Privacy Policy

Last updated: 24 August 2026

About This Privacy Policy

This Privacy Policy explains how Trek2Health Ltd, trading as IGYB - I’VE GOT YOUR BACK, collects, holds, uses and discloses personal information when you visit or use the I’VE GOT YOUR BACK website and online store, make a purchase, submit information through the website, or otherwise communicate with us.

The I’VE GOT YOUR BACK online store is powered by Shopify.

In this Privacy Policy, “we”, “us” and “our” refer to Trek2Health Ltd and the I’VE GOT YOUR BACK store.

We are committed to handling personal information responsibly and transparently and, where applicable, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This Privacy Policy should be read together with our Terms of Service and other website policies.

1. Who We Are

The I’VE GOT YOUR BACK online store is operated by:

Trek2Health Ltd
Trading as: IGYB - I’VE GOT YOUR BACK
ABN: 41 635 257 046
ACN: 635 257 046
Address: 1434 Waterworks Road, The Gap QLD 4061, Australia
Email: ceo@trek2health.org.au
Phone: 0401 713 039

Trek2Health Ltd is an Australian registered charity.

2. Personal Information We Collect

The personal information we collect depends on how you interact with our website and Services.

It may include:

Contact and delivery information

• your name;
• email address;
• phone number;
• billing address;
• shipping address; and
• other contact information you provide.

Order and transaction information

• products purchased;
• product size, colour and quantity;
• order history;
• payment and transaction information;
• delivery information;
• returns, exchanges and refunds; and
• communications relating to your order.

Payment information may be collected and processed by Shopify and our payment service providers. We do not necessarily receive or retain complete payment card details.

Personalised T-shirt and campaign information

As part of the I’VE GOT YOUR BACK purchase experience, we may collect:

• whether a T-shirt is being purchased for you or someone else;
• the first name of a gift recipient;
• an optional personal message for the person receiving the T-shirt;
• a message of support for a frontline worker; and
• your choice about whether we may share your message anonymously as part of the I’VE GOT YOUR BACK campaign.

Please do not include unnecessary sensitive or highly confidential personal information in these message fields.

If you provide personal information about another person, such as the first name of a gift recipient, you should only provide information that is reasonably necessary for the purpose of the order.

Account information

If customer accounts are available, we may collect information associated with your account, such as login details, account preferences and order history.

Communications

We may collect information you provide when you:

• contact us by email, telephone or through the website;
• make an enquiry;
• request customer support;
• make a complaint; or
• otherwise communicate with us.

Website and device information

When you use our website, we or our service providers may automatically collect information such as:

• IP address;
• browser type;
• device information;
• website activity;
• pages viewed;
• referring websites;
• approximate location derived from technical information; and
• cookies and similar technologies.

3. How We Collect Personal Information

We may collect personal information:

• directly from you when you place an order or provide information through our website;
• when you communicate with us;
• automatically when you use our website;
• through Shopify and other service providers that support our online store;
• through product-personalisation and product-option services used on our website;
• from payment, delivery and fulfilment providers;
• from marketing and analytics services; and
• from other third parties where permitted by law.

Where practicable, you may interact with us without identifying yourself. However, some information is necessary for us to process orders, deliver products or respond to particular requests.

4. Why We Collect and Use Personal Information

We may collect, hold and use personal information for purposes including:

Processing and fulfilling orders

We use information to:

• process purchases;
• confirm orders;
• receive payment confirmation;
• prepare and dispatch merchandise;
• arrange delivery;
• provide tracking information;
• manage returns, exchanges and refunds; and
• provide customer support.

Delivering personalised messages

Where you submit a message for a T-shirt recipient, we use that information for the purpose of preparing or providing the personalised message associated with the order.

Where you submit a message to a frontline worker, we may use that message for the purpose of delivering or making it available to a frontline worker participating in a Trek2Health program or related I’VE GOT YOUR BACK initiative.

A frontline-worker message may therefore be read by Trek2Health personnel involved in administering the campaign and by the intended or selected frontline-worker recipient.

Anonymous campaign use

If you expressly choose to give us permission, we may use your frontline-worker message anonymously in connection with the I’VE GOT YOUR BACK campaign.

This may include use in:

• website content;
• social media;
• promotional material;
• campaign communications;
• presentations;
• fundraising material; or
• impact reporting.

We will not intentionally publish your name or contact details with the message under this permission.

Choosing not to provide this permission will not prevent your order from being processed or your frontline-worker message from being delivered for its intended campaign purpose.

Communicating with you

We may use your information to:

• send order and delivery notifications;
• respond to enquiries;
• provide customer support;
• contact you about problems with an order;
• manage complaints; and
• provide other service-related communications.

Marketing

Where permitted by law, and where any required consent has been obtained, we may use your contact information to send marketing or campaign communications.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the communication or by contacting us.

You may still receive transactional or service communications relating to an order even if you unsubscribe from marketing.

