Privacy Policy

About This Policy

This Privacy Policy explains how East Coast Supplements Regional Pty Ltd, ABN 91 650 616 096, trading as ECS Supplements & Apparel collects, holds, uses and discloses personal information.

References in this Privacy Policy to “ECS Supplements & Apparel”, “ECS”, “we”, “us” or “our” mean East Coast Supplements Regional Pty Ltd.

This Privacy Policy applies when you:

• Visit or shop through our website at eastcoastsupplements.com.au.

• Purchase from or visit one of our retail stores.

• Create or use a customer account.

• Join or participate in our loyalty program.

• Subscribe to our email or SMS communications.

• Contact our customer service team.

• Complete a body composition scan, questionnaire or customer consultation.

• Enter a promotion, competition or giveaway.

• Interact with our social media accounts or advertisements.

• Apply for employment with us.

• Otherwise interact with ECS Supplements & Apparel.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable Australian privacy laws.

What Is Personal Information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Depending on how you interact with us, personal information may include:

• Your name.

• Your email address.

• Your telephone number.

• Your billing address.

• Your delivery address.

• Your date of birth or age range.

• Your account and login details.

• Your order and transaction history.

• Your loyalty membership details.

• Your loyalty points, rewards and redemptions.

• Your product interests and preferences.

• Your marketing and communication preferences.

• Your communications with us.

• Information provided when entering a promotion or competition.

• Information relating to returns, refunds, exchanges or complaints.

• Information about your interactions with our website, emails, SMS messages, advertisements and social media.

• Technical information about your device, browser and internet connection.

• Employment application information, where applicable.

Sensitive and Health Information

Some types of personal information are considered sensitive information under Australian privacy law and receive additional protection.

Where you choose to participate in a body composition scan, questionnaire, product consultation or similar service, we may collect health-related information such as:

• Your height.

• Your weight.

• Your age.

• Body composition measurements.

• Body fat measurements.

• Muscle mass measurements.

• Exercise habits.

• Dietary preferences.

• Allergies or sensitivities.

• Health, fitness or body composition goals.

• Other information you voluntarily provide as part of the service.

We will generally collect sensitive or health information only:

• With your consent.

• Where it is reasonably necessary to provide the service you requested.

• Where otherwise permitted or required by law.

You are not required to provide health information. However, we may be unable to provide a requested body composition scan, assessment or personalised service without it.

We do not use sensitive or health information for direct marketing unless you have provided the consent required by law.

Our staff do not provide medical advice. Product information, body composition measurements and consultations are not substitutes for advice from a qualified healthcare professional.

Information We Collect

Information You Provide Directly

We may collect information that you provide when you:

• Place an online or in-store order.

• Create or update a customer account.

• Join our loyalty program.

• Subscribe to email or SMS marketing.

• Complete a checkout form.

• Contact us by telephone, email, online form, social media or in person.

• Request a return, refund or exchange.

• Participate in a body composition scan or consultation.

• Complete a questionnaire, survey or feedback form.

• Enter a promotion, competition or giveaway.

• Apply for employment.

• Otherwise provide information to us.

Transaction and Payment Information

When you make a purchase, we may collect information required to process and manage the transaction, including:

• The products purchased.

• The amount paid.

• The order date and time.

• The store or sales channel used.

• The delivery method.

• The payment method.

• Discount and promotional information.

• Refund and exchange history.

• Information needed for fraud prevention and transaction verification.

Payments may be processed by third-party payment providers, banks or buy now, pay later services.

We generally do not receive or store complete payment card numbers. Payment providers process payment information under their own privacy and security practices.

Information Collected Automatically

When you visit our website, open an email, interact with an advertisement or use our digital services, we and our service providers may automatically collect information such as:

• Your Internet Protocol address.

• Your browser type.

• Your device type.

• Your operating system.

• Your approximate location based on your Internet Protocol address.

• Pages and products viewed.

• Search terms used.

• Links selected.

• Referring websites.

• Session dates and times.

• Shopping-cart activity.

• Checkout activity.

• Purchase and conversion activity.

• Email opens and link interactions.

• SMS interactions.

• Advertising interactions.

• Cookie, device and advertising identifiers.

This information may be collected through cookies, pixels, tags, log files, application programming interfaces and similar technologies.

Information Received From Third Parties

We may receive personal information from third parties such as:

• Shopify.

• Lightspeed.

• Marsello.

• Klaviyo.

• Payment providers.

• Buy now, pay later providers.

• Banks and financial institutions.

