Privacy Policy.

This Privacy Policy describes how Swingooo (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.swingooo.com.au (the “Site”) or otherwise communicate with us regarding the Site (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

How we collect and use your information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What we collect directly from you

Information you directly submit to us through our Services may include:

• Contact details including your name, address, phone number, and email.
• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Customer support information including the information you choose to include in communications with us, for example when sending a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing those features.

Information about your usage

We automatically collect certain information about your interaction with the Services (“Usage Data”). To do this, we may use cookies, pixels, and similar technologies (“Cookies”). Usage Data may include information about how you access and use our Site, including device information, browser information, information about your network connection, your IP address, and other information regarding your interaction with the Services.

Information from third parties

We may obtain information about you from third parties, including from vendors and service providers who collect information on our behalf, such as:

• Vercel: hosts the Site and serves pages.
• Stripe: our payment processor. Stripe collects payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfil your orders. Stripe also holds the details of a checkout you start but don’t finish.
• Resend: sends our order emails and our email-list emails on our behalf.
• Supabase: hosts our order, customer, and analytics databases.
• Anthropic: if you write the optional note in our paddle matcher, the note and your answers are sent to Anthropic’s Claude and processed to write your result.
• PostHog (US): product analytics and, only if you tap “OK” on our cookie notice, session replay with all typed input masked.
• Google Analytics 4 and the Meta (Facebook) Pixel: these help us measure which of our ads and campaigns lead to visits and purchases. They run unless you turn them off (see “Cookies, analytics, and advertising” below).

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. See also “Third-party websites and links” below.

How we use your personal information

• Providing products and services. We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfil your orders, send notifications related to your account, purchases, returns, exchanges, or other transactions, and arrange for shipping.
• Marketing and advertising.We may use your personal information for marketing and promotional purposes, such as to send marketing, advertising, and promotional communications by email and to show you advertisements for products or services. You can opt out at any time using the one-click unsubscribe link in any of our list emails (see “Emails we send” below).
• Security and fraud prevention. We use your personal information to detect, investigate, or take action regarding possible fraudulent, illegal, or malicious activity.
• Communicating with you and service improvement. We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, provide effective services, and maintain our business relationship with you.

Emails we send

• Order emails. When you buy, we email your receipt, shipping updates and anything else about that order.
• Our email list. If you join (in the footer, the pop-up, or by emailing yourself your paddle match), we email you about new products, offers such as our Black Friday and Christmas sales, and invitations to play-test new gear. Every list email has a one-click unsubscribe link, and you can also reply “unsubscribe” to any of them.
• “Save my cart”. If you start a checkout and don’t finish it, we may send you one email with a link back to your checkout (the link works for up to 30 days) and, if a sale is on, the sale details. We only do this if you ticked the “Save my cart” box in the cart, which is never ticked for you, or you are already on our email list. Stripe holds the checkout details; we only use your email address and what was in the cart to send it.

Cookies, analytics, and advertising

When you first visit, a short notice at the bottom of the page tells you we use cookies. Measurement is on unless you turn it off, and you can change your mind at any time via “Cookie preferences” in the site footer.

• By default (until you choose). We use strictly-functional storage for your cart and your cookie choice. We also set a device identifier: a random code, not your name or email, that our analytics use to connect visits from the same browser and that is linked to any order you place from it. It is a pseudonymous analytics identifier, not an anonymous one. PostHog may keep an identifier between visits so we can see how the shop is used. Google Analytics 4 and the Meta Pixel load and set their cookies so our advertising can be measured, and we tell Google (through its Consent Mode) that analytics and advertising cookies are allowed. There is no session replay, and your email is not shared with Meta.
• If you tap “OK”. Everything above, plus two things we only do with that OK: PostHog may record your visit as a session replay with all typed input masked, and if you make a purchase, a securely hashed version of your email may be shared with Meta to match the purchase to an ad.
• If you tap “Turn off”. Google Analytics and the Meta Pixel don’t load, there is no session replay, and no hashed email is shared with Meta. We still use the strictly-functional cookies above, keep the device identifier, and record usage (pages and products viewed, and where a visit came from, for example a campaign link) in our own database and in PostHog, without PostHog storing anything in your browser. That usage is linked to the device identifier, so visits from the same browser can be connected in our analytics and to any order placed from it. If you turn it off after these tools have loaded, they stop straight away and we delete the Google Analytics, Meta Pixel and PostHog cookies stored for this site.

Purchases. Whatever you choose, when you place an order our server reports the purchase to Google Analytics and Meta so we can count which ads lead to sales. That report contains the order total, shipping, tax, any discount code, the items, an order reference, and the device identifier (hashed before it goes to Meta). If you arrived by clicking one of our Meta ads, it also contains that ad click’s reference. It never contains your name, address or phone number, and it only contains a hashed version of your email if you tapped “OK”.

How to opt out. Tap “Turn off” on the cookie notice, or open “Cookie preferences” in the footer at any time. We remember your choice for 12 months on that browser, so if you clear your cookies or use another device, you’ll need to choose again. We never share your card details, and payment information never touches our servers (checkout is processed by Stripe).

We use this data to understand how the shop is used, fix problems, and know which of our ads actually lead to sales. Website analytics events are retained for up to 24 months; Google Analytics is configured for 14-month retention. Most browsers also let you remove or reject cookies entirely through browser controls, though blocking functional cookies may stop parts of the Site (such as the cart) from working.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for contract fulfilment purposes, legitimate purposes, and other reasons subject to this Privacy Policy. Such circumstances may include:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping).
• With business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• When you direct, request us, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you.

Third-party websites and links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

Children’s data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details below to request that it be deleted.

Security and retention

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and we may decline your request as permitted by law.

• Right to access. Request access to personal information we hold about you.
• Right to delete. Request that we delete personal information we maintain about you.
• Right to correct. Request that we correct inaccurate personal information.
• Right of portability. Receive a copy of the personal information we hold about you and request that we transfer it to a third party, in certain circumstances.
• Restriction of processing. Ask us to stop or restrict our processing of personal information.
• Withdrawal of consent. Where we rely on consent, you may have the right to withdraw it.
• Communication preferences. Opt out of list emails any time with the one-click unsubscribe link in every one of them, or by replying “unsubscribe”.

You may exercise any of these rights by contacting us using the details below. We may need to verify your identity before responding. We will not discriminate against you for exercising any of these rights.

Complaints

If you have a complaint about how we have handled your personal information, email us at support@swingooo.com.au and tell us what happened. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you live outside Australia, you may also be able to complain to your local data protection authority.

Overseas recipients

We are based in Australia, but most of the services we use store or process personal information overseas. These are the recipients and the countries involved:

• Vercel (hosting the Site): United States.
• Supabase (our database of orders, customers and analytics): Australia (Sydney).
• Stripe (payments and checkout): United States and Ireland.
• Resend (sending our emails): United States.
• Google Analytics (site and ad measurement): United States.
• Meta (the Meta Pixel and purchase reporting for our ads): United States and Ireland.
• PostHog (product analytics and, after “OK”, session replay): United States.
• Anthropic (only if you write the optional note in our paddle matcher; it is processed to write your result): United States.

We may transfer, store, and process your personal information outside the country you live in. Your personal information is also processed by staff and third-party service providers and partners in those countries. If we transfer your personal information out of Europe, we will rely on recognised transfer mechanisms like the European Commission’s Standard Contractual Clauses (or any equivalent contracts issued by the relevant competent authority of the UK), unless the transfer is to a country that has been determined to provide an adequate level of protection.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at support@swingooo.com.au.