Privacy

Incase Privacy Policy

This Privacy Policy explains how Hive Deal Pty Ltd (ABN 44 607 344 454) ("Hive Deal", "we", "us" or "our") collects, holds, uses and discloses personal information when you visit incase.com.au, purchase Incase products from us, contact our customer service team, or otherwise interact with us.

We operate this website as the authorised Australian distributor of Incase-branded products. The Incase trademark is owned by Vevey Brands LLC, a separate entity headquartered in the United States.

We are committed to handling personal information in accordance with the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

1. Who we are

Hive Deal Pty Ltd is an Australian company (ABN 44 607 344 454) and is the operator of incase.com.au. Hive Deal is the entity responsible for personal information collected through this website under the Privacy Act 1988.

Our contact details are set out in Section 13 below.

2. Personal information we collect

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. We collect the following categories of personal information.

2.1 Information you provide to us

• Identity and contact details: first and last name, email address, postal and delivery address, telephone number.
• Account information: username, password (stored in hashed form), account preferences, communication preferences.
• Order and payment information: products purchased, order history, billing address, and limited payment card details (full card numbers are processed by our payment processors and are not stored by Hive Deal).
• Customer service information: the content of any communications you send us, including emails, chat messages and call recordings (where applicable and where notice is given).
• Marketing and survey responses: information you provide when you sign up for our newsletter, enter a competition, or respond to a survey.
• User-generated content: product reviews, ratings, comments and any other content you choose to submit to us.

2.2 Information collected automatically

• Device and connection information: IP address, browser type and version, operating system, device identifiers, referring URL, and pages viewed.
• Usage information: actions taken on our site, time spent on pages, search terms, items added to cart, and similar interaction data.
• Cookies and similar technologies: see Section 8 below.

2.3 Information from third parties

• Authorised resellers and retailers (for example, Amazon Australia) where you have purchased Incase products through them and they share information with us in accordance with their own privacy policies.
• Advertising and analytics partners, who may share information about how you interacted with our advertisements or our website.
• Social media platforms, where you choose to interact with us through those platforms.

2.4 Sensitive information

We do not generally collect "sensitive information" as defined under the Privacy Act 1988 (such as health, racial or ethnic origin, political opinions, religious beliefs, or biometric information). Where we do need to collect sensitive information for a specific purpose, we will obtain your consent first, except where the law permits or requires collection without consent.

3. How we use personal information

We use personal information for the following purposes:

• To provide our products and services: processing and fulfilling orders, shipping products, processing returns and warranty claims, managing your account, and responding to customer service enquiries.
• To communicate with you: sending order confirmations, shipping notifications, transactional emails, and (where you have consented or where permitted by law) marketing communications, newsletters, and promotional offers.
• To improve our products and services: analysing site usage, conducting research, and improving the customer experience.
• For marketing and advertising: showing you relevant ads on third-party platforms, measuring advertising effectiveness, and personalising content. You may opt out at any time as described in Section 6.
• For security, fraud prevention, and legal compliance: detecting and preventing fraud, protecting our systems, complying with applicable laws and legal process, and enforcing our terms of service.
• For business operations: corporate transactions including mergers, acquisitions, and reorganisations, where personal information may be transferred as part of the transaction.

We collect personal information directly from you wherever practicable. Where we collect personal information from a third party, we will take reasonable steps to ensure you are notified of the collection.

4. Disclosure of personal information

We do not sell personal information.

We disclose personal information to the following categories of recipients, only as necessary for the purposes described in this Policy:

• Service providers and processors: including Shopify (e-commerce platform), NetSuite (order management), Klaviyo (email marketing), Google (analytics and advertising), Meta (advertising), payment processors, and shipping carriers including Australia Post, StarTrack, DHL and FedEx.
• Authorised resellers and retail partners: where required to fulfil orders or manage warranty and returns.
• Professional advisers: lawyers, auditors, accountants and consultants, where reasonably required.
• Government, regulatory and law enforcement bodies: where required by law or in response to a valid legal request.
• Acquirers and successors: in the context of a corporate transaction, subject to appropriate confidentiality obligations.

We require all service providers to handle personal information in accordance with our instructions and applicable law, and to implement appropriate security safeguards.

