Privacy Policy

Kitout ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform.

We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We collect the following types of personal information:

Account information: When you register as a Club Admin, we collect your name, email address, and password.

Order information: When you place an order as a Customer, we collect your name, email address, shipping address, and order details.

Payment information: Payment is processed securely by Stripe. We do not store your full credit card details on our servers. Stripe's handling of your payment information is governed by their own privacy policy.

Usage data: We may collect anonymised analytics data such as pages visited, time on site, and referral sources to improve the Platform.

We use the personal information we collect to:

• Process and fulfil merchandise orders
• Manage Club Admin accounts and store operations
• Communicate with you about orders, account updates, and support requests
• Improve and maintain the Platform
• Comply with legal obligations

We will not use your personal information for direct marketing without your consent.

We share personal information with the following third-party services as necessary to operate the Platform:

Stripe: Processes payments securely. Club payment details are managed via Stripe Connect.

Print-on-demand providers: Fulfil and ship orders. We share order details and shipping addresses with our production partners to manufacture and deliver your products.

Email service providers: Send transactional emails such as order confirmations and shipping notifications.

We do not sell your personal information to any third party.

We retain personal information for as long as necessary to provide the Platform's services, comply with our legal obligations, resolve disputes, and enforce our agreements.

Account data is retained while your account is active. Order data is retained for a minimum of seven years for legal and accounting purposes. You may request deletion of your account at any time.

We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit (TLS), secure password hashing, and restricted access to personal data.

While we take reasonable steps to protect your information, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security.

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or outdated information
• Request deletion of your personal information (subject to legal retention requirements)
• Opt out of non-essential communications
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

The Platform uses essential cookies to manage sessions and authentication. We may also use privacy-focused analytics tools that do not track individuals or use cookies for advertising purposes.

The Platform is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 16, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or email. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have questions about this Privacy Policy, wish to exercise your rights, or want to make a complaint, please get in touch.