• Delivery and logistics providers.

• Meta, including Facebook and Instagram.

• Google, including Google Analytics and Google Ads.

• Other analytics and advertising platforms.

• Social media platforms.

• Fraud-prevention and cybersecurity providers.

• Competition or promotional partners.

• Publicly available sources.

• A person placing an order or enquiry on your behalf.

Where reasonably practicable, we will collect personal information directly from you.

Why We Collect and Use Personal Information

We may collect, hold and use personal information to:

• Process purchases and payments.

• Pick, pack, dispatch and deliver orders.

• Provide order confirmations, receipts and delivery updates.

• Create and manage customer accounts.

• Operate our loyalty program.

• Calculate and apply loyalty points, rewards and discounts.

• Provide customer service.

• Manage product enquiries, returns, refunds and exchanges.

• Provide body composition scans, consultations or other requested services.

• Record customer preferences and service history.

• Respond to questions, complaints and feedback.

• Send service-related communications.

• Send marketing communications where permitted.

• Send restock and product-availability notifications.

• Send abandoned-cart or checkout reminders.

• Personalise product recommendations, messages and website content.

• Measure and improve our website, stores, products and services.

• Analyse customer activity, product demand and business performance.

• Conduct promotions, competitions, giveaways and surveys.

• Detect, investigate and prevent fraud, misuse and security incidents.

• Enforce our website terms, policies and legal rights.

• Protect our customers, staff and business.

• Meet taxation, accounting, employment and regulatory obligations.

• Recruit and assess employment applicants.

• Comply with applicable laws and lawful requests.

• Carry out other purposes disclosed when information is collected.

We may also use personal information for a related purpose that you would reasonably expect, where permitted by law.

Our Main Technology Providers

We use third-party platforms to operate our website, retail stores, customer accounts, loyalty program and customer communications.

Shopify

We use Shopify to host and operate our online store.

Shopify may process information relating to:

• Website visits.

• Online customer accounts.

• Shopping-cart activity.

• Checkout.

• Online orders.

• Payments.

• Fraud prevention.

• Website analytics.

• Website performance.

Lightspeed

We use Lightspeed to support our point-of-sale, inventory and retail operations.

Lightspeed may process information relating to:

• In-store purchases.

• Customer profiles.

• Receipts.

• Transaction history.

• Refunds and exchanges.

• Loyalty account identification.

• Inventory and product activity.

• Staff processing of customer transactions.

Marsello

We use Marsello to operate aspects of our loyalty program and customer engagement activities.

Marsello may process information relating to:

• Loyalty membership.

• Loyalty points and rewards.

• Reward redemptions.

• Customer profiles.

• Online and in-store purchase history.

• Email and SMS subscriptions.

• Marketing preferences.

• Campaign interactions.

• Customer segmentation.

• Customer engagement.

Klaviyo

We use, or may use, Klaviyo for email and SMS marketing, marketing automation and customer communication.

Klaviyo may process information relating to:

• Email and SMS subscriptions.

• Marketing preferences.

• Purchase history.

• Browsing activity.

• Product interests.

• Shopping-cart and checkout activity.

• Customer segments.

• Email opens and link interactions.

• Automated marketing messages.

• Campaign performance.

Information may be transferred between Shopify, Lightspeed, Marsello and Klaviyo so that we can maintain customer profiles, operate our loyalty program, personalise communications and understand customer activity across our online and retail stores.

Each provider handles information in accordance with its own privacy terms, security practices and its arrangements with us.

Customer Accounts and Loyalty Programs

When you create an account or join our loyalty program, we may use your information to:

• Identify you online and in-store.

• Maintain your customer profile.

• Connect eligible online and in-store purchases.

• Record and calculate loyalty points.

• Apply rewards and member benefits.

• Maintain purchase and redemption history.

• Send loyalty-related communications.

• Personalise offers and recommendations.

• Detect duplicate, fraudulent or unauthorised accounts.

• Provide support relating to your membership.

You are responsible for keeping your account information accurate and protecting the confidentiality of your login details.

Please contact us promptly if you believe your account has been accessed without authorisation.

Direct Marketing

Where permitted by law, we may use your contact details and information about your interactions with us to send marketing and promotional communications.

These communications may include:

• Product launches and announcements.

• Sales and promotional offers.

• Discount codes.

• Loyalty points and reward updates.

• Restock notifications.

• Abandoned-cart reminders.

• Product recommendations.

• Birthday or customer milestone offers.

• Store events.

• Competitions and giveaways.

• Surveys and requests for feedback.

