Privacy policy

Last updated: 26 September 2026

This Privacy Policy explains how PUSHAS collects, uses, shares and protects personal information when you visit pushas.com, use our apps, buy or sell on PUSHAS, subscribe to our communications, enter a promotion or contact us. By using PUSHAS or giving us your information, you acknowledge this policy and consent to the collection, use and disclosure described in it, to the extent consent is required by law.

1. Who we are

PUSHAS is operated by PUSHAS PTY LTD (ABN 64 617 810 554, ACN 617 810 554), Sydney, Australia. For customers in the United States, PUSHAS, Inc. is also responsible for your information. In this policy, "PUSHAS", "we", "us" and "our" means these entities and our related companies.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles and, where they apply to you, other privacy laws, including the EU and UK General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, Canadian privacy law and US state privacy laws.

2. Information we collect

Information you give us

• Account and contact details: name, email address, phone number, date of birth where provided, shipping and billing addresses.
• Order details: items purchased, sizes, prices, order history, returns and claims, including photographs and messages you send us.
• Payment information: processed by our payment providers. PUSHAS does not store your full card number.
• Verification information: for higher value orders, suspected fraud, or sellers, we may ask for identity verification or supporting documents.
• Seller information: identity and business details, ABN or tax information where required, bank or PayPal payout details, inventory, listings and sales records.
• Communications and content: emails, chats, calls, reviews, survey responses, social media interactions, competition and promotion entries, and content you tag us in.
• Job applications: CV, work history and references.

Information collected automatically

• Device and usage data: IP address, device identifiers, browser, operating system, pages viewed, searches, products viewed and added to cart, links clicked, referring site, time on page and approximate location.
• Cookies, pixels, SDKs and similar technologies: see section 8.

Information from third parties

• Payment, fraud-prevention and identity verification providers.
• Carriers, for delivery status.
• Advertising, analytics and social platforms, when you interact with our ads or content, or sign in or share through them.
• Our related companies and partners, where you have agreed to them sharing it with us.
• Publicly available sources, such as business registers.

3. How we use it

Purpose	Examples	Legal basis (GDPR/UK GDPR)
Provide our services	Process orders and payments, authenticate items, ship, handle returns and claims, pay sellers, run your account	Contract
Customer support	Answer questions, resolve issues, send order and service messages	Contract, legitimate interests
Security, fraud and loss prevention	Screen transactions and accounts, verify identity, prevent counterfeits, chargeback, return and account abuse, maintain records of fraudulent or abusive activity, enforce our terms, defend legal claims	Legitimate interests, legal obligation
Marketing	Email, SMS, push and in-app messages about releases, offers and events, including offers from our related brands and selected partners; personalised recommendations; advertising and audience matching on other sites and social platforms	Consent where required; otherwise legitimate interests
Improve and develop PUSHAS	Analytics, testing, research, pricing and demand insights, product development, and building and improving our systems, including machine learning and AI models	Legitimate interests
Legal and tax	Record keeping, tax and customs, responding to lawful requests	Legal obligation

We may also create aggregated or de-identified information that no longer identifies you, and use or share it for any lawful purpose, including market insights and reporting.

4. Automated decisions

We use automated tools, including third-party fraud screening, to help decide whether to accept, hold or cancel an order or account, and to detect fraudulent or abusive activity. These tools use information such as your order details, device, location, payment information and history with us. If an order or account is declined on this basis, you can contact us to have the decision reviewed by a person.

5. Direct marketing

We and our related companies may use your information to send you marketing about PUSHAS and about products, brands, events and offers we think you will like, including offers from our related brands and selected partners sent by us. Where the law requires your consent, such as for marketing emails and SMS, we only send them if you have opted in or already have an existing relationship with us that the law recognises.

We will only give your personal information to an unrelated business for its own marketing if you have agreed to that. We may also use hashed contact details to show you, or people like you, ads on platforms such as Meta and Google.

You can opt out at any time using the unsubscribe link in any email, by replying STOP to any SMS, through your device settings for push messages, or by contacting us. We will still send you order and service messages.

