Privacy Policy

Last updated: 3 August 2026

1. Background

1.1 This Privacy Policy explains how Subscribers Collective Pty Ltd ACN 676 421 239, trading as Stakt (Stakt, we, us or our) collects, holds, uses and discloses personal information when you visit our website, including stakt.global, apply for or hold a Stakt Membership, purchase Products, enter or participate in a ballot, submit a review or testimonial, contact us or otherwise interact with our services.

1.2 Capitalised terms used in this Privacy Policy have the meanings given to them in the Terms and Conditions, unless the context otherwise requires.

2. The personal information we collect

2.1 The personal information we collect depends on how you interact with Stakt. It may include:

(a) Identity and account information: your name, email address, username, password (stored only in hashed form), account identifier and Membership status.

(b) Contact and delivery information: your billing address, delivery address, phone number and communications preferences.

(c) Membership and transaction information: billing cycle, renewal and cancellation details, Products purchased, orders, returns, refunds, ballot entries, allocation outcomes and communications relating to your account or orders.

(d) Payment information: payment status, transaction identifiers, payment method type and limited payment information provided by our payment processors. We do not receive or store complete payment card details where these are collected directly by our payment processor Stripe and merchant facility (e.g. Visa, MasterCard etc.), last four digits of card and expiry date).

(e) Ballot and platform information: information needed to administer Product Drops, allocation limits and ballots, including information shared with or received from a Third-Party Platform.

(f) Customer service information: correspondence, complaints, reviews, testimonials, product rating and review content, order verification details, feedback, photographs and other information you give us when contacting us, including information provided in connection with a return or potential issue with a Product.

(g) Technical and usage information: IP address, browser type, device information, operating system, pages viewed, referring URLs, access times, activity on the website, cookie identifiers, advertising identifiers (including those associated with the Meta Pixel) and security or fraud-prevention information.

(h) Fraud and account-integrity information: information reasonably required to investigate suspected fraud, bots, scripts, duplicate accounts, manipulation of allocation controls or other misuse of the Service (including signals from anti-bot checks on our forms).

(i) Marketing preferences: whether you have subscribed or unsubscribed from marketing communications and your stated preferences.

2.2 “Sensitive information” is personal information that includes information about your race, ethnicity, beliefs, sexual orientation, trade union membership, criminal record, and health or genetic information. We generally do not need to collect sensitive information. Please do not provide sensitive information unless we ask for it or it is reasonably necessary to deal with your request.

3. How we collect personal information

3.1 We may collect personal information:

(a) directly from you when you create an account, apply for Membership, make a purchase, enter a ballot, submit a review, update your account, contact us or otherwise use the Service;

(b) automatically through your use of our website, including through cookies, log files, pixels and similar technologies;

(d) from a Third-Party Platform where you use that platform in connection with a Stakt ballot, queue, Drop or transaction;

(e) from delivery, fulfilment and logistics providers (such as Australia Post) in connection with an order shipment, tracking event or delivery;

(f) from service providers who assist us with fraud prevention, security, website hosting, content delivery, email communications, analytics, advertising measurement or customer support; and

(g) from publicly available sources or government authorities where reasonably necessary to investigate fraud, enforce our Terms or comply with law.

3.2 If you provide personal information about another person, you must ensure you are authorised to provide it to us.

4. Why we collect, use and disclose personal information

4.1 We collect, hold, use and disclose personal information to:

(a) create, administer and maintain your Stakt account and Membership;

(b) process Membership Fees, Product purchases, refunds and other transactions;

(d) process, fulfil, ship, track and deliver orders;

(e) communicate with you about your Membership, renewal, payment, orders, Product availability, ballot entries, delivery, returns, refunds, security alerts and service updates;

(f) verify, moderate and publish reviews and testimonials on our website;

(g) respond to questions, complaints, access requests and correction requests;

(h) measure and improve the performance of our advertising, including through the Meta Pixel;

(i) verify transactions, protect the Service and investigate or prevent fraud, bots, scripts, duplicate accounts, unauthorised access, payment issues and other misuse;

(j) maintain and improve the website, product offering and Member experience;

(k) comply with legal, regulatory, tax, accounting, consumer-protection and law-enforcement requirements;

(l) establish, exercise or defend legal claims; and

(m) send you marketing communications about Stakt, Products and Drops where we are permitted by law to do so and in accordance with your marketing preferences.

4.2 We may use de-identified and aggregated information for analytics, reporting, service improvement and business planning.