5. Cross-border disclosure of personal information

Hive Deal is an Australian company and we primarily store and process personal information in Australia. However, some of the service providers listed in Section 4 are located in or have infrastructure in the United States, the European Union, the United Kingdom, Canada, the Philippines, and other jurisdictions.

By providing your personal information to us, you acknowledge that we may disclose your personal information to these overseas service providers as necessary for them to provide services to us. We take reasonable steps to ensure that overseas recipients handle your personal information in a manner consistent with the APPs, including by entering into contractual data protection terms with our service providers. However, you acknowledge that we may not be required, and may not be in a position, to take such steps in every case, and that overseas recipients may not be subject to Australian privacy laws.

6. Direct marketing and your choices

We will only send you direct marketing communications where we are permitted to do so under the Privacy Act 1988 and the Spam Act 2003 (Cth). You can opt out of marketing communications at any time:

• by clicking the "unsubscribe" link in any marketing email;
• by replying STOP to any marketing SMS;
• by updating your communication preferences in your account; or
• by emailing us at the addresses in Section 13.

We will action opt-out requests within a reasonable period and in any event within the timeframes required by applicable law. Even if you opt out of marketing, we will continue to send you transactional and service-related communications (for example, order confirmations and shipping updates).

7. How long we keep personal information

We retain personal information for as long as necessary for the purposes described in this Policy, including:

• to provide you with our products and services;
• to comply with legal, accounting, tax and reporting obligations (typically 7 years for transaction records under Australian law);
• to resolve disputes, defend legal claims, and enforce our agreements; and
• for legitimate business purposes such as analytics and product improvement, in de-identified or aggregated form where practicable.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

8. Cookies and tracking technologies

We use cookies and similar technologies (including pixels, web beacons, and SDKs) to operate our site, remember your preferences, analyse site performance, and deliver advertising. Categories include:

• Strictly necessary cookies: required for the site to function (for example, shopping cart and login).
• Analytics cookies: help us understand how visitors use our site (for example, Google Analytics).
• Advertising and marketing cookies: used to show you relevant advertising on third-party sites and measure campaign performance (for example, Meta Pixel and Google Ads).

You can manage cookies through your browser settings — most browsers allow you to view, delete, or block cookies through their privacy or settings menu. Disabling certain cookies may affect site functionality.

9. Data security

We take reasonable technical, physical, and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include encryption in transit using TLS, access controls, network security measures, secure authentication, and regular review of our security practices.

No method of transmission or storage is completely secure. While we wok to protect your information, we cannot guarantee its absolute security, and you provide it at your own risk.

10. Notifiable data breaches

If a data breach occurs that is likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

11. Automated decision-making

We do not currently make decisions that produce legal or similarly significant effects on you using solely automated means. To the extent we use automated tools (including AI-enabled systems) for fraud screening, personalisation, or similar purposes, those tools support — but do not solely determine — decisions that significantly affect your rights or interests.

12. Children's privacy

Our site and products are not directed to children. We do not knowingly collect personal information from children under the age of 16 without parental consent. If you believe we have collected personal information from a child without appropriate consent, please contact us and we will take steps to delete that information.

We will comply with the Children's Online Privacy Code being developed by the OAIC once it commences (expected from 10 December 2026).

13. Your rights and how to contact us

You have the following rights in relation to your personal information, subject to applicable law:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Deletion: request deletion of your personal information, subject to legal exceptions.
• Object or restrict: object to or request that we restrict certain types of processing.
• Withdraw consent: where we rely on your consent, withdraw it at any time.

We will respond to requests within a reasonable period and in any event within 30 days. We may need to verify your identity before actioning a request. Access requests are generally provided free of charge, although we may charge a reasonable fee for retrieving complex or archived information.

Contact details

Hive Deal Pty Ltd ABN 44 607 344 454 Email: australia@incase.com Post: Address 66-72 Alexandra Place, Murarrie, QLD, 4172

Making a privacy complaint

If you have a privacy concern or complaint, please contact us first using the details above. We will acknowledge your complaint promptly and aim to respond substantively within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy on this page with a revised "Last updated" date. Where changes are material, we will provide reasonable notice (for example, by email or through a prominent notice on our site) before the changes take effect.