Last updated: 17 September 2026

1. About this policy

Young Body respects your privacy and is committed to handling your personal information responsibly.

In this Privacy Policy, Young Body, we, us and our mean Young Body Pty Ltd, trading as Young Body, ACN 702 360 021.

This policy explains how we collect, hold, use and disclose personal information when you:

•      visit or shop at youngbody.com.au;

•      contact us or interact with our social media accounts;

•      subscribe to marketing, enter promotions or provide feedback;

•      purchase or receive our products, including gifts;

•      interact with our advertising or digital business listings; or

•      deal with us in person, including at any future stores, markets, pop-up shops or events we operate.

It also explains how to request access to or correction of your personal information and how to make a privacy complaint.

The Privacy Act 1988 (Cth) does not currently apply to us, because we are a small business operator under that Act. We have chosen to work to its standards anyway. This policy follows the Australian Privacy Principles and we hold ourselves to it regardless, and we will tell you if that position changes. The Spam Act 2003 (Cth) and the Australian Consumer Law do apply to us, and we comply with both.

We do not sell or trade your personal information.

We may provide additional privacy notices when collecting information for a particular activity. Those notices should be read alongside this policy.

Visiting our website or reading this policy does not, by itself, constitute consent to every collection, use or disclosure described here. Where consent is required, we obtain it separately.

2. Personal information we collect

Personal information is information or an opinion about an identified individual, or an individual who can reasonably be identified.

The information we collect depends on how you interact with us. It can include:

Contact and account information: your name, email address, telephone number, billing and delivery addresses, and account details if you create an account.

Order and transaction information: products purchased, order history, gift card details, delivery instructions, payment status, transaction references, and records of returns, refunds or exchanges.

Gift recipient information: a recipient’s name, contact details, delivery address and any gift message you provide.

Communications and feedback: enquiries, correspondence, customer service records, reviews, survey responses, photographs and other information you choose to send us.

Preferences and marketing information: product interests, communication preferences, subscription status, consent records and interactions with our marketing.

Website and device information: IP address, browser and device type, operating system, approximate location, referring pages, pages and products viewed, shopping cart activity, cookie or similar identifiers, and the dates and times of visits.

Advertising and listing interactions: information about how you reach our website or interact with our advertisements and business listings, including campaign referrals and conversion events where tracking is enabled.

Business contact information: names, roles and contact details of people who represent our suppliers, service providers, stockists and business partners.

We limit the information we request to what is reasonably necessary for the relevant activity.

3. Skin concerns and sensitive information

You do not ordinarily need to provide health information to purchase our products.

However, you might tell us about an allergy, skin condition, adverse reaction or other health concern when asking about a product or reporting a problem. Photographs and descriptions of these concerns may also contain sensitive information.

We only seek sensitive information where it is reasonably necessary for the relevant purpose and with your consent, unless collection is otherwise required or authorised by law. Consent must be voluntary, informed, specific and current, and given by someone with the capacity to give it. Where the person concerned is a child, section 14 also applies.

We use this information to respond to your enquiry, investigate a product concern, manage a complaint or meet applicable safety and legal obligations. Where necessary and lawful, we may share relevant information with a manufacturer, insurer, professional adviser or regulator. We seek any additional consent required for that disclosure.

We do not use health information for direct marketing without your separate consent. Any use must also comply with the relevant advertising platform’s restrictions.

Please avoid sending medical records or other sensitive information that is unnecessary for your enquiry. If we receive information we did not request, we assess whether we may lawfully retain it and, where required, destroy or de-identify it.

4. How we collect information

We generally collect personal information directly from you when you:

•      place an order, create an account or request a return;

•      complete a contact form or communicate with us;

•      subscribe to updates, request a promotional resource or enter a competition;

•      submit a review, photograph or feedback; or

•      interact with us in person.

We also collect information automatically through our website and associated technologies, as explained in section 8.

In appropriate circumstances, we receive information from other sources, including:

•      someone purchasing a gift for you;

•      payment providers confirming a transaction or identifying suspected fraud;

•      delivery providers supplying delivery updates;

•      Google, Meta and social media platforms through relevant interactions or enabled services; and

•      an authorised representative acting on your behalf.

We collect information from other sources only where permitted by law and take reasonable steps to make you aware of the collection where required.

If you provide someone else’s personal information, please ensure you have authority to do so and, where appropriate, tell them about this policy. We do not add gift recipients to marketing lists merely because someone has purchased a gift for them.

5. Your choice to provide information

You can generally browse our website without providing your name, although website technologies may collect information described in this policy.

