PRIVACY STATEMENTS

Last updated: 30 April 2026

1. ABOUT THIS POLICY

This Privacy Policy explains how Generation UCAN Ltd (“we”, “us”, “our”)
collects, uses, stores and discloses your personal information when you
visit generationucan.com.au or buy from us.

We are committed to protecting your privacy. We handle personal information
in accordance with the Australian Privacy Principles (APPs) under the
Privacy Act 1988 (Cth), and where applicable, the New Zealand Privacy
Act 2020 and the UK General Data Protection Regulation.

2. WHO WE ARE

Generation UCAN Ltd is a company registered in England and Wales under
company number 13974596. We trade in Australia as Generation UCAN Australia
under Australian Reference Number (ARN) 3000 2265 9464.

Registered office:
85 Great Portland Street, First Floor
London W1W 7LT, United Kingdom

Australian fulfilment address:
c/o Keepspace, Moorebank NSW, Australia

Contact for privacy matters: sales@generationucan.com.au

3. WHAT PERSONAL INFORMATION WE COLLECT

When you place an order, sign up to our newsletter, or contact us, we may
collect:

– Your name
– Email address
– Postal and delivery address
– Phone number (if provided)
– Payment information (card details are processed by Stripe and are not
stored on our servers)
– Order history and product preferences
– Communications you send us (emails, support requests)
– Information about how you use our website (IP address, browser type,
device, pages visited, referring URL) collected through cookies and
analytics tools

We do not knowingly collect personal information from anyone under 15
years of age. Our products are not suitable for children under 15 years
of age and we do not market to minors.

4. HOW WE COLLECT IT

We collect personal information directly from you when you:
– Place an order on our website
– Create an account
– Subscribe to our newsletter or sign up via a popup
– Tick the marketing opt-in checkbox at checkout
– Contact us by email or social media
– Respond to a survey or promotion

We also collect information automatically when you visit the site, through
cookies and similar technologies (see Section 8 below).

5. HOW WE USE YOUR INFORMATION

We use your personal information to:
– Process and fulfil your orders
– Communicate with you about your order (confirmations, dispatch, delivery)
– Provide customer service and respond to your enquiries
– Send marketing communications, but only if you have opted in
– Improve our website, products and services
– Detect and prevent fraud, abuse or security incidents
– Comply with our legal and tax obligations (including ATO record-keeping)

We do not engage in automated decision-making that produces legal or
similarly significant effects on you.

6. WHO WE SHARE IT WITH

We share your personal information with the following categories of
service providers, only to the extent necessary to operate our business:

– Keepspace (Moorebank, NSW, Australia) — order fulfilment and warehousing
– Australia Post (Australia) — delivery
– Stripe (Australia and United States) — payment processing
– MailerLite (United States and European Union) — email marketing
– Hostinger (European Union) — website hosting
– Google (United States) — website analytics (Google Analytics)

We require all service providers to handle your information in line with
this Policy and applicable privacy laws.

We may also disclose your personal information:
– To comply with a court order, subpoena, or other legal requirement
– To respond to a request from a government regulator (such as the ACCC,
OAIC, ATO, or TGA)
– To enforce our Terms and Conditions or protect our rights, property
or safety
– In the event of a sale, merger, or restructure of our business, in
which case the recipient must agree to handle your information in
accordance with this Policy

We do not sell your personal information to third parties for their own
marketing purposes.

7. OVERSEAS DISCLOSURE

Because we are a UK-registered company using global service providers,
your personal information will be transferred to and stored in countries
outside Australia and New Zealand, including:

– The United Kingdom (where Generation UCAN Ltd is based and accesses
customer data)
– The United States (Stripe, MailerLite, Google Analytics)
– The European Union (Hostinger, MailerLite EU servers)

By providing us with your personal information, you consent to this
overseas transfer. We take reasonable steps to ensure that overseas
recipients handle your information consistently with the Australian
Privacy Principles, but you should be aware that overseas recipients
may be subject to different privacy laws. The United Kingdom and
European Union have privacy laws that are broadly equivalent to or
stronger than Australia’s; United States providers are bound by
contractual data protection terms.

8. COOKIES AND TRACKING

Our website uses cookies and similar technologies. We use:

– Strictly necessary cookies — required for the site to function, such
as keeping items in your shopping cart and processing checkout. These
cannot be disabled.
– Analytics cookies — Google Analytics, which helps us understand how
visitors use the site. Data is collected in aggregate.
– Marketing cookies — used to measure the effectiveness of our
advertising and to retarget visitors with our ads on other websites.

You can control cookies through your browser settings. If you disable
non-essential cookies, parts of the site may not work as intended.

We do not currently respond to “Do Not Track” browser signals, as no
common industry standard exists for how to interpret them.

9. HOW WE PROTECT YOUR INFORMATION

We take reasonable steps to protect your personal information from
misuse, interference, loss, unauthorised access, modification or
disclosure. These steps include:

– Storing data on secured servers
– Restricting access to authorised personnel
– Encrypting payment information through Stripe (PCI DSS compliant)
– Using SSL encryption for all data transmitted to and from our website
– Reviewing our security practices regularly

No method of transmission over the internet is 100% secure. While we
use reasonable efforts to protect your information, we cannot guarantee
absolute security.

10. DATA BREACH RESPONSE

If we become aware of a data breach that is likely to result in serious
harm to you, we will notify you and the Office of the Australian
Information Commissioner (OAIC) as soon as practicable, in line with
the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).
For New Zealand customers, we will notify the Office of the Privacy
Commissioner where required under the New Zealand Privacy Act 2020.

11. HOW LONG WE KEEP YOUR INFORMATION

We retain your personal information only for as long as we need it for
the purposes set out in this Policy, or as required by law. Specifically:

– Order and transaction records: 7 years (to meet ATO and HMRC tax
record-keeping requirements)
– Marketing list data: until you unsubscribe, then deleted within
30 days
– Customer service correspondence: up to 3 years from your last
interaction
– Website analytics data: anonymised and retained per Google Analytics
defaults (currently 14 months)

12. YOUR RIGHTS

Under Australian, New Zealand and UK law, you have the right to:

– Access the personal information we hold about you
– Ask us to correct any inaccurate information
– Ask us to delete your personal information (subject to our legal
obligation to retain transaction records)
– Withdraw consent for marketing at any time, including by clicking
“unsubscribe” in any marketing email
– Make a complaint about how we handle your information

To exercise any of these rights, email us at sales@generationucan.com.au.
We will respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with:
– Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
– Office of the Privacy Commissioner New Zealand — privacy.org.nz
– UK Information Commissioner’s Office (ICO) — ico.org.uk

13. CHANGES TO THIS POLICY

We may update this Policy from time to time. The “Last updated” date
at the top of the page shows when it was last revised. Material changes
will be notified to active customers by email.

14. CONTACT US

For any privacy-related questions or to exercise your rights:

Generation UCAN Ltd
Email: sales@generationucan.com.au
Post: 85 Great Portland Street, First Floor, London W1W 7LT,
United Kingdom