Privacy policy

Last updated: May 13, 2026

The High Club values the users of our website thehighclub.com.au (the "Website"). Your privacy and trust are very important to us. We recognise that you may be concerned about our collection, use, and disclosure of the personally identifiable information ("Personal Information") that we collect when you use the Website and the services offered on the Website ("The High Club Services").

The High Club (THC) operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). The High Club is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes the information that we collect from you, how we collect this information, and what we do with it after we collect it. By using the Website, you are accepting the practices described in this Privacy Policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Our policy and security is authorised and managed in accordance with the Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024.

If you have any questions or comments regarding this Privacy Policy, please contact us at info@thehighclub.com.au.

Does The High Club Ever Make Changes to its Privacy Policy?

We may make changes to the Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by applicable law. We will also notify you of any material changes by sending you an email, posting a notice on the home page of the Website, or posting a notice in your account when you first login after changes have been made.

If you receive notification of a change in our Privacy Policy, you must review the new Privacy Policy carefully to make sure you understand our practices and procedures. You may not be able to receive notices from us if your cookies are not set to accept and/or are disabled.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including your name, mailing address, billing address, shipping address, phone number, and email address.

• Financial information including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation, and other payment details.

• Account information including your username, password, security questions, preferences and settings.

• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.

• Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.

• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.

• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, purchase a product, sign up to receive a newsletter, communicate with us, or otherwise provide us with your personal information.

• Automatically through the Services, including from your device when you use our products or services or visit our website, and through the use of cookies and similar technologies.

• From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.

• From our partners or other third parties.

How Does The High Club Use My Information?

Personal Information. We use Personal Information primarily for our own internal purposes, including:

• Provide, tailor, and improve the Services — including processing payments, fulfilling orders, arranging shipping, facilitating returns and exchanges, remembering your preferences, sending account notifications, enabling product reviews, and creating a customised shopping experience.

• Marketing and advertising — including sending marketing, advertising and promotional communications by email, text message or postal mail, and showing you relevant advertisements based on your activity on the Services.

• Security and fraud prevention — including authenticating your account, detecting or investigating fraudulent or illegal activity, and protecting public safety.

• Communicating with you — including providing customer support and maintaining our business relationship with you.

• Legal reasons — including complying with applicable law, responding to valid legal process, enforcing our terms or policies, or participating in legal proceedings.

• Business processing functions — including providing personal information to related bodies corporate and affiliates, contractors, service providers, or other third parties for administrative, marketing, planning, and product or service development purposes.

Non-Personal Information. We use Non-Personal Information to track the use of the Website and for other internal purposes, such as providing, maintaining, evaluating, and improving the Website.

Automated Decision-Making. We may use automated processes in certain areas of our operations, such as order processing or fraud detection. Where such automated processes are used, they are designed to support — not replace — human decision-making. We are committed to transparency around any automated decision-making that may have a significant effect on individuals, in accordance with our obligations under the Privacy Act. We will update this section as our use of such systems evolves and as further legal requirements take effect from 11 December 2026.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).

• With business and marketing partners to provide marketing services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.

• With affiliates or otherwise within our corporate group. Where you purchase a product, The High Club may provide your name and location information to an affiliate, who is contractually obligated not to use or disclose this information except for internal record keeping and, only if you have opted in, direct marketing.

• When you direct, request us, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.

• In connection with a business transaction such as a merger, acquisition, or sale of all or a portion of our assets. You will be notified via email or a notice on our website of any such change in ownership or control of your Personal Information.

• To prevent an emergency, to prevent harm to others, to respond to legal requirements, or to protect or enforce our rights and policies, as required or permitted by law (including to comply with a subpoena or court order).

• Non-Personal Information may be disclosed in aggregate form to potential strategic partners, advertisers, investors, customers, and others. This information cannot be easily used to identify you personally.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside.

To help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.

To learn more about how Shopify uses your personal information and any rights you may have, visit the Shopify Consumer Privacy Policy. You may also exercise certain rights with respect to your personal information via the Shopify Privacy Portal.