Where lawful and practical, you can make general enquiries anonymously or use a pseudonym.

Some activities require particular information. For example, we need delivery details to send an order and enough information to verify an account before disclosing its contents.

If you choose not to provide information reasonably needed for an activity, we may be unable to complete your order, deliver a product, process a request or provide the relevant service.

Optional marketing subscriptions are separate from information needed to fulfil an order.

6. Why we collect, hold and use information

We collect, hold and use personal information to:

•      process payments and fulfil orders;

•      deliver products and gift cards;

•      manage accounts, enquiries, returns, refunds and complaints;

•      provide order confirmations, delivery updates and product safety notices;

•      investigate adverse reactions and other product concerns;

•      administer promotions or other programs you choose to join;

•      send marketing where permitted and manage communication preferences;

•      measure website performance and advertising effectiveness;

•      understand customer interests and improve our products, website and service;

•      maintain business, accounting and transaction records;

•      detect and prevent fraud, misuse and security incidents, including automated risk assessment of orders at checkout;

•      manage relationships with suppliers, stockists and service providers; and

•      meet legal obligations and establish, exercise or defend legal claims.

We use or disclose information for the purpose for which it was collected, or for another purpose permitted by law. Where a proposed use requires further consent, we seek that consent.

7. Who we share information with

We share relevant personal information with people and organisations that help us operate Young Body, where reasonably necessary for their role. These can include:

•      Shopify, which hosts our online store;

•      Google, through Google Ads, Google Analytics 4, Google Merchant Center and Google Business Profile;

•      Meta, through Meta Ads and any associated tracking features identified in section 8;

•      Pinterest and TikTok, through advertising and measurement tools installed on our store;

•      payment processors, banks and payment services you choose at checkout;

•      warehouses, fulfilment providers, postal services and couriers;

•      website hosting, cloud storage, IT support and security providers;

•      customer service and marketing communications providers;

•      manufacturers or suppliers helping resolve a product or safety issue; and

•      accountants, lawyers, insurers and other professional advisers.

The information shared depends on the service. Using a provider does not mean we share all customer information with it.

We seek to limit disclosures to the information needed for the relevant purpose and take reasonable steps to ensure service providers handle information appropriately.

We may also disclose information to your authorised representative, with your consent, or where required or authorised by law, including to regulators, courts or law enforcement agencies.

If our business is proposed to be sold, merged or restructured, relevant information may be disclosed to advisers or a prospective purchaser where legally permitted and subject to appropriate confidentiality safeguards. Any transfer must comply with applicable privacy obligations.

8. Cookies, analytics and advertising

Website technologies

Our website uses cookies and similar technologies to support functions such as keeping items in your shopping cart, remembering preferences, operating checkout and maintaining security.

Cookies are small files placed on your device. Other technologies, such as tags and pixels, can record activity or communicate information to a service provider.

The information collected can include cookie identifiers, device and browser details, IP addresses, page addresses, referral information and actions taken on our website.

Google Analytics 4

We use Google Analytics 4, also called GA4, to understand how visitors find and use our website and to measure its performance.

GA4 can record interactions such as page views and, where configured, product views, shopping cart activity and purchases. We use the resulting reports to improve our website and understand the effectiveness of our marketing.

Where enabled, advertising integrations allow information to flow between GA4 and Google Ads, subject to the relevant settings and consent requirements.

Google Ads and Meta Ads

We use Google Ads and Meta Ads to promote Young Body and our products.

Where these tools are enabled, we and the relevant provider use cookies, identifiers or server connections to measure actions associated with advertising, such as visiting a product page or completing a purchase.

Where remarketing is enabled and permitted, these technologies also help us show advertisements to people who have previously interacted with Young Body. First-party identifiers from our website and identifiers supplied by advertising providers may be used together for these purposes.

Google and Meta may associate information received from our website with information they already hold, subject to their own policies, settings and applicable consent requirements.

Customer matching and enhanced conversions

We use Google enhanced conversions to improve advertising measurement or manage advertising audiences.

These features can involve sharing limited customer information, such as an email address or telephone number, with the relevant platform in a coded or “hashed” form. Hashing does not necessarily make information anonymous.

We use these features only where legally permitted, with any required notices and consent, and in accordance with the platform’s requirements.

Your choices

You can:

•      manage or delete cookies through your browser;

•      adjust Google advertising preferences through Google’s ad settings at https://myadcenter.google.com/home;

•      use the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout, where supported, noting that this stops collection in that browser only and does not stop the server-side measurement described above; and

•      adjust Meta advertising preferences through the Ad preferences controls in your Facebook or Instagram account settings.

