Privacy Policy

2Reds respects your privacy. This policy explains what personal information we collect when you browse our website, build a kit, place an order or get in touch — and what we do with it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using this website or purchasing from us, you agree to the practices described below. If you do not agree with this policy, please do not use the site.

1. Who We Are

This website is operated by 2Reds Custom Sports Apparel ("2Reds", "we", "us", "our"), an Australian owned and operated supplier of custom sports apparel and teamwear. Our ABN is 74 649 957 102.

• Website: https://2reds.com.au
• Email: [email protected]
• Phone: 0458 722 995
• Address: Suite 9/185 Military Rd, Neutral Bay, NSW 2089, Australia

We are responsible for the personal information we hold about you, and we are the contact point for any privacy question, access request or complaint.

2. Information We Collect

We only collect personal information that is reasonably necessary to run our business and supply the products and services you ask for. Depending on how you use the site, this may include:

Identity and contact details

• Your name, and where relevant the name of your club, school, team or organisation.
• Email address, phone number, billing address and delivery address.
• The name and contact details of a club or team representative acting on your behalf.

Order and transaction information

• Products ordered, sizes, quantities, size runs and player or participant names and numbers where you supply them for personalisation.
• Order value, order history, invoices, quotes, shipping and tracking details.
• Payment status and a partial card reference (such as the last four digits and card type) returned to us by our payment provider. We never see or store your full card number or CVV.

Account information

• If you create an account, your username, an encrypted password, and your saved billing and shipping details.
• Your saved carts, saved designs and past orders.

Design and artwork content

• Logos, crests, sponsor artwork, images, colours, text and other files you upload or send to us through the Kit Builder, by email or by any other channel, so that we can produce your apparel.
• Design specifications, mock-ups and approvals relating to your order.
• The designs you create and save in the Kit Builder, including your colour, pattern, logo placement and personalisation choices.

Our Kit Builder is powered by Kitbuilder, a specialist apparel design platform operated from the United Kingdom. The designer is embedded into our website, which means the artwork you upload and the designs you build are processed on Kitbuilder's systems as well as ours, and Kitbuilder may set its own cookies or use local storage in your browser to keep your design session working. See Overseas Disclosure below.

Communications

• Enquiries submitted through our contact and quote forms, and the content of emails, phone calls and messages between us.
• Feedback, reviews and any support or warranty correspondence.

Technical and usage information (collected automatically)

• IP address, approximate location derived from it, browser type and version, operating system and device type.
• Pages viewed, products viewed, time on page, referring website, search terms used to find us, and the links you click.
• The advertising campaign, referral source or search that brought you to the site (recorded by WooCommerce order attribution so we can understand where our orders come from).
• Cookie and similar identifiers — see Cookies & Tracking below.

Information we do not seek

We do not seek sensitive information as defined in the Privacy Act (such as health, racial or ethnic origin, religious beliefs or political affiliation). Please do not send us sensitive information unless we specifically request it and you consent to us collecting it.

3. How We Collect It

We collect personal information:

• Directly from you — when you place an order, create an account, use the Kit Builder, complete a contact or quote form, subscribe to our mailing list, email or phone us, or deal with us in person.
• Automatically — through cookies, pixels and analytics tools when you browse the site.
• From a third party — for example from a club, school or team administrator who orders on behalf of its members, from our payment providers confirming a transaction, or from advertising and analytics platforms.

If you provide us with someone else's personal information (for example a team list of player names, sizes and numbers), you confirm that you are authorised to give it to us and that you have made those individuals aware of this policy.

You can browse most of the site without identifying yourself, and you may deal with us anonymously or under a pseudonym where it is lawful and practicable. However, we cannot process an order, deliver goods or issue an invoice without your contact and delivery details.

4. How We Use Your Information

We use personal information to:

• Process, produce, fulfil and deliver your orders, and manage returns, remakes and warranty claims.
• Prepare quotes, mock-ups and artwork approvals, and produce your custom apparel.
• Create and administer your account, cart and saved designs.
• Take payment and issue invoices, receipts and refunds.
• Respond to your enquiries and provide customer support.
• Set up and administer online club stores where your club has requested one.
• Send you order and transactional notifications (these are not marketing and cannot be opted out of while an order is active).
• Send you marketing about our products, offers and new ranges, where you have opted in or where we are otherwise permitted to do so — you can unsubscribe at any time.
• Understand how the site is used, measure the performance of our advertising, and improve our website, products and service.
• Detect and prevent fraud, secure the site, and maintain backups.
• Meet our legal, tax, accounting and record-keeping obligations.

