Privacy Policy

1. PRIVACY STATEMENT

1.1 2XU Pty Ltd (ABN 85 112 308 602) and its affiliated entities (together “2XU”, “we”, “us” and “our”) respect and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and secure your personal information. It also sets out your rights regarding the data we hold and process. We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and the General Data Protection Regulation (GDPR), as updated periodically (collectively “the Regulation”) .

1.2 “Personal information” means data or opinions about an identified individual or someone who is reasonably identifiable, such as name, address, contact number or email address .

1.3 Our website (2xuus.com) may include external links. We are not responsible for the privacy practices of those third‑party sites. You should review the privacy policies of any website you visit via such links .

2. COLLECTION OF PERSONAL INFORMATION

2.1 We may collect personal information in several ways, including:

  • directly from you (e.g., written, electronic or voice communication),
  • when you visit or interact with us via our website or social media,
  • when you complete transactions or participate in promotions,
  • or through any interaction with us in other contexts .

2.2 The specific types of personal information collected depend on your relationship with us (customer, supplier, contractor, applicant, etc.). For consumers, this may include:

  • name,
  • contact details (email, delivery/billing address),
  • payment data,
  • and any additional information provided during a transaction or inquiry

2.3 We collect sensitive data (such as health, race, political opinions, union membership, religious beliefs, criminal records) only with your explicit consent or when allowed by law. If consent was given, you may withdraw it at any time through written notice .

2.4 We may also obtain personal information from third parties. If you supply information about another individual, please inform them of this Privacy Policy .

2.5 If you are or become a 2XU employee, your personal information may be handled under different rules if directly related to employment and exempt under relevant laws.

2.6 We work with Rakuten Advertising, which may collect data (such as IP address, digital identifiers, browsing and app‑use behaviour) when you interact with our digital properties, for purposes including personalization, analytics, and advertising. For more detail, see Rakuten’s privacy notices on their website .

3. COOKIES

3.1 When you access our website, we and third parties (including Google) may place cookies to improve user experience, manage functionality, optimize advertising, and enable remarketing based on your prior visits. Google Analytics usage is governed by Google’s Terms of Service and Privacy Policy. For further details, refer to our Cookie Policy on 2xuus.com.

4. USE AND DISCLOSURE OF PERSONAL INFORMATION

4.1 Your personal data may be used for:

  • delivering our products and processing payments,
  • responding to inquiries and providing product information or samples,
  • administering promotions or competitions,
  • managing complaints or feedback,
  • conducting research and development,
  • strengthening relationships with customers, suppliers or contractors,
  • and assessing job applications .

4.2 Additionally, we may process your data for legal obligations, legitimate interests, or consented purposes as allowed by law or regulation .

4.3 If we cannot collect personal data from or about you, this may limit our ability to fulfill your requests or engage with you.

4.4 We may use your data for marketing – including updates on products, events and promotions – if you consent. You may opt out at any time via unsubscribe options or accessing preferences on 2xuus.com .

4.5 Where needed for business operations, we may disclose personal information to:

  • affiliated entities,
  • third-party providers for payments, logistics, marketing, technology support,
  • or others as legally authorised or consented by you.

5. INTERNATIONAL TRANSFERS AND DATA TRANSFER CONTROLS

5.1 Some of our corporate groups and service providers may be based outside Australia, which means your personal data might be transferred to countries without equivalent data protection laws. We implement contract clauses (e.g. EU model clauses) or other safeguards before transferring any personal data internationally.

6. DATA PROCESSING PRINCIPLES

6.1 In line with the Regulation, personal data will be:

  • processed lawfully, fairly and transparently,
  • collected only for explicit, legitimate purposes,
  • adequate, relevant and limited to what is necessary,
  • accurate and, where necessary, kept up to date,
  • retained only as long as needed,
  • and secured against unauthorized access, loss or misuse through appropriate technical and organizational measures.

7. SECURITY

7.1 We take reasonable technical and organizational measures to safeguard your personal information against unauthorized access, disclosure, loss or destruction.

8. YOUR RIGHTS

8.1 Under the Regulation, you have the right to:

  • be informed about how we collect and use your data,
  • access the personal data we hold,
  • correct inaccurate or incomplete data,
  • request deletion (“right to be forgotten”),
  • restrict processing,
  • request data portability,
  • object to processing and automated decision-making (where applicable).

If you have concerns or wish to lodge a complaint, you may contact us through the channels provided on 2xuus.com or reach out to relevant supervisory authorities such as the Australian regulator or European data protection authorities.