1. About this policy

KPI Sports Pty Ltd (ACN 641 296 899) ("KPI", "we", "us", "our") is committed to protecting the privacy of personal information we collect, use and disclose in the course of our business. This policy describes how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy applies to personal information collected through our website, online stores, order processes, and interactions with customers, schools, clubs and their members.

We may update this policy from time to time. The current version will always be available on our website.

2. What personal information we collect

The types of personal information we may collect include:

•       Name and contact details (email address, phone number, postal address).

•       Order and transaction details (items ordered, payment references, delivery information).

•       Personalisation details provided by or on behalf of a school, club or organisation for the purpose of customising products (for example, names, numbers, team or group identifiers).

•       Account and login credentials where you create an account with us.

•       Marketing preferences and communications history.

•       Website usage information collected through cookies and analytics tools (see section 9).

We collect personal information directly from you, or from an authorised representative of your school, club or organisation where they place or manage orders on your behalf.

3. Why we collect and use personal information

We collect and use personal information for the following purposes:

•       To process and fulfil orders, including product personalisation, production, delivery and returns.

•       To communicate with you about your orders, account or enquiries.

•       To share relevant order information with your school, club or organisation to support their administration of team or group orders

•       To manage our customer accounts and business records.

•       To send you marketing communications where you have opted in (see section 6).

•       To improve our products, services and website.

•       To comply with our legal obligations.

4. Who we share personal information with

We may share personal information with the following categories of third parties, only to the extent necessary for the purposes described in this policy:

•       The school, club or organisation associated with your order — to support their administration of group orders, including order status and payment reconciliation.

•       Our technology and platform providers — including eCommerce platforms, email and file storage services, and accounting systems used to operate our business.

•       Our IT service providers — for device management, security monitoring and technical support.

•       Payment processors — to process transactions securely.

•       Logistics and delivery providers — to fulfil and deliver orders.

•       Advertising and marketing platforms — only where you have opted in to marketing (see section 6).

•       Professional advisors, regulators or government authorities — where required by law or to protect our legal rights.

We do not sell personal information to third parties.

5. Overseas disclosure

Some of the third-party service providers we use to operate our business may store or process data outside of Australia, including in the United States, Canada and other countries where our platform providers maintain infrastructure.

Where personal information is transferred overseas, we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles, including by selecting reputable providers with appropriate security and privacy controls.

6. Marketing

We may send you marketing communications about our products, services and offers where you have opted in to receive them.

You can opt out of marketing communications at any time by using the unsubscribe link in any marketing email, or by contacting us (see section 11).

We may use advertising platforms to reach customers who have opted in to marketing. Where we do this, customer data is uploaded using the platform's secure hashed matching process.

7. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Our security measures include access controls, multi-factor authentication, encryption, and the use of reputable cloud platforms with independently verified security programs.

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

8. Access, correction and deletion

You have the right to:

•       Request access to the personal information we hold about you.

•       Request correction of any personal information that is inaccurate, incomplete or out of date.

•       Request deletion of your personal information, subject to any legal obligations we may have to retain it.

These requests are handled free of charge. We will respond within 30 days where practicable.

To make a request, contact us using the details in section 11.

9. Cookies and analytics

Our website uses cookies and similar technologies to improve your browsing experience, analyse website traffic and understand how visitors use our site.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect some website functionality.

We may use third-party analytics tools that collect anonymised or aggregated usage data. These tools are governed by their own privacy policies.

10. Complaints

If you believe we have breached your privacy or handled your personal information inappropriately, you can lodge a complaint by contacting us using the details in section 11.

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. Contact

For any privacy-related enquiries, requests or complaints:

Email: IT@kpisports.com.au

Post: Unit 2/563 Bilsen Rd, Geebung QLD 4034