We will not use or disclose your personal information for an unrelated purpose unless you have consented, or the use is required or authorised by law.

5. Cookies & Tracking Technologies

Cookies are small text files stored on your device. We and our service providers use cookies, pixels, tags, local storage and similar technologies on this site. The categories we use are:

Strictly necessary cookies

• WooCommerce — remember the contents of your cart, keep your session active through checkout, and store your logged-in state. The site cannot function as a shop without these.
• WordPress — authentication and security cookies if you log in.
• SiteGround & Cloudflare — caching, load balancing, bot filtering and security. Our host and CDN process your IP address to serve and protect the site.

Functional cookies

• Remember preferences such as recently viewed products and Kit Builder selections.
• WooCommerce order attribution — records the source, campaign or referrer that led to a visit so we can attribute orders correctly.
• Kitbuilder — the embedded design tool may store data in your browser so your in-progress design is not lost while you work on it.

Analytics cookies

• Google Analytics 4 (via Google Tag / Google Site Kit) — measures visits, traffic sources, on-site behaviour and conversions.
• Jetpack Stats and WooCommerce Analytics (Automattic) — aggregated traffic and store performance statistics.
• Cloudflare Web Analytics — page performance and load measurement.

Advertising cookies

• Google Ads — conversion tracking and remarketing, so we can measure ad performance and show you 2Reds ads on Google Search, YouTube, Gmail and sites in the Google Display Network.
• Meta (Facebook) Pixel and Conversions API — measures actions taken on our site after you see or click a Facebook or Instagram ad, and allows us to build audiences for advertising. The Conversions API may send hashed event data (such as a hashed email address) directly from our server to Meta.

6. Analytics & Advertising

We advertise online, including through Google Ads and Meta (Facebook and Instagram). To do this we use the tools described below.

Google Analytics and Google Ads

• We use Google Analytics 4 to understand how visitors use the site, and Google Ads conversion tracking to measure which ads lead to enquiries and orders.
• We use Google Ads remarketing. This means Google and its partners may show you 2Reds ads across the internet based on your previous visits to this website.
• Third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) together with third-party cookies (such as the DoubleClick cookie) to inform, optimise and serve ads based on your past visits to our website.
• We do not merge personally identifiable information with this data unless you have given us permission to do so.

Meta Pixel and Conversions API

• The Meta Pixel records actions such as page views, product views, add-to-cart events, form submissions and purchases, and reports them to Meta so we can measure and target our advertising.
• Where the Conversions API is used, some event data is sent from our server to Meta. Identifiers such as email addresses are hashed before transmission.

Your use of these platforms is also governed by their own policies: Google Privacy Policy, How Google uses data from sites that use its services, and the Meta Privacy Policy.

7. Who We Share Your Information With

We do not sell your personal information. We disclose it only where it is necessary for the purposes set out in this policy, to the following categories of recipient:

Brand partners. We stock products from partner brands alongside our own range. Where your order includes a partner brand's products, we notify that partner so the order can be fulfilled, and that notification includes the contact and delivery details needed to complete it. If you would prefer to know which partner is involved before you order, contact us and we will tell you.

We may also disclose personal information where required or authorised by law, to enforce our terms, to protect the rights, property or safety of 2Reds or others, or in connection with a sale or restructure of our business (in which case the recipient will be bound by this policy).

8. Overseas Disclosure

Some of our service providers store or process data outside Australia. In particular, Google, Meta, Automattic, Cloudflare and Stripe operate global infrastructure, which commonly includes servers in the United States and other countries. Manufacturing partners and freight providers involved in producing and shipping your order may also be located overseas.

The Kitbuilder design platform that powers our Kit Builder is operated from the United Kingdom, so artwork and design data you submit through it is disclosed to a recipient in the UK.

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles. By providing your information to us, you acknowledge that it may be stored and processed outside Australia and that overseas recipients may be subject to different privacy laws.