Cookies, IP Addresses, and Web Beacons

We may collect and receive certain types of information whenever you interact with us on our website and through emails or other communications. These technologies include web server logs, IP addresses, cookies, and web beacons.

Web Server Logs / IP Addresses: We may collect web server logs and IP addresses to conduct system administration and report aggregate information to affiliates, business partners and/or vendors for site analysis and website performance reviews.

Cookies: A cookie is a piece of information placed on your computer when you access certain websites. Cookies allow us to store information on the server to help make the web experience better for you and to conduct website analysis and performance review. Most web browsers are set up to accept cookies, although you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. Note that some portions of our website may not work properly if you refuse cookies.

Web Beacons: On certain webpages or emails, we may utilise web beacons (also known as "action tags" or "clear GIF technology") to help analyse the effectiveness of our website by measuring, for example, the number of visitors to a site or how many visitors clicked on key elements of a site.

We may also collect information from your browser or device when you visit our website, including device ID and type, browser type and language, access times, your mobile device's geographic location, and referring website address.

Some third parties operating on our website may use their own cookies or web beacons, over which we have no control. This Privacy Policy covers only the use of cookies and web beacons by The High Club and our online partners.

How to Control and Delete Cookies

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that declining cookies may affect your ability to use some features of our Website.

Visit www.aboutcookies.org for comprehensive information on managing cookies across a wide variety of browsers.

Does The High Club Protect My Personal Information?

The security of your Personal Information is important to us. We implement technical and organisational measures to protect your Personal Information from unauthorised access, disclosure, alteration, or destruction, in accordance with our obligations under the Privacy Act 1988 (Cth) as amended. When you enter sensitive information such as a credit card number on our order forms, we encrypt that information using secure socket layer technology (SSL).

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

While we strive to use commercially acceptable and up-to-date means to protect your Personal Information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. We assume no liability for any disclosure of data due to errors in transmission, unauthorised third-party access, or other acts or omissions beyond our reasonable control.

Your Rights Under Australian Privacy Law

Under the Privacy Act 1988 (Cth) and the Privacy and Other Legislation Amendment Act 2024, you have the following rights in relation to your personal information:

• Right to Access / Know — you may request access to personal information that we hold about you.

• Right to Correct — you may request that we correct inaccurate or out-of-date information we maintain about you.

• Right to Delete — you may request that we delete personal information we maintain about you.

• Right of Portability — you may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

• Right to make a complaint to the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your Personal Information.

• Right to take legal action under the statutory tort for serious invasions of privacy, where applicable.

To exercise any of these rights, please contact us at info@thehighclub.com.au. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your request, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at

www.oaic.gov.au.

Managing Communication Preferences

We provide you the opportunity to opt-out of having your Personal Information used for certain purposes. We may send you promotional emails, and you may opt out of receiving these at any time by:

• Following the unsubscribe instructions included in each communication.

• Through the account management screen.

• Emailing us at info@thehighclub.com.au.

If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

International Transfers

Please note that we may transfer, store, and process your personal information outside the country you live in. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Third Party Websites and Links

You may be able to access third party websites directly from the Website. This Privacy Policy does not apply when you access third party websites. We cannot control how third parties may use Personal Information you disclose to them, so you should carefully review the privacy policy of any third-party website before using it or disclosing your Personal Information.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Children's Privacy

Our Website is intended for users aged 18 and older. We do not knowingly collect or use Personal Information from anyone under the age of 18 (or the age of majority in your jurisdiction). If we become aware that we have collected Personal Information from a person under 18 without appropriate consent, we will take steps to delete that information promptly.

Users under 18 years of age may not use the Website. If you are the parent or guardian of a child who has provided us with their personal information, or you wish to request deactivation of any Personal Information relating to a minor, please contact us at info@thehighclub.com.au.

Note: The OAIC is developing a Children's Online Privacy Code, expected to take effect by 10 December 2026. We will update our practices and this policy as required when that Code comes into force.

Tell-A-Friend

If you use our referral service, we will ask for your friend's name and email address solely to send a one-time invitation email. This information is stored only for the purpose of sending that email and tracking the success of our referral program.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us, or lodge your complaint with your local data protection authority.