Privacy policy
Privacy Policy
This Privacy Policy describes how LUSS ACTIVE (lussactive.com) (the "Site", "we" or "us") collects, uses and discloses your Personal Information when you visit or make a purchase from the Site.
Contact
After reviewing this policy, if you have any questions, want more information about our privacy practices, or would like to make a complaint, please email us at hello@lussactive.com.
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual as "Personal Information".
Device information
- Purpose of collection: to load the Site accurately for you, and to understand how the Site is used so we can improve it.
- Source of collection: collected automatically when you access our Site using cookies, log files, web beacons, tags or pixels.
- Disclosure for a business purpose: shared with our processor Shopify, and with Microsoft Clarity and Meta as described under Behavioural Advertising.
- Personal Information collected: version of web browser, IP address, time zone, cookie information, what pages or products you view, search terms, and how you interact with the Site.
Order information
- Purpose of collection: to provide products to you, process your payment, arrange shipping, send you invoices and order confirmations, communicate with you, screen orders for potential risk or fraud, and where you have asked us to, send you information about our products.
- Source of collection: collected from you.
- Disclosure for a business purpose: shared with our processors Shopify, Australia Post and Klaviyo.
- Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address and phone number.
Customer support and reviews
- Purpose of collection: to respond to your enquiries and to collect and display product reviews.
- Source of collection: collected from you.
- Disclosure for a business purpose: shared with Loox.
- Personal Information collected: name, email address, order details, review content and any photos you choose to submit.
Sharing Personal Information
We share your Personal Information with service providers who help us run our business and fulfil our contracts with you. For example:
- We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information at https://www.shopify.com/legal/privacy.
- We use Australia Post to deliver your order.
- We use Klaviyo to send marketing and transactional emails.
- We use Loox to collect and display product reviews.
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Behavioural Advertising
We use your Personal Information to provide you with targeted advertising and marketing communications we believe may be of interest to you. For example:
- We use Microsoft Clarity to understand how visitors use our Site. Clarity records interactions such as clicks, scrolling and mouse movement, and allows us to replay anonymised sessions so we can improve the Site. You can read how Microsoft handles this information at https://privacy.microsoft.com/privacystatement.
- We use the Meta Pixel to measure and improve our advertising on Facebook and Instagram. You can read Meta's privacy policy at https://www.facebook.com/privacy/policy.
- We use Klaviyo to send marketing emails to people who have signed up to hear from us. You can unsubscribe at any time using the link at the bottom of any email. Klaviyo's privacy policy is at https://www.klaviyo.com/legal/privacy.
- We use Loox to collect and display product reviews, which may include your first name, your review and any photos you choose to share. Loox's privacy policy is at https://loox.io/privacy.
- We use Instafeed to display our Instagram content on the Site.
- We use Shopify Audiences to help us show ads on other websites to buyers who have made purchases with other Shopify merchants and who may also be interested in what we offer. We share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.
We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly, and in some cases through cookies or similar technologies, which you may consent to depending on your location.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative's educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
Opting out. You can opt out of targeted advertising through the following links:
- Facebook and Instagram: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Microsoft Clarity: https://privacy.microsoft.com/privacystatement
You can also opt out of some of these services at the Digital Advertising Alliance opt-out portal: https://optout.aboutads.info.
Using Personal Information
We use your Personal Information to provide our services to you, which includes offering products for sale, processing payments, shipping and fulfilling your order, responding to your enquiries, and keeping you up to date on new pieces and news from LUSS where you have asked us to.
Security
We take reasonable steps to protect your Personal Information from misuse, loss, unauthorised access, modification and disclosure. Payment information is processed by Shopify and is not stored by us.
Lawful basis
Under the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your Personal Information under the following lawful bases:
- your consent
- the performance of the contract between you and the Site
- compliance with our legal obligations
- to protect your vital interests
- to perform a task carried out in the public interest
- for our legitimate interests, which do not override your fundamental rights and freedoms
Retention
When you place an order through the Site, we retain your Personal Information for our records unless and until you ask us to erase it. We may need to retain some information to meet our legal and tax obligations. For more information on your right of erasure, please see the sections below.
Automatic decision-making
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making, including profiling, where that decision-making has a legal effect on you or otherwise significantly affects you.
We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud, which does not have a legal or otherwise significant effect on you. Services that include elements of automated decision-making include:
- A temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
- A temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.
