Privacy Policy

HiitSkin Pty Ltd operates this store and website. We provide the Services to you using Shopify. This policy explains how we collect, use, disclose and protect your personal information when you visit our site, contact us or make a purchase. If this policy differs from our Terms of Service, this policy applies to privacy matters.

By using the Services you acknowledge this policy.

What personal information we collect

Personal information means information or an opinion about an identified person or a person who is reasonably identifiable. We collect the following information as permitted by law and depending on your interaction with us

• Contact details such as name email phone billing address and shipping address
• Account details such as login credentials preferences and saved items
• Order and transaction details such as items viewed added to cart purchased returned or exchanged and payment confirmation
• Payment information processed by our payment providers such as card type last four digits and authorisation result. We do not store full card numbers
• Device and usage information such as IP address browser and device type pages viewed links clicked and the time and date of visits
• Communications such as enquiries product reviews or messages to our support team
• Marketing preferences and engagement with our emails ads or campaigns

We may create de-identified or aggregated data for reporting and improvement.

How we collect information

• Directly from you when you browse create an account place an order or contact us
• Automatically through cookies pixels and similar technologies
• From our service providers such as payment processors fulfilment and delivery partners analytics and advertising providers
• From partners and third parties where permitted by law

Why we use personal information

We use personal information to

• Provide and operate the store process payments fulfil orders manage returns and deliver customer support
• Personalise your experience including showing products and content that may interest you
• Send service and transactional messages and with your consent or as permitted send marketing by email SMS or online advertising
• Maintain safety and security prevent detect and investigate fraud or misuse
• Comply with laws manage records handle complaints and enforce our terms
• Improve the Services including testing analytics and research

Marketing choices

You can unsubscribe from marketing emails at any time using the link in our emails. You can control cookies through your browser settings. If your browser sends a Global Privacy Control signal we will treat it as an opt out for that browser and device where required.

Cookies and similar technologies

We use cookies and similar tools to run the site remember your preferences analyse performance and show relevant ads. Some cookies are essential for checkout and security. You can adjust cookie settings in your browser. Blocking cookies may affect site functionality.

Disclosing personal information

We disclose personal information to

• Shopify as our ecommerce platform host and processor
• Service providers who help us run the business such as payment processing fraud prevention shipping warehousing customer support analytics email and advertising
• Business and marketing partners who help deliver advertising and promotions subject to their privacy notices
• Professional advisers insurers and government or regulatory authorities as required or authorised by law
• Buyers and advisers in connection with a sale merger or reorganisation
• Other third parties where you ask us to share information

We do not sell personal information for money.

Relationship with Shopify

Our store is hosted on Shopify. Shopify collects and processes personal information to provide and improve the Services and may combine data from your interactions with our store and other merchants that use Shopify. For details about Shopify’s handling of your information and to exercise rights available with Shopify see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

International data transfers

We are based in Australia but work with partners worldwide. Your information may be stored or processed in countries outside Australia. Where we transfer personal information outside Australia we take reasonable steps to ensure recipients protect it in a manner consistent with the Australian Privacy Principles.

For individuals in the European Economic Area or the United Kingdom we rely on appropriate safeguards such as Standard Contractual Clauses for transfers to countries without an adequacy decision.

Legal bases for EEA and UK users

Where GDPR or UK GDPR applies we process personal data on these legal bases

• To perform a contract with you for example to fulfil an order
• For our legitimate interests for example to operate secure and effective Services to prevent fraud and to improve our products These interests are not overridden by your rights
• With your consent for example for certain marketing which you can withdraw at any time
• To comply with legal obligations

How long we keep information

We keep personal information only as long as needed for the purposes in this policy including to provide the Services comply with legal and tax requirements resolve disputes and enforce agreements. When no longer required we take reasonable steps to de-identify or securely destroy it.

Your rights

Your rights depend on where you live and local law. They may include

• Access to the personal information we hold about you
• Correction of inaccurate information
• Deletion of information in certain circumstances
• Portability where technically feasible
• Objection or restriction of processing in certain circumstances
• Opt out of targeted advertising or sharing for cross-context behavioural advertising where applicable

EEA and UK residents also have the right to withdraw consent where processing is based on consent and to object to processing based on legitimate interests.

To exercise any rights please contact us using the details below. We may need to verify your identity before actioning a request. You may authorise an agent to act on your behalf where permitted.

Children

Our Services are intended for adults. We do not knowingly collect personal information from children under the age of majority in their location. If you believe a child has provided personal information to us please contact us so we can delete it.

Security

We use reasonable safeguards designed to protect personal information however no method of transmission or storage is completely secure. Do not send sensitive information to us through insecure channels.

Links to other sites

Our site may link to third party websites or services. Their privacy practices are not controlled by us and we recommend you review their policies.

Complaints and contacts

If you have a question or concern about privacy please contact us

HiitSkin Pty Ltd
Gold Coast, Queensland, Australia
Email: support@hiitskin.com.au

Australian residents can also contact the Office of the Australian Information Commissioner. See oaic.gov.au for contact methods and guidance.

EEA and UK residents may contact their local data protection authority.

Changes to this policy

We may update this policy to reflect changes to our practices or legal requirements. We will post the updated version here and update the date below.

Last updated 23 September 2025