strict security measures. For in-store purchases, we may collect personal and company details (such as your name and address) when required for tax or legal compliance, including issuing tax receipts.
When you use a gift card
If you purchase or redeem a Lorna Jane gift card, we may collect and track information related to its use, including the card balance, transaction history, redemption details, and associated email or account information. This helps us prevent fraud, ensure compliance with our terms, and provide customer support if needed. Gift card transactions may also be linked to your Lorna Jane account to track purchases and improve your shopping experience.
When you browse our use our mobile apps
We automatically collect certain information through cookies, analytics tools, and third-party automation systems commonly used in retail businesses. These may include customer relationship management (CRM) platforms, marketing automation tools, point-of-sale (POS) systems, and location-based services. The data we collect may include device information (device ID, type, and browser version), location data (geo-location and in-store tracking), IP address, network activity (when using our in-store Wi-Fi), and website usage (search terms, page views, referring sites, and content viewed). We use cookies and tracking technologies to enhance user experience by remembering preferences, providing personalised content and functionality, tracking website usage for analytics, and supporting interest-based advertising. Various platforms, including Pinterest, TikTok, Facebook, Google Analytics, Snapchat, and Rakuten, help track interactions such as product views, add-to-cart actions, purchases, and email sign-ups. Additional tracking includes hashed customer email addresses, order details (excluding payment details), and engagement data from tools like Adalyser, Lexer, Klaviyo, and Nosto. These technologies enable targeted advertising, sales tracking, and improved personalisation. You can manage your cookie preferences in your browser settings, and by using our services, you acknowledge and agree to this personal information collection.
When you engage with interest-based advertising
Lorna Jane does not sell your personal information to third parties for their own marketing purposes in exchange for monetary consideration. However, we engage in interest-based advertising, which allows third parties to place cookies, pixels, and trackers on our site to provide you with personalised ads. We may work with third-party advertising providers, including Google (Display Network, DoubleClick), Yahoo, Adobe (Campaign Manager, Analytics), Microsoft, and Meta (Facebook, Instagram) to deliver tailored ads based on your online activity. These services may collect:
o Browser type and browsing behaviour
o Advertisements viewed and interacted with
o IP address and general location
By using our services, you consent to the collection, use, and sharing of your personal information for interest-based advertising as outlined in this policy.
When you engage with our marketing
If you sign up for marketing emails, SMS updates, or push notifications, we collect your contact details and preferences. We may also collect engagement data, such as whether you open an email, click on a link, or interact with our ads on social media platforms like Facebook, Instagram, and TikTok.
When you leave a product review or provide feedback
If you submit a product review, testimonial, or survey response, we collect the information you provide, including ratings, comments, and any images or videos you upload. Reviews may be displayed publicly on our website and used in marketing materials.
When you use in-store technology
If you visit an Lorna Jane pop-up store or use our in-store beauty analysis technology, we may collect information about your skin concerns, complexion, and hair type to provide personalised product recommendations.
When you interact with customer support
If you contact our customer service team via phone, live chat, social media, or email, we collect your contact details, queries, and any relevant order details. Conversations may be recorded for training and quality assurance.
When you use a chatbot or AI
We may use Artificial Intelligence (AI) technologies to enhance customer service, personalise shopping experiences, improve product recommendations, detect fraud, and streamline our operations. Our AI systems may process purchase history, browsing behaviour, and customer service interactions to provide tailored experiences. When AI is used in decision-making, we ensure transparency, human oversight where necessary, and safeguards to minimise errors and bias. You have the right to request information, opt out of certain AI-driven personalisation, and seek human review where legally required. We also ensure third-party AI providers comply with Australian privacy laws. If you believe an automated decision by Lorna Jane affects your legal rights or access to services, you may request human intervention or an explanation of the AI’s decision-making process. When using AI-powered systems, such as chatbots, avoid sharing sensitive personal information, as responses may not be reviewed by a human. By using these systems, you acknowledge and accept this limitation.
When you engage with us on social media
If you tag Lorna Jane in a post, leave a comment, or participate in a giveaway, we may collect your social media handle, public profile information, and content you share. We also engage in social listening, monitoring public mentions of our brand (e.g., hashtags like #LornaJane). If you tag or mention us, we may collect and use this content for marketing, customer engagement, and brand awareness. If you interact with our ads on social media, these platforms may provide us with analytics and insights, helping us refine our marketing strategies. If you choose to link your social media account to an Lorna Jane account, we may receive additional personal information on your preferences and brand interactions.