GDPR
If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that it be corrected, updated or erased. To exercise these rights, email us at hello@lussactive.com.
Your Personal Information will initially be processed in Ireland and will then be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify's GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
CCPA
If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the "Right to Know"), to port it to a new service, and to ask that it be corrected, updated or erased. To exercise these rights, email us at hello@lussactive.com.
If you would like to designate an authorised agent to submit these requests on your behalf, please contact us at the same address.
Australian privacy
LUSS ACTIVE is based in Australia and handles Personal Information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
You can request access to the Personal Information we hold about you, or ask us to correct it, by emailing hello@lussactive.com. We will respond within a reasonable period.
Cookies
A cookie is a small amount of information downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences, such as your region selection, so you don't have to re-enter this information each time you return or move between pages. Cookies also tell us how people use the website, for instance whether it is their first visit or whether they visit often.
We use the following cookies to run the Site and provide our services.
Cookies necessary for the functioning of the store
| Name | Function | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _storefront_u | Used to facilitate updating customer account information. | 1min |
| _tracking_consent | Tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with shopping cart. | 2w |
| cart_currency | Used in connection with shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| cart_ts | Used in connection with checkout. | 2w |
| cart_ver | Used in connection with shopping cart. | 2w |
| checkout | Used in connection with checkout. | 4w |
| checkout_token | Used in connection with checkout. | 1y |
| dynamic_checkout_shown_on_cart | Used in connection with checkout. | 30min |
| hide_shopify_pay_for_checkout | Used in connection with checkout. | session |
| keep_alive | Used in connection with buyer localization. | 2w |
| master_device_id | Used in connection with merchant login. | 2y |
| previous_step | Used in connection with checkout. | 1y |
| remember_me | Used in connection with checkout. | 1y |
| secure_customer_sig | Used in connection with customer login. | 20y |
| shopify_pay | Used in connection with checkout. | 1y |
| shopify_pay_redirect | Used in connection with checkout. | 30 minutes, 3w or 1y depending on value |
| storefront_digest | Used in connection with customer login. | 2y |
| tracked_start_checkout | Used in connection with checkout. | 1y |
| checkout_one_experiment | Used in connection with checkout. | session |
| checkout_session_lookup | Used in connection with checkout. | 3w |
| checkout_session_token | Used in connection with checkout. | 3w |
| identity-state | Used in connection with customer authentication. | 24h |
| identity_customer_account_number | Used in connection with customer authentication. | 12w |
Reporting and analytics
| Name | Function | Duration |
|---|---|---|
| _landing_page | Track landing pages. | 2w |
| _orig_referrer | Track landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_d | Shopify analytics. | session |
| _shopify_s | Shopify analytics. | 30min |
| _shopify_sa_p | Shopify analytics relating to marketing and referrals. | 30min |
| _shopify_sa_t | Shopify analytics relating to marketing and referrals. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _y | Shopify analytics. | 1y |
| _shopify_evids | Shopify analytics. | session |
| customer_auth_provider | Shopify analytics. | session |
| customer_auth_session_created_at | Shopify analytics. | session |
Third party cookies
| Provider | Function |
|---|---|
| Microsoft Clarity | Session recording and heatmaps so we can understand how the Site is used. |
| Meta | Advertising measurement for Facebook and Instagram. |
| Klaviyo | Identifying subscribers and measuring email engagement. |
| Loox | Collecting and displaying product reviews. |
| Google reCAPTCHA and hCaptcha | Protecting our forms from spam and abuse. |
The length of time a cookie remains on your device depends on whether it is a "persistent" or "session" cookie. Session cookies last until you stop browsing, and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can affect your experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether to accept them through your browser controls, usually found under "Tools" or "Preferences". More information on how to block, manage or filter cookies can be found in your browser's help file or at www.allaboutcookies.org.
Please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt out of certain uses of your information by these parties, please follow the instructions in the Behavioural Advertising section above.
Do Not Track
Because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices, or for other operational, legal or regulatory reasons.
Complaints
If you would like to make a complaint, please email us at hello@lussactive.com.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at https://www.oaic.gov.au/privacy/privacy-complaints.
If you are in the EEA or the United Kingdom, you may also lodge a complaint with your local data protection authority.
Last updated: 2 October 2026