• Other information about ECS Supplements & Apparel.

Marketing may be delivered through:

• Email.

• SMS.

• Social media.

• Online advertising.

• Other communication channels you have agreed to receive.

We may use information about your purchases, website activity, store interactions, loyalty activity and previous communications to personalise or segment marketing messages.

You can opt out of marketing communications at any time by:

• Selecting the unsubscribe link in a marketing email.

• Following the opt-out instructions in an SMS.

• Updating your account or communication preferences, where available.

• Contacting us using the details at the end of this Privacy Policy.

There is no charge from ECS Supplements & Apparel to opt out, although your telecommunications provider may apply its normal charges.

After opting out of marketing, you may still receive necessary non-marketing communications relating to:

• Orders.

• Payments.

• Deliveries.

• Returns and refunds.

• Account security.

• Loyalty membership administration.

• Other services you have requested.

We do not use sensitive or health information for direct marketing unless you have provided the consent required by law.

Cookies and Similar Technologies

Our website and service providers may use cookies and similar technologies to:

• Operate essential website functions.

• Maintain your shopping cart.

• Keep you signed into your account.

• Remember preferences.

• Process transactions.

• Understand how visitors use our website.

• Measure website and advertising performance.

• Detect fraud and security risks.

• Personalise website content.

• Personalise or measure advertising.

• Support marketing and remarketing campaigns.

These technologies may include:

• Cookies.

• Pixels.

• Tags.

• Log files.

• Local storage.

• Advertising identifiers.

• Application programming interfaces.

• Similar tracking technologies.

Some cookies are necessary for the website to operate. Other cookies may be used for analytics, personalisation or advertising.

You may be able to manage cookies and tracking technologies through:

• Cookie controls available on our website.

• Your browser settings.

• Your device privacy settings.

• Your advertising platform settings.

Blocking certain cookies may affect the operation or functionality of parts of our website.

Analytics, Advertising and Social Media Platforms

We may use third-party analytics, advertising and social media platforms to understand how customers interact with our website, measure advertising performance, personalise marketing and deliver relevant advertisements.

These platforms may include:

• Meta, including Facebook and Instagram.

• Google, including Google Analytics and Google Ads.

• Other advertising, analytics and social media platforms that we use from time to time.

Depending on the services and settings enabled, these platforms may receive information such as:

• Your Internet Protocol address.

• Device and browser information.

• Cookie, device or advertising identifiers.

• Pages and products viewed.

• Website searches.

• Products added to your cart.

• Checkout activity.

• Purchase activity.

• Transaction values.

• Advertising interactions.

• Website and social media interactions.

• Hashed or pseudonymised contact information where customer matching features are used.

We may use this information to:

• Measure website traffic.

• Understand how customers find and use our website.

• Measure advertising sales and conversions.

• Create and manage advertising audiences.

• Deliver or measure relevant advertising.

• Retarget advertisements to people who have interacted with our website or products.

• Reduce repetitive or irrelevant advertising.

• Analyse and improve marketing campaigns.

• Understand customer interests and product demand.

Third-party advertising and analytics providers may combine information received from us with information they collect from other websites, applications or services, subject to their own privacy policies and your settings with those providers.

Meta, Facebook and Instagram

We may use Meta advertising services and Meta Business Tools, including the Meta Pixel, Conversions API and related advertising technologies.

These tools may allow Meta to receive information about activity on our website, including:

• Website and product views.

• Searches.

• Cart activity.

• Checkout activity.

• Purchases.

• Transaction values.

• Advertising interactions.

• Hashed customer contact information, where enabled.

Meta may use this information to provide advertising, measurement, audience matching, analytics, security and related services in accordance with its privacy policy and your settings with Meta.

Your interactions with our Facebook or Instagram pages may also be collected and processed by Meta under its own privacy practices.

Google Analytics and Google Ads

We may use Google services, including Google Analytics and Google Ads.

Google Analytics may use cookies and similar technologies to collect information about:

• Website visits.

• Pages viewed.

• Session activity.

• Device and browser information.

• Approximate location.

• Referring websites.

• Website performance.

• Customer journeys and conversions.

Google Ads may use website activity and advertising identifiers to:

• Measure advertising performance.

• Record conversions.

• Create advertising audiences.

• Deliver relevant advertisements.

• Support remarketing campaigns.

Google may process information in accordance with its own privacy policy and your Google account, browser and advertising settings.

Managing Advertising Preferences

You may be able to manage certain advertising and tracking preferences through:

• Cookie preference controls available on our website.