5. When we disclose personal information

5.1 We may disclose personal information to the following categories of recipients, but only where reasonably necessary for the purposes described in this Privacy Policy:

(a) Third-Party Platforms: to administer ballots, queues, access, allocation processes and related Product Drops.

(b) Payment processors: to process Membership Fees, Product payments, refunds, chargebacks and fraud checks.

(d) Infrastructure and security providers: content delivery and website security and our website hosting provider, to operate, secure and maintain the Service.

(e) Advertising and analytics partners: including Meta Platforms (via the Meta Pixel), to measure advertising performance and website usage.

(f) Communications providers: email delivery providers that send our transactional and marketing emails.

(g) Publication of reviews and testimonials: we will only publish your review or testimonial, first name, photographs or verified-buyer status where you have consented to that publication. You may withdraw your consent or request removal of the published content by contacting us using the details in clause 16.

(h) Product suppliers or manufacturers: where reasonably necessary to investigate a Product issue, recall, authenticity concern or warranty-related matter.

(i) Professional advisers, insurers and potential acquirers: where reasonably necessary for advice, insurance, or an actual or proposed sale or restructure of our business (subject to confidentiality obligations).

(j) Government authorities, regulators, courts and law-enforcement agencies: where required or authorised by law, court order or regulatory request.

5.2 We do not sell personal information to third parties as a commodity. We do not disclose personal information to unrelated third parties for their own direct-marketing purposes without your consent.

6. Third-Party Platforms

6.1 We may use Third-Party Platforms to administer ballots, queues, access, process payments, fulfil orders, and for other aspects of our services.

6.2 If you use a Third-Party Platform, that platform may collect personal information from you directly under its own privacy policy and terms. Stakt is not responsible for the privacy practices of any Third-Party Platform in relation to personal information you provide directly to it.

6.3 We may share personal information with a Third-Party Platform where reasonably necessary to administer a Product Drop, process a payment, manage access or fulfil an order. This may include your name, email address, Membership status, relevant account identifier, eligibility status, order or allocation information and other information reasonably required to operate the relevant process.

6.4 We encourage you to read the privacy policy and terms of any Third-Party Platform before providing personal information to it.

7. Cookies, analytics and advertising technologies

7.1 We use cookies and similar technologies (including pixels and local storage) on our website. These may collect technical and usage information, including your IP address, browser type, device information, pages viewed and interactions with our website.

7.2 We use these technologies to:

(a) keep the website and Member account functions working (including login, cart and checkout sessions);

(b) remember preferences and account settings;

(d) understand website traffic and performance; and

(e) improve the content, functionality and user experience of the Service.

7.3 Our website uses the Meta Pixel, provided by Meta Platforms. The Meta Pixel records certain events on our website, including pages and Products viewed, items added to a cart, checkout initiation, purchases, account registrations and Membership subscriptions. This information is sent to Meta, which may combine it with other information it holds about you and use it in accordance with its privacy policy, including to measure and improve the performance of Stakt’s advertising on Meta platforms. You can manage your advertising preferences through your Meta account and adjust your browser settings to limit cookies and similar tracking technologies.

7.4 You can adjust your browser settings to refuse or delete cookies and to limit tracking. However, some parts of the website (including account, checkout and security functions) may not work properly if you disable essential cookies.

8. Marketing communications

8.1 We may send you marketing communications about Stakt, Products, Drops, Membership benefits and other offers where permitted by law, including under the Spam Act 2003 (Cth).

8.2 You can opt out of marketing communications at any time by:

(a) accessing your account on our website and updating marketing preferences;

(b) using the unsubscribe link in the communication;

8.3 Opting out of marketing does not stop us from sending you service-related communications, including Membership, payment, order, delivery, security, recall, legal or account-related messages.

9. Overseas disclosures

9.1 Some of your personal information may be transferred, stored, processed, used or disclosed overseas by Stakt or by Stakt’s third-party service providers. This may happen where our service providers are located overseas, or where a transaction, information, service or product has an overseas connection.

9.2 Our website is hosted by Kinsta on servers located in Australia, so the core website and account database is stored in Australia. However, at the date this Privacy Policy was last updated, your personal information may be disclosed to recipients in the United States and other countries from time to time. These recipients (including Stripe, Meta and Cloudflare) process information in the United States and other countries where they operate. Kinsta and its underlying cloud infrastructure provider (Google Cloud) are headquartered in the United States and their personnel may access hosted data from outside Australia in the course of providing hosting, support and maintenance services. Overseas recipients may also include communications providers, analytics providers, fulfilment providers and other service providers that assist us to operate our website.