Some choices apply only to a particular browser, device or account. Disabling cookies can affect website functions. Opting out of personalised advertising does not necessarily stop all advertising or measurement.

We obtain consent where required by law or applicable platform requirements. Unsubscribing from our emails does not automatically change cookie or advertising preferences.

Further information is available in Google’s Privacy Policy at policies.google.com/privacy, Google’s explanation of information collected through partner sites at policies.google.com/technologies/partner-sites, and Meta’s Privacy Policy at facebook.com/privacy/policy.

9. Google Merchant Center and Google Business Profile

We use Google Merchant Center to manage product information for listings and advertising on Google. Product feeds ordinarily contain information about our products, such as descriptions, prices, availability and website links.

If you click a product listing and visit our website, website analytics and advertising technologies may record that visit as described in section 8.

We do not currently take part in Google’s purchase-data programs. If that changes, we will update this policy first.

We use Google Business Profile to display business information and manage our presence on Google Search and Maps.

If you leave a review, upload a photograph or otherwise contribute publicly to our profile, we can see the information Google makes available with that contribution, which may include your display name and profile image. We use relevant information to respond to feedback and manage customer service.

Google may also provide performance reports about interactions with our listings. These reports may be aggregated rather than identifying individual visitors.

Google handles information collected through its own services under its privacy policy.

10. Direct marketing

We send marketing communications where you have consented or where otherwise permitted by applicable law. These may include product news, offers, launches and promotions.

Providing contact details for an order does not automatically mean you agree to every type of marketing. Where we rely on your consent at checkout, that consent is given by ticking a marketing opt-in box that is not ticked for you in advance.

You can opt out by:

•      using the unsubscribe link in a marketing email;

•      following the opt-out instructions in a marketing SMS, if we offer SMS marketing; or

•      contacting admin@youngbody.com.au.

We action email and SMS unsubscribe requests within five working days.

Opting out does not stop necessary non-marketing communications, such as order updates, responses to enquiries or product safety information.

We may retain a limited record of your opt-out to respect your preferences. Where applicable, you can also ask us to stop using or disclosing your information to facilitate direct marketing by others and request information about the source of your details.

11. Shopify and payments

Our online store is hosted on Shopify, which provides the ecommerce platform supporting our product listings, checkout and order administration.

Shopify processes information to provide these services. Depending on the features you use, Shopify may also handle information for its own purposes under Shopify’s consumer privacy policy at shopify.com/legal/privacy/consumers.

Payments are processed through third parties Shopify Payments, Stripe and the other payment methods shown at checkout. Those providers handle payment information under their own privacy and security arrangements.

We do not store full payment card numbers or card security codes in our own business records. We receive the transaction information from these third parties needed to administer your purchase, which can include payment status, transaction references and the card brand, the last four digits of the card and its expiry date.

Please do not send full payment card details by email or through our contact form.

12. Overseas storage and disclosure

Some service providers, support teams and subcontractors operate outside Australia. Your personal information may therefore be stored overseas or disclosed to overseas recipients. Some of these disclosures are made from our store’s servers rather than from your browser, so browser settings will not always prevent them.

These activities can include ecommerce hosting, payment processing, communications, technical support, analytics and advertising through providers such as Shopify, Google and Meta, Pinterest and TikTok.

The countries in which recipients are likely to be located are the United States, Canada, Ireland and Singapore.

Several of these providers operate global infrastructure and do not publish a complete list of the countries in which they store data, so we cannot identify every possible location. We have named the providers involved so that you can read their own privacy policies, and we will update this list as we confirm further detail.

You can contact us for further information about our overseas disclosures. This policy does not ask you to waive protections that apply to those disclosures.

13. In-person sales and events

If we operate stores, market stalls, pop-up shops or events, this policy also applies to information we collect through those activities.

Depending on the interaction, this could include information provided for a purchase, electronic receipt, delivery, return, enquiry or optional marketing subscription. Relevant transactions may be linked to your customer record to manage purchases and support requests.

We will make this policy available through an appropriate link, QR code or copy on request.

If we introduce CCTV, recorded consultations or additional collection practices, we will provide appropriate notices and update this policy before using them. Attending an event does not, by itself, authorise us to use an identifiable photograph of you for promotional purposes.

Independent stockists and event operators are responsible for information they collect for their own purposes. Their privacy policies apply to that handling.

14. Children and young people

Young Body recognises that its products may interest children and teenagers, and we take particular care when handling their personal information.

We encourage parents and guardians to assist young people with online purchases and privacy choices. Please avoid providing a child’s full date of birth, school, health details or other unnecessary information.