When you participate in promotions or competitions
If you enter a competition, giveaway, or beauty quiz, we collect your name, contact details, and responses. Winners may be announced on our platforms as per the promotion’s terms and conditions.
When you apply for a job
If you apply for a role at Lorna Jane, we collect personal details relevant to assessing your application, such as your resume, employment history, qualifications, and references.
When you visit a Lorna Jane store or warehouse
To ensure the safety and security of our staff, customers, and products, we may use CCTV cameras in public areas to monitor real-time activity. CCTV helps protect against theft, fraud, and safety threats. Footage is typically stored for up to 30 days before being automatically overwritten unless it captures an incident. If footage is required for an investigation, it may be retained until the matter is resolved or as required by law. All footage is securely stored and accessed only by authorised personnel. You may request access to CCTV footage featuring yourself, subject to privacy laws and the protection of other individuals’ identities.
2.3 HOW WE USE YOUR PERSONAL INFORMATION
We use your personal information to provide the services you expect, for related purposes that make sense in the context of your interactions with us, and for anything you’ve agreed to. Sometimes, we may also need to use your information to meet legal requirements.
In Australia
We only use your personal information for the reason it was collected, any related purposes you’d reasonably expect, things you’ve consented to, or as required by law.
In New Zealand
We use your personal information for the reason it was collected, any directly related purposes, things you have agreed to, or as required by law.
In China
We process your personal information based on your consent, for purposes necessary to fulfil a contract, comply with legal obligations, or as otherwise permitted under the Personal Information Protection Law (PIPL).
In Singapore
We use your personal information for purposes you have consented to, where necessary for a legitimate business interest, or as required under the Personal Data Protection Act (PDPA).
In California (USA)
We use your personal information for the purpose it was collected, in line with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including providing services, meeting legal requirements, and supporting business operations within permitted uses.
We also use personal information to keep our internal processes running smoothly, manage contracts with customers and partners, and meet tax and legal obligations.
Lorna Jane does not use government-issued identifiers as unique personal identifiers. This includes Medicare or driver’s licence numbers in Australia, IRD numbers, driver’s licence numbers, or passports in New Zealand, resident identity card numbers or passport numbers in China, National Registration Identity Card (NRIC) numbers in Singapore, and Social Security Numbers (SSN) or driver’s licence numbers in California (USA).
Some of the ways we may use your personal information include:
Providing and managing our services
We use your personal information to process purchases, payments, refunds, and deliveries, provide customer support, and manage discounts, and promotions. It also helps us enhance our products and services through market research, trend analysis, and personalised recommendations. Additionally, we use personal information to ensure a seamless website and app experience, including troubleshooting, performance optimisation, and customer engagement.
Marketing and customer engagement
With your consent, we may send personalised updates on products, trends, and promotions via email, SMS, phone, or social media. We use your preferences and interactions to tailor marketing content and allow participation in competitions, sweepstakes, and in-store promotions. We also engage in social listening, monitoring public mentions of our brand to improve engagement and customer relationships. Marketing effectiveness is regularly assessed to ensure relevance and value for our customers.
Security, fraud prevention, and compliance
We use your personal information to verify identity for security purposes, detect and prevent fraud, and meet legal obligations such as product recalls and regulatory reporting. This includes managing disputes, communicating with regulators, and ensuring compliance with Australian and New Zealand privacy laws and industry standards. Fraud and security monitoring help protect our systems, transactions, and customer data from unauthorised access.
Technology, operations, and business
We use cookies, AI-powered chatbots, and analytics to improve website functionality and personalise your experience. We conduct credit assessments, monitor compliance, and use de-identified data for internal reporting and business insights. If Lorna Jane undergoes a merger, acquisition, or restructuring, your personal information may be transferred to ensure continuity of service. Additionally, we use data analytics to identify usage trends, measure marketing effectiveness, and develop new products and services that align with customer preferences.
2.4 DISCLOSURE (SHARING) OF YOUR PERSONAL INFORMATION
We may share your personal information when necessary to conduct our business, provide services, and meet legal obligations. We only disclose information for the purpose it was collected or for directly related purposes, and we take reasonable steps to ensure third-party recipients protect your privacy.
We may share your personal information with:
• employees, agents, and contractors who need access to perform their duties
• related entities, affiliates, and business partners that help deliver our products and services
• professional advisers, including lawyers, accountants, auditors, and insurers.