9. Payments & Security

Payments on this site are processed by Stripe, a PCI-DSS Level 1 certified payment provider. Your card details are entered directly into, and handled by, the payment provider's secure systems — they are transmitted to the provider rather than stored on our servers. 2Reds does not receive or store your full card number, expiry date or security code. We receive only a confirmation of the payment result and a partial card reference (such as the card type and last four digits) so we can identify the transaction and process refunds.

Stripe acts as an independent controller of the payment data it collects, and may use it for fraud prevention and to meet its own legal obligations. Please review the privacy policy linked above for details of how that information is handled.

We take reasonable steps to protect the personal information we hold from misuse, interference, loss and unauthorised access, modification or disclosure. These include encryption of traffic in transit (HTTPS/TLS), a web application firewall and bot protection at our CDN, restricted administrator access, strong authentication on our systems, and regular backups and software updates.

No method of transmission or storage over the internet is completely secure. While we work hard to protect your information, we cannot guarantee absolute security, and any transmission is at your own risk.

10. How Long We Keep Your Information

We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires.

• Order, invoice and tax records — at least seven years, as required by Australian taxation law.
• Account details — for as long as your account remains active, plus a reasonable period afterwards.
• Artwork and design files — retained so we can produce reorders and remakes for your club or team, unless you ask us to delete them.
• Marketing contact details — until you unsubscribe, plus a short suppression record so we do not contact you again.
• Analytics and advertising data — for the retention periods set by the relevant platform.

When we no longer need personal information and are not legally required to keep it, we destroy it or de-identify it.

11. Your Rights & Choices

Under the Australian Privacy Principles you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate, out of date, incomplete or misleading.
• Opt out of direct marketing at any time.
• Complain if you believe we have breached the Australian Privacy Principles.
• Ask us to delete information we no longer need to keep.
• Deal with us anonymously or by pseudonym where that is lawful and practicable.

To exercise any of these rights, email [email protected]. We may need to verify your identity before we act on a request. We will respond within a reasonable period — normally within 30 days. Access is free, although we may charge a reasonable fee for the cost of retrieving and supplying extensive records. If we refuse access or correction, we will tell you why in writing and explain how to complain.

If you are in the EU, EEA or United Kingdom

We ship internationally, so where the GDPR or UK GDPR applies to you, you also have rights to erasure, restriction of processing, data portability, and objection to processing based on legitimate interests or direct marketing, and the right to withdraw consent at any time. Where we rely on consent for advertising cookies, withdrawing it will not affect processing already carried out. You may also lodge a complaint with your local supervisory authority. Contact us at the address above to exercise these rights.

12. Marketing Opt-Out

If you receive marketing emails from us, every message includes an unsubscribe link. You can also email [email protected] with "Unsubscribe" in the subject line and we will remove you from our marketing list.

Opting out of marketing does not stop transactional messages relating to an order you have placed, such as order confirmations, artwork approvals and delivery notifications.

13. Children & School Programs

Our website and services are directed at clubs, schools, businesses and adults. We do not knowingly collect personal information directly from children under 16 without the consent of a parent, guardian or authorised school or club representative.

We supply school leavers apparel and junior club teamwear. In these cases the order is normally placed by a school, club or parent, who provides participant names, nicknames, numbers and sizes for personalisation. That information is used solely to manufacture and deliver the apparel, and is never used for marketing to those individuals. If you believe a child has provided us with personal information directly, please contact us and we will delete it.

14. Club Stores & Third-Party Links

We operate dedicated online club stores at 2redsclubshops.com.au. Where you order through a club store, we handle your information in accordance with this policy, and we may share order and size details with the club or school administrator who manages that store.

Our site contains links to third-party websites and social media pages, including Facebook, Instagram and LinkedIn. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing them with any personal information.

15. Data Breaches

We have procedures in place to deal with suspected data breaches. If a breach occurs that is likely to result in serious harm to any individual whose information we hold, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

16. Changes To This Policy

We may update this policy from time to time to reflect changes to our practices, the services we use, or the law. The current version is always published on this page with the date it was last updated shown at the top. Material changes will be made clear on this page. Please review it periodically. Continuing to use the site after a change means you accept the updated policy.

17. Contact Us & Complaints

If you have a question about this policy, want to access or correct your information, or wish to make a privacy complaint, contact us:

• Email: [email protected]
• Phone: 0458 722 995
• Post: Privacy Officer, 2Reds, Suite 9/185 Military Rd, Neutral Bay, NSW 2089, Australia

We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner:

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001