9.3 Where practicable, we will identify the countries in which overseas recipients are likely to be located and update this Privacy Policy if those countries materially change.

9.4 Before disclosing personal information to an overseas recipient, Stakt will take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information, unless an exception under the Privacy Act 1988 (Cth) applies. This may include selecting reputable service providers, reviewing their privacy and security practices, and using contractual or other safeguards addressing the handling, security, access, correction, retention and deletion of personal information.

9.5 Your personal information may be subject to the laws of the country in which an overseas recipient is located. Those laws may not provide the same level of protection as Australian privacy law. However, nothing in this Privacy Policy limits any rights you may have under the Privacy Act 1988 (Cth), including in relation to an overseas disclosure.

9.6 We may disclose personal information overseas where required or authorised by Australian law, a court or tribunal order, or where another exception under the Privacy Act 1988 (Cth) applies.

10. How we protect personal information

10.1 We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

10.2 Our safeguards include:

(a) encryption of data in transit using TLS/HTTPS across the website;

(b) payment card details collected, tokenised and processed by Stripe (which is PCI DSS compliant);

(d) network-level protection, firewall and DDoS mitigation provided by Cloudflare;

(e) access to personal information restricted to authorised personnel and service providers who need it to operate the Service; and

(f) keeping the software that powers the Service (WordPress, WooCommerce, MemberPress and related plugins) up to date with security patches.

10.3 No method of online transmission or storage is completely secure. You should keep your account credentials confidential and contact us promptly if you suspect unauthorised access to your account.

10.4 If we identify an eligible data breach, we will comply with our obligations under the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner where required.

11. How long we retain personal information

11.1 We retain personal information for as long as reasonably necessary to provide the Service, administer your account and Membership, fulfil orders, resolve disputes, meet legal obligations and protect our legal rights.

11.2 The retention period depends on the type of information and why we collected it. For example:

(a) account and Membership records may be retained while your account is active and for a reasonable period after closure;

(b) transaction, payment and tax records may be retained for the period required by applicable tax, accounting and legal requirements;

(c) delivery, return and Product-issue records may be retained for the period reasonably necessary to manage consumer guarantees, disputes and recalls;

(d) published reviews and testimonials may be retained while the relevant Product or content remains on our website, unless you ask us to remove them; and

(e) security and technical logs may be retained for a limited period unless needed for an investigation or legal claim.

11.3 When personal information is no longer required, we will take reasonable steps to destroy or de-identify it, subject to legal and operational requirements.

12. Accessing and correcting your personal information

12.1 You may request access to the personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

12.2 Please send your request to the contact details set out at clause 16 below. We may need to verify your identity before acting on a request.

12.3 We will respond within 14 business days. In most cases, we will provide access or make a correction without charge. We may charge a reasonable administrative fee for providing access where permitted by law, but we will tell you about any fee before proceeding.

12.4 In limited circumstances, we may refuse access or correction where permitted by law. If we do, we will provide written reasons and explain available complaint options.

13. Privacy complaints

13.1 If you have a concern about how we have handled your personal information, please contact us first using the details below and include “Privacy Complaint” in the subject line.

13.2 We will:

(a) acknowledge your complaint within 5 business days;

(b) investigate it fairly and confidentially; and

13.3 If we cannot resolve your complaint within 30 days, we will tell you why and provide an expected timeframe.

13.4 If you are dissatisfied with our response, you may complain to the Office of the Australian Information Commissioner:

Website: www.oaic.gov.au

Phone: 1300 363 992

Post: GPO Box 5288, Sydney NSW 2001

14. Children

14.1 Stakt is intended for people aged 18 years and over. We do not knowingly collect personal information from anyone under 18.

14.2 If you believe that a person under 18 has provided us with personal information, please contact us. We will take reasonable steps to delete that information unless we are required or permitted by law to retain it.

15. Changes to this Privacy Policy

15.1 We may update this Privacy Policy from time to time. We will publish the updated version on the website and update the “Last updated” date.

15.2 If a change is material, we may also notify you by email, through your account or by another appropriate method.

16. Contact us

16.1 For privacy questions, access or correction requests, or privacy complaints, contact:

Subscribers Collective Pty Ltd trading as Stakt ACN 676 421 239

Email: [email protected]

Address: Level 5/1070 Mt Alexander Rd, Essendon VIC 3040