Where we rely on consent, we consider whether the young person has sufficient understanding and maturity to give informed consent. Where they cannot, we seek consent from a parent or guardian with appropriate authority.

We seek appropriate consent before using an identifiable image or testimonial of a child in our marketing.

We do not knowingly build advertising audiences from the personal information of children, and we review our advertising audiences so that remarketing is not directed at them. We are also monitoring the Children’s Online Privacy Code, which is due to be registered in December 2026, and will update this policy and our practices if it applies to us.

A young person, parent or guardian can contact us with a privacy concern or request. We may need to verify identity and authority, taking account of the young person’s privacy rights and circumstances.

If we discover information has been collected without consent required by law, we take appropriate steps, which may include obtaining valid consent or deleting the information.

15. Reviews, social media and photographs

If you submit a review for publication or post publicly on our social media pages, your chosen name and content may be visible to others.

Please avoid including private contact details, sensitive information or information about another person in public posts.

We seek permission where required before republishing identifiable customer content in our marketing. Sending a private message or photograph for customer support does not, by itself, give us permission to use it in advertising.

You can ask us to remove content from channels we control. We may be unable to remove copies independently shared or retained by others.

16. Security and retention

We hold information in electronic systems operated by us and our service providers, and in paper records where needed.

We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

These steps include restricting access to people who need it for their work, account authentication controls including multi-factor authentication on our main business accounts, software updates, secure storage, appropriate staff instructions and secure disposal.

No method of transmission or storage is completely secure. If you suspect unauthorised use of your customer account or information, please contact us promptly.

We retain information for as long as reasonably needed for the purposes described in this policy, including applicable legal and recordkeeping requirements.

For example:

•      order and accounting records are retained for applicable tax, accounting and transaction requirements;

•      customer service and product complaint records are retained as needed to resolve issues and meet relevant safety or legal obligations;

•      marketing records are retained while relevant to your subscription, with limited opt-out records kept to honour preferences; and

•      analytics information is retained in accordance with the settings and retention arrangements applicable to the relevant service, which for Google Analytics is 14 months.

When information is no longer needed for a permitted purpose and retention is not legally required, we take reasonable steps to destroy it or permanently de-identify it. This includes managing information held by service providers on our behalf.

You can ask us to delete information or close your account. We assess the request against our obligations and explain if particular records must be retained.

17. Access and correction

You can request access to the personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Contact admin@youngbody.com.au or use our website contact form. We may ask for limited information to verify your identity or a representative’s authority.

We respond within a reasonable period and will do so within 30 days. If more time is needed, we explain why and provide an expected timeframe.

There is no charge to make a request or to correct information. If a reasonable charge for providing access is permitted and necessary, we explain it beforehand.

If we refuse access or correction, we provide written reasons, except where it would be unreasonable to do so, and explain how to complain.

If we decline a correction, you can ask us to associate a statement with the information explaining why you believe it is incorrect.

Where applicable, you can ask us to notify other recipients of a correction, and we take reasonable steps to do so unless impracticable or unlawful.

18. Privacy incidents

If we become aware of a suspected privacy or data security incident, we take steps to contain it, assess what happened and reduce potential harm.

Where the Notifiable Data Breaches scheme applies and notification is required, we notify affected individuals and the Office of the Australian Information Commissioner. Our notification includes relevant information about the incident and recommended protective steps.

19. Questions and complaints

If you have a question or believe we have mishandled your personal information, contact:

Privacy Contact — Young Body

ACN: 702 360 021

Email: admin@youngbody.com.au

Contact form: youngbody.com.au/pages/contact

Please describe your concern and, where possible, the outcome you are seeking. We can help you make a complaint if needed.

We acknowledge complaints as soon as reasonably practicable, review the circumstances and aim to provide a substantive response within 30 days. If additional time is needed, we explain the delay and keep you informed.

If you are dissatisfied with our response, or we have not responded within 30 days, you can contact the Office of the Australian Information Commissioner. The OAIC can advise whether your complaint falls within its jurisdiction.

Office of the Australian Information Commissioner

Website: oaic.gov.au

Telephone: 1300 363 992, Monday to Thursday, 10am to 4pm AEST/AEDT

Complaints: oaic.gov.au/privacy/privacy-complaints

20. Changes and availability

We review this policy as our business, services and legal obligations change. The current version is available on our website, with its update date shown above.

For significant changes, we take reasonable steps to bring them to your attention where appropriate. If a new activity requires consent, updating this policy alone does not replace that requirement.

You can request a free copy of this policy or ask for another accessible format using the contact details above.