• Your browser privacy and cookie settings.

• Your device advertising settings.

• Facebook and Instagram advertising preferences.

• Google advertising settings.

• Privacy controls offered by other applicable platforms.

Disabling advertising cookies or personalised advertising does not necessarily mean that you will stop seeing advertisements. The advertisements may be less relevant to your interests.

When We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business, provide products and services, or comply with our legal obligations.

These parties may include:

• Shopify.

• Lightspeed.

• Marsello.

• Klaviyo.

• Meta, including Facebook and Instagram.

• Google, including Google Analytics and Google Ads.

• Payment processors.

• Buy now, pay later providers.

• Banks and financial institutions.

• Delivery, courier and logistics providers.

• Website hosting and cloud-storage providers.

• Information technology and cybersecurity providers.

• Analytics and advertising platforms.

• Social media platforms.

• Customer relationship management providers.

• Fraud-prevention and identity-verification providers.

• Professional advisers, including accountants, lawyers, auditors and insurers.

• Manufacturers and suppliers where necessary to investigate or resolve a product issue.

• Competition and promotional partners.

• Government bodies, regulators, courts and law-enforcement agencies.

• Potential purchasers, advisers or counterparties involved in a proposed sale, restructuring or transfer of all or part of our business.

We may disclose personal information:

• With your consent.

• For the purpose for which it was collected.

• For a related purpose you would reasonably expect.

• Where required or authorised by law.

• Where otherwise permitted under applicable privacy laws.

We only seek to disclose information reasonably required for the relevant recipient to perform its services, meet legal requirements or protect its systems.

We do not sell personal information to third parties for monetary payment.

Some advertising and analytics activities may involve the disclosure or sharing of identifiers, website activity or customer information with technology providers so they can provide advertising, measurement, audience matching or analytics services.

Overseas Disclosure and Storage

Some of our technology and service providers operate internationally or use overseas data centres, related entities, contractors or subprocessors.

As a result, personal information may be stored in, processed in or accessed from countries outside Australia.

Depending on the provider and its infrastructure, these countries may include:

• Canada.

• The United States.

• New Zealand.

• The United Kingdom.

• Countries within the European Economic Area.

• Singapore.

• Other countries in which a provider, related entity, contractor, subprocessor or data centre operates.

The countries involved may change as providers update their infrastructure, subprocessors and service arrangements.

Where required by law, we take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with applicable Australian privacy requirements.

Overseas recipients may be subject to privacy laws and lawful government-access requirements that differ from those applying in Australia.

Data Security

We take reasonable technical, physical and organisational measures to protect personal information from:

• Misuse.

• Interference.

• Loss.

• Unauthorised access.

• Unauthorised modification.

• Unauthorised disclosure.

These measures may include:

• Access controls.

• Password protection.

• Staff access restrictions.

• Secure ecommerce and payment providers.

• Security monitoring.

• Data backup practices.

• Staff training.

• Internal policies and procedures.

• Appropriate arrangements with service providers.

No method of electronic transmission or storage is completely secure. We cannot guarantee that personal information will never be accessed, disclosed, altered or destroyed without authorisation.

You should protect your account passwords and avoid sending sensitive information through insecure channels.

Data Breaches

If we become aware of a suspected data breach, we will investigate and take reasonable steps to contain and respond to it.

Where a data breach is likely to result in serious harm and notification is required under the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

Retaining Personal Information

We retain personal information for as long as reasonably necessary to:

• Fulfil the purposes for which it was collected.

• Maintain customer, transaction and loyalty records.

• Provide products, services and customer support.

• Resolve disputes, returns and complaints.

• Prevent fraud and misuse.

• Meet taxation, accounting, employment and legal obligations.

• Protect and enforce our legal rights.

Retention periods vary depending on the type of information and applicable legal requirements.

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it, unless we are required or authorised by law to retain it.

Information stored in system backups may remain for a limited period until the relevant backup is securely overwritten or deleted.

Accessing Your Personal Information

You may request access to personal information we hold about you.

To make a request, contact us using the details at the end of this Privacy Policy.

We may ask you to verify your identity before providing access.

We will respond within a reasonable period and will generally provide access in the manner requested where it is reasonable and practicable to do so.

In some circumstances, we may refuse access where permitted or required by law. Where appropriate, we will provide written reasons for the refusal and information about how you may make a complaint.

We will not charge you for making an access request. We may charge reasonable costs associated with providing access where permitted by law, and we will notify you of those costs beforehand.