6. Who we share it with

We do not sell your personal information for money. We share it as needed with:

• Our related companies, including for the purposes in this policy.
• Service providers acting on our behalf, including our ecommerce platform (Shopify), payment providers (such as Shopify Payments, PayPal, Afterpay, Shop Pay, Apple Pay and Google Pay), fraud prevention (such as Riskified), email and SMS (such as Klaviyo), customer support (such as Gorgias), our mobile app provider, cloud hosting, analytics providers, carriers and customs brokers.
• Advertising and analytics partners such as Meta and Google, to measure and show relevant ads. Under some US state laws this may be considered "selling" or "sharing". See section 10 to opt out.
• Selected partners, such as brands we collaborate with on releases, events or promotions, where you have agreed to this or entered a promotion that says so.
• Buyers and sellers: PUSHAS handles fulfilment, so buyers and sellers do not receive each other's contact details.
• Payment providers, banks and card schemes, including to respond to chargebacks and payment disputes.
• Professional advisers, insurers, auditors and debt recovery agents.
• Authorities, rights holders and other parties where required or permitted by law, to investigate suspected fraud or counterfeit goods, or to protect the rights, property and safety of PUSHAS, our users or others.
• A buyer, investor or successor, in connection with a financing, sale, merger or restructure of all or part of our business.

7. International transfers

We operate in Australia, Hong Kong and the United States, and our service providers may store or process information in those and other countries, including the United States, Singapore, Ireland and the United Kingdom. We take reasonable steps to ensure overseas recipients protect personal information consistently with this policy, including through contractual safeguards such as Standard Contractual Clauses where GDPR applies.

For Australian users: by giving us your information, you consent to it being disclosed overseas on the basis that we will not be required to take the steps in Australian Privacy Principle 8.1 for every overseas recipient, and that overseas recipients may not be subject to the Australian Privacy Principles. You can withdraw this consent, but we may then be unable to provide our services.

8. Cookies and tracking

We use cookies, pixels, SDKs and similar technologies to keep the site working (for example your cart and login), remember preferences, measure performance, prevent fraud, and personalise content and advertising. Some are set by third parties such as Shopify, Google and Meta.

You can control cookies through the consent banner where shown, your browser and device settings, and platform ad settings. Blocking some cookies may stop parts of the site working. Where required by law, we honour the Global Privacy Control signal as an opt-out of targeted advertising.

9. How long we keep it

We keep personal information for as long as needed for the purposes above. Order, payment and tax records are generally kept for 7 years. Marketing preferences are kept until you unsubscribe, and suppression records afterwards so we respect your choice. We may keep limited information for longer where needed to prevent fraud or abuse, resolve disputes, or enforce our terms, including after an account is closed or a deletion request. Job applications are kept for up to 12 months.

10. Your choices and rights

• Access and correction: you can ask for a copy of the personal information we hold about you and ask us to correct it. We may refuse or limit access where the law allows, for example where it would affect another person's privacy or relates to a dispute or fraud investigation.
• Deletion: you can ask us to delete your information, subject to records we need to keep by law or for the reasons in section 9.
• EU, UK and similar laws: you may also have rights to restrict or object to processing, to data portability, and to withdraw consent at any time.
• US state privacy laws: depending on where you live, you may have the right to know, access, correct and delete your information, and to opt out of targeted advertising and the "sale" or "sharing" of personal information. Use our Data Sharing Opt-Out page or contact us. We will not discriminate against you for exercising these rights. You may use an authorised agent, and you may appeal a decision by replying to our response.

To make a request, email orders@pushas.com with the subject line "Privacy Request". We need to verify your identity before acting on a request. We respond within 30 days, or sooner where the law requires. We do not charge for making a request, but may charge a reasonable fee for providing access where the law allows.

11. Security

We use administrative, technical and physical safeguards, including encrypted checkout, access controls and secure facilities. No system is completely secure, and we cannot guarantee the security of information transmitted to us or stored by us or our service providers. You are responsible for keeping your login details confidential. If a data breach is likely to cause you serious harm, we will notify you and the relevant regulator as required by law.

12. Children

PUSHAS is intended for people aged 14 and over. Users under 18 must have the involvement of a parent or guardian. We do not knowingly collect personal information from children under 14 (or under 13 in the United States), and we will delete it if we learn we have.

13. Links and third-party services

Our site may link to third-party sites and services, and you may pay through third-party providers such as PayPal and Afterpay. Their privacy practices are their own and we are not responsible for them.

14. Complaints

If you have a concern about how we handle your personal information, contact us first and we will respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au), or your local data protection authority if you are outside Australia.

15. Changes to this policy

We may update this policy from time to time by publishing the updated version on this page, with the date it was last updated. Your continued use of PUSHAS after an update means the updated policy applies. If we make a material change, we will take reasonable steps to tell you, such as by email or a notice on the site.

16. Contact

Privacy Officer, PUSHAS PTY LTD, Sydney, Australia
Email: orders@pushas.com (subject: Privacy Request)