• payment processors, financial institutions, and fraud prevention providers to process transactions securely
• marketing, advertising, and social media agencies for customer engagement and promotions
• e-commerce platforms, logistics providers, and delivery partners to fulfil orders and manage returns
• technology service providers, including web hosting, IT administrators, and cybersecurity specialists
• customer service providers, such as call centres and AI-powered chatbots
• regulators, law enforcement, and government authorities as required by law
Overseas Disclosure
As part of our business operations, some personal information may be transferred to countries outside Australia and New Zealand. While Lorna Jane's main business operations are in Australia, some of our related entities and service providers may be based or operate in other countries from time to time.
Your personal information may therefore be shared with parties located in:
Australia
New Zealand
United States
China
Singapore
Also, due to the use of cloud-based storage, global data networks, and third-party service providers, we may not always be able to identify the specific country where your personal information is stored or processed. Cloud servers and content delivery networks (CDNs) dynamically store and transfer data across multiple locations to improve system performance and security. Additionally, data backup systems, AI-powered analytics, and cybersecurity monitoring tools may involve international data processing.
Lorna Jane aims to ensure that all reasonable steps are taken to protect your information in compliance with the Privacy Act 1988 (Cth) in Australia, the Privacy Act 2020 in New Zealand, the Personal Data Protection Act 2012 (PDPA) in Singapore, the Personal Information Protection Law (PIPL) in China, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in the United States, and the General Data Protection Regulation (GDPR) in the European Union. If you do not agree to the transfer of your personal information outside of Australia, New Zealand, Singapore, China, the United States, or the European Union, please contact us. However, in some cases, this may limit our ability to provide certain products or services to you.
3. SECURITY OF PERSONAL INFORMATION
At Lorna Jane, we are committed to safeguarding your personal information and ensuring compliance with privacy laws in Australia, New Zealand, China, Singapore, and California (USA). We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
We store personal information in secure paper-based files and electronic systems, either at our premises in Australia and New Zealand or with trusted cloud service providers operating domestically and internationally.
To protect your personal information, we implement:
Access controls
Identity management systems such as strong passwords and user authentication to restrict access.
Physical security
Securing premises with locks and security systems. Network and IT security – Using firewalls, encryption (e.g., SSL for website transactions), and other protective systems to safeguard information during transmission and storage.
Employee training
Ensuring staff are trained in information security policies and responsible for protecting personal information.
Data accuracy and retention
Taking steps to ensure personal information is accurate, complete, and up to date. When no longer needed, we securely destroy or permanently de-identify it.
While we follow industry standards to protect your personal information, no system or internet transmission can be 100% secure. We cannot guarantee absolute security, and you send information over the internet at your own risk. Although we take every precaution, we do not warrant the security of any data transmitted to us online.
If a privacy breach occurs that is likely to result in serious harm, we will notify affected individuals and relevant authorities, including the Office of the Australian Information Commissioner (OAIC), the Office of the Privacy Commissioner (OPC) New Zealand, and equivalent regulators in China, Singapore, and California as required by law.
By using our website or providing personal information, you agree that we may communicate with you electronically regarding security, privacy, and administrative matters. If we become aware of a security breach, we may notify you via email or a notice on our website, as permitted by law. If you are legally entitled to receive a written notice, please contact us to arrange this.
4. LINKS TO OTHER WEBSITES
This privacy policy applies only to how Lorna Jane collects, stores, and uses personal information as part of our business. It does not cover third-party websites or services that may be linked from our site.
While we take your privacy seriously, we do not have control over the privacy practices of external websites and are not responsible for how they handle your personal information. If you click on a link to another website, we recommend reviewing their privacy policy to understand how they collect and use of your personal information.
5. PERSONAL INFORMATION RETENTION
We keep your personal information only for as long as necessary, based on why we collected it. A few factors determine how long we hold onto it, including:
Our ongoing relationship with you
If we’re still providing services, we’ll keep your details to support you
Legal requirements
Some laws may require us to retain (or securely dispose of) certain information
Legal advice
If needed, we may keep information for legal reasons, such as handling disputes or regulatory matters
Once your information is no longer needed, we securely delete or destroy it to protect your privacy.
In summary our current personal information retention periods are:
• marketing information - retained until opt-out;
• transaction records - retained for 7 years (per tax & legal obligations); and
• CCTV footage – 30 days unless required for an ongoing security investigation, regulatory compliance, or legal proceedings.
6. BUSINESS TRANSFERS AND CHANGE IN OWNERSHIP
As our business grows and evolves, there may be changes in ownership or structure, such as a merger, acquisition, sale of assets, or corporate reorganisation. In these cases, your personal information may be transferred to a new owner or related entity. We may also share information within our related brands, business partners, affiliates, and digital services as part of our operations.
