Privacy Policy
Last updated: 29/09/2025
This Privacy Policy ("Policy") applies to Nine Two Twenty Pty Ltd ABN 50 660 552 198 trading as DB Active ("DB Active", "we", "our", "us"). It covers our website https://dbactive.co any associated platforms we operate, and any other services we provide to you.
We are committed to managing personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) (Privacy Act), and, where applicable, the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).
This Policy explains how we collect, use, disclose, store and protect your personal information, and your rights in relation to that information.
1. What information do we collect?
We only collect information necessary to provide our services and operate our business. The type of information we collect depends on how you interact with us.
-
Customers & Website Users
- Name, email address, billing/shipping address, phone number.
- Payment details (processed securely via third-party payment providers such as Stripe, PayPal, Afterpay, Klarna).
- Order history, preferences, and feedback.
- Device, browser, and analytics data when you visit our website (cookies, IP address, clickstream).
- User-generated content (UGC) if you tag us on social media.
-
Prospective Employees/Contractors
- Contact details, qualifications, work history, references.
- Background checks, tax file number, and superannuation information where required.
-
Other Individuals
- Service providers, influencers, contractors and partners: name, contact, identification, and business details.
2. How do we collect your information?
We generally collect personal information directly from you, including when you:
- Visit our website, subscribe to our newsletter, or create an account.
- Place an order with us.
- Interact with our customer service team.
- Engage with us via social media.
We may also collect personal information from:
- Third-party payment providers, couriers, and technology partners.
- Recruitment agencies or referees for employment purposes.
3. Why do we collect and use your personal information?
We collect and use personal information to:
- Process, ship and deliver your orders.
- Provide customer support and respond to enquiries.
- Personalise your shopping experience and recommend products.
- Improve and develop our products, website and services.
- Run promotions, competitions, and marketing campaigns.
- Fulfil our legal obligations, including tax and accounting.
- Protect against fraud, misuse, or illegal activity.
With your consent, we may also use your photos, reviews, or tagged social content for promotional purposes.
4. Cookies & Website Tracking
We use cookies and similar technologies to:
- Track shopping cart activity (including abandoned carts).
- Analyse website performance and improve user experience.
- Deliver personalised ads and marketing content.
You can control cookies via your browser settings, but disabling them may impact site functionality.
5. Marketing & Communications
We may contact you by email, SMS, or social media with promotions and product updates.
- You can opt-out at any time using the "unsubscribe" link or by contacting us directly.
- Even if you opt out, we may still contact you for order updates or essential communications.
6. Disclosure of Personal Information
We may disclose your personal information to:
- Third-party service providers (payment processors, logistics/couriers, IT hosting, marketing platforms).
- Business partners, only with your consent (e.g. collaborations).
- Regulatory authorities if required by law.
- In the event of a merger or sale, to the acquiring entity.
We do not sell or rent your personal information.
7. Overseas Disclosure
Some of our third-party providers (e.g., Shopify, Stripe, Google Analytics, Klaviyo) may store data overseas, including in the United States, EU, and Asia. We take reasonable steps to ensure these providers comply with privacy laws and safeguard your data.
8. Security & Data Retention
We store personal information securely using encrypted, password-protected systems. We restrict access to authorised personnel only.
We retain personal information only as long as necessary:
- Customer records: generally retained for up to 7 years for legal/tax purposes.
- Marketing data: retained until you unsubscribe or request deletion.
When no longer required, we securely delete or anonymise your information.
9. Your Rights
Under Australian Law (APPs):
You have the right to request access, correction, or deletion of your personal information.
If you are in the EU/UK (GDPR/UK GDPR):
You also have the right to:
- Request data portability.
- Restrict or object to processing.
- Withdraw consent at any time.
- Lodge a complaint with your local supervisory authority.
If you are in California (CCPA):
You have the right to:
- Request disclosure of the categories of personal information collected.
- Request deletion of your personal information (subject to exceptions).
- Opt out of sale of your personal information (DB Active does not sell your data).
10. Data Breaches
If a data breach occurs that is likely to cause serious harm, we will notify you and comply with the Notifiable Data Breaches (NDB) Scheme under the Privacy Act.
11. User Generated Content (UGC)
By tagging @dbactive or using our branded hashtags on social media, you grant us permission to:
- Share and feature your content on our website, social media, emails, and marketing campaigns.
- Use your name or handle for identification purposes.
- Modify content where necessary for formatting, without notice.
You confirm that you own the rights to your content, have permission from anyone featured in it, and that our use does not infringe third-party rights. DB Active is not liable for third-party claims related to your content.
12. Complaints & Contact
If you have any concerns about how we handle your personal information, please contact us:
Privacy Officer
Nine Two Twenty Pty Ltd (trading as DB Active)
5/18 Township Drive, Burleigh Heads QLD 4220, Australia
📧 hello@dbactive.co We will respond within 30 days. If you are not satisfied, you may escalate to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
13. Changes to this Policy
We may update this Privacy Policy from time to time. Updates will be posted on our website with the "Last Updated" date revised. Please check back regularly.