Correcting Your Personal Information

You may ask us to correct personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.

You may also be able to update some information through your online account.

Please contact us if you cannot update the information yourself.

We may take reasonable steps to verify the requested correction and may ask you to provide supporting information.

If we decline to make a requested correction, we will provide written reasons where required by law and explain how you may make a complaint.

Withdrawing Consent

Where we rely on your consent to collect, use or disclose personal information, you may withdraw that consent by contacting us.

Withdrawing consent will not affect actions already taken before the consent was withdrawn.

Depending on the information and service involved, withdrawing consent may mean that we can no longer provide a particular service, feature or communication.

Anonymity and Pseudonyms

Where practicable and lawful, you may interact with us anonymously or using a pseudonym.

However, we will generally need identifying information to:

• Process and deliver an order.

• Provide an account or loyalty membership.

• Process payments.

• Manage returns, refunds or complaints.

• Conduct body composition scans or personalised services.

• Prevent fraud or misuse.

• Comply with legal obligations.

Children and Young People

Our website and products are intended for a general audience and are not specifically directed at young children.

Individuals under 18 should obtain permission from a parent or guardian before:

• Creating an account.

• Joining our loyalty program.

• Making a purchase.

• Submitting health information.

• Participating in a body composition scan or personalised assessment.

• Entering a competition.

• Subscribing to marketing communications.

Where appropriate, we may seek consent from a parent or guardian before collecting sensitive or health information from a person under 18.

Parents and guardians may contact us regarding personal information submitted by a child in their care.

Third-Party Websites and Services

Our website, emails or social media pages may contain links to third-party websites, platforms or services.

We are not responsible for the privacy, content or security practices of those third parties.

You should review the privacy policy of a third-party service before providing personal information.

Social Media

When you interact with us through Facebook, Instagram or another social media platform, the platform may collect and process information under its own privacy policy.

Information you post publicly may be visible to other users and may be collected, shared or used by others.

Please do not post payment information, health information or other confidential information publicly.

Employment Applications

If you apply for employment with us, we may collect information such as:

• Your name and contact details.

• Employment history.

• Education and qualifications.

• References.

• Work eligibility.

• Information provided during interviews.

• Background or screening information where relevant and lawful.

We use this information to assess your application, communicate with you and manage recruitment.

If your application is unsuccessful, we may retain the information for a reasonable period in case another suitable role becomes available, unless you ask us not to or we are required to retain it.

Employee records directly related to current or former employment may be handled under separate legal requirements and internal policies.

Privacy Complaints

You may contact us if you:

• Have a question about this Privacy Policy.

• Believe we have interfered with your privacy.

• Wish to make a privacy complaint.

• Wish to access or correct your information.

• Want to withdraw a consent you previously provided.

Please provide enough information for us to understand and investigate your concern.

We will acknowledge and investigate privacy complaints within a reasonable period. We may contact you for further information and will provide a response after completing our review.

If you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner.

Information about privacy complaints is available at oaic.gov.au.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business operations.

• Our systems and service providers.

• Our data-handling practices.

• Applicable laws and regulatory guidance.

The current version will be published on our website with its latest revision date.

We encourage you to review this Privacy Policy periodically.

Contact Us

For privacy enquiries, access or correction requests, withdrawal of consent or complaints, contact:

Privacy Officer
East Coast Supplements Regional Pty Ltd
Trading as ECS Supplements & Apparel
ABN 91 650 616 096

Email: info@eastcoastsupplements.com.au
Phone: 0401 680 744

Postal address:

ECS Supplements & Apparel
Shop 122, Orana Mall
56 Windsor Parade
Dubbo NSW 2830
Australia

Last updated: 30 July 2026

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information. 

How do we use your personal information? 
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to: 
- Communicate with you; 
- Screen our orders for potential risk or fraud; and 
- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.  

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns). 

Sharing you personal Information 
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. 

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights. 

Behavioural advertising 
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work. 

You can opt out of targeted advertising by using the links below: 
- Facebook: https://www.facebook.com/settings/?tab=ads 
- Google: https://www.google.com/settings/ads/anonymous 
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads  

Your rights 
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below. 

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States. 

Data retention 
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. 

Changes 
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. 

Minors 
The Site is not intended for individuals under the age of 18. 

Contact us 
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at info@eastcoastsupplements.com.au or by mail using the details provided below: 

ECS Supplements & Apparel
[Re: Privacy Compliance Officer] 
56 Windsor Parade, Shop 122, Dubbo NSW 2830, Australia