By providing your personal information—whether online, in writing, or verbally—you acknowledge that such transfers may occur. If they do, we’ll make sure everything is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as the Privacy Act 2020 and the New Zealand Information Privacy Principles. Also, we will ensure compliance with the Personal Data Protection Act 2012 (PDPA) in Singapore, the Personal Information Protection Law (PIPL) in China, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in the United States, and the General Data Protection Regulation (GDPR) in the European Union where applicable. Should there be any major changes in ownership or control, we will update this policy to keep you informed about how your information is managed.
7. HOW TO MANAGE YOUR PERSONAL INFORMATION
We want to make it easy for you to control how we use your personal information. Below are the ways you can manage your preferences:
Email Preferences
To stop receiving promotional emails or direct mail from Lorna Jane, email us at privacy@lornajane.com.au (processing may take 3-5 business days)
SMS/Text Messages
To stop receiving text messages, simply reply "STOP" to any message you receive
Cookies & Tracking
You can manage cookie settings in your browser, but disabling cookies may impact website functionality
Interest-Based Advertising
To limit or opt out of personalised ads, you can:
o Adjust browser settings to block or delete cookies in Chrome, Firefox, Safari, or Edge
o Manage Google & Meta Ads by updating your ad preferences via Google Ad Settings or your Facebook and Instagram settings
o Limit tracking by unsubscribing from marketing emails and avoiding in-store Wi-Fi connections
Use of AI Technologies
You have the right to request information about AI-driven decisions, opt out of certain AI-based personalisation, and seek human review where legally required. If you have any questions about our use of AI technology, please email privacy@lornajane.com.au
Access & Correction of Personal Information
You have the right to request access to or correction of the personal information we hold about you. We will provide access unless legal exemptions apply and will explain if we are unable to fulfil your request. Access requests are free, but we may charge reasonable costs for processing. Any applicable fees will be disclosed before we proceed.
o You can update your details online (if this option is available through your account)
o Alternatively, email us at privacy@lornajane.com.au or contact our Privacy Officer in writing (see address below)
8. PRIVACY OFFICER CONTACT
If you have any questions, concerns, or complaints about how Lorna Jane collects or handles your personal information, or if you wish to request access, correction, or deletion of your personal data, please contact our Privacy Officer:
Email
For privacy-related concerns, contact privacy@lornajane.com.au
Online chat
Our customer service team is available for live chat from 9 am to 5 pm AEST, Monday to Friday, excluding public holidays
These contact details can be used for both Australian, New Zealand and international inquiries.
We take privacy seriously and will respond to your request as soon as possible. We aim to respond to privacy requests within 30 days (Australia) or 20 business days (New Zealand). If we need additional time, we will inform you of the reason and expected timeframe.
9. PRIVACY COMMISSIONER AND OTHER DETAILS
Australia
For more information on privacy rights and obligations, you can contact the Office of the Australian Information Commissioner (OAIC):
Phone: 1300 363 992
Website: www.oaic.gov.au
The OAIC provides guidance on privacy laws, handling personal information, and lodging complaints about personal information handling.
New Zealand
For more information on privacy rights and obligations, you can contact the New Zealand Office of the Privacy Commissioner (OPC):
Phone: 0800 803 909
Website: www.privacy.org.nz
The OPC provides guidance on privacy laws, handling personal information, and lodging complaints about personal information handling.
General Data Protection Regulation (GDPR)
If you are located in the EU, we handle your personal information in line with the General Data Protection Regulation (GDPR). We may collect and use your information if it is in our legitimate interest, such as improving our products, sending marketing updates, preventing fraud, or running our business efficiently. If you believe this affects you unfairly, you have the right to object as outlined in this policy.
We may also process your personal information with your consent, which must be freely given and clear (e.g., ticking a box). You can withdraw your consent at any time. If you make a purchase, we use your information to process payments and deliveries as part of our contract with you. Additionally, we may need to comply with legal obligations, such as financial reporting or law enforcement requests.
For employees, we may process sensitive personal information, such as health data, to meet employment or social security laws, provide workplace support, or assess work capacity after an illness or injury. This data is handled securely and shared only with authorised professionals when required by law.
In some cases, we may need to use your personal information to establish, exercise, or defend legal claims, such as disputes or court proceedings. You also have rights under the GDPR, including the ability to object to data processing, withdraw consent, and access, update, or request deletion of your information. If your data is no longer needed or was unlawfully processed, you can request its erasure.
We aim to respond to requests within one month, unless an extension is needed. If we cannot comply with a request, we will explain why. To exercise your rights under the GDPR, contact privacy@lornajane.com.au For more information on European data protection authorities, visit the European Commission website.