Website operation and improvement

We may use information to:

• operate and maintain our website;
• understand how visitors use the website;
• improve the customer experience;
• diagnose technical problems;
• measure website performance; and
• improve our products, communications and Services.

Security and legal purposes

We may use personal information to:

• prevent and investigate fraud or unauthorised transactions;
• protect our website and systems;
• comply with legal obligations;
• respond to lawful requests from regulators, courts or government agencies;
• resolve disputes; and
• enforce our Terms of Service and other policies.

5. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to organisations that assist us in operating the I’VE GOT YOUR BACK website and store.

These may include:

• Shopify, which provides our ecommerce platform;
• payment processors;
• shipping and delivery providers;
• product-option and personalisation service providers, including Easify where used;
• website, hosting and technology providers;
• email and communication providers;
• analytics and marketing providers;
• professional advisers where required; and
• government, regulatory or law-enforcement bodies where disclosure is authorised or required by law.

We only disclose information reasonably necessary for the relevant service or purpose.

We may also disclose information where:

• you ask or authorise us to do so;
• it is necessary to fulfil an order;
• it is required or authorised by law; or
• it is reasonably necessary to protect our legal rights or the safety of others.

6. Shopify

Our online store is hosted and powered by Shopify.

Shopify collects and processes information about your access to and use of our online store so that it can provide ecommerce, payment, security and related services.

Information you provide through the store may therefore be transmitted to and processed by Shopify and service providers that support the Shopify platform.

Shopify may also process information independently for purposes described in its own privacy policies.

You can learn more about Shopify’s privacy practices through Shopify’s Consumer Privacy Policy and Privacy Portal.

7. Cookies and Similar Technologies

Our website and the services that support it may use cookies, pixels and similar technologies.

These technologies may be used to:

• enable website functionality;
• remember preferences;
• keep the website secure;
• understand website traffic and usage;
• improve website performance;
• support analytics; and
• support advertising or marketing where applicable.

You may be able to manage cookies through your browser settings or through privacy controls made available on our website.

Disabling certain cookies may affect website functionality.

8. Overseas Processing and Disclosure

Some technology and service providers used by our website, including Shopify and related service providers, may store or process personal information outside Australia.

The countries involved may vary depending on the service provider, infrastructure used and the services provided.

Where Australian privacy law applies to an overseas disclosure, we will take reasonable steps required by applicable law in relation to that disclosure.

Because our technology providers may use international infrastructure and subcontractors, it may not always be practicable for us to identify every country in which information is processed or stored.

9. Security of Personal Information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

We also rely on security measures provided by Shopify and other service providers used to operate our store.

However, no internet transmission, website or electronic storage system can be guaranteed to be completely secure.

You should avoid providing unnecessary sensitive or confidential information through website message fields or unsecured communications.

10. Retention of Personal Information

We retain personal information for as long as reasonably necessary for purposes including:

• processing and fulfilling orders;
• administering personalised and frontline-worker messages;
• maintaining transaction and accounting records;
• managing returns, complaints and disputes;
• meeting legal, tax and regulatory requirements;
• preventing fraud; and
• maintaining records reasonably required for the operation of Trek2Health and the I’VE GOT YOUR BACK campaign.

When personal information is no longer required, we may take reasonable steps to delete, destroy or de-identify it, subject to legal and operational requirements.

Where you have consented to anonymous campaign use of a message, an anonymised version may continue to be retained and used after information identifying you is no longer required.

11. Information About Other People

If you provide information about another person, such as the first name of a gift recipient, please ensure that the information is relevant and reasonably necessary for the purpose for which you are providing it.

Do not provide sensitive or confidential information about another person unless you are authorised to do so.

12. Children's Privacy

Our online store is not specifically directed at children.

We do not knowingly seek to collect personal information from children where doing so would be inappropriate or unlawful.

If you believe a child has provided personal information to us in circumstances where it should not have been collected, please contact us.

13. Accessing or Correcting Your Personal Information

You may contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before responding to a request.

In some circumstances, applicable law may permit or require us to refuse access or correction. If this occurs, we will provide an explanation where required.

Requests can be made to:

ceo@trek2health.org.au

14. Privacy Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us using the details below.

Please provide enough information for us to understand and investigate the matter.

We will consider the complaint and respond within a reasonable period.

If you are not satisfied with our response and the Privacy Act applies to the matter, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).

Information about privacy complaints is available from the OAIC.

15. Third-Party Websites

Our website may contain links to third-party websites or online services that we do not control.

Those third parties may have their own privacy policies and information-handling practices.

We are not responsible for the privacy practices of third-party websites and recommend reviewing their privacy information before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our information-handling practices;
• website functionality;
• service providers;
• campaign activities;
• legal requirements; or
• our products and Services.

The current version will be published on this website and will show the date it was last updated.

17. Contact Us

For questions about this Privacy Policy, requests to access or correct your personal information, or privacy complaints, please contact:

Trek2Health Ltd
Trading as IGYB - I’VE GOT YOUR BACK
1434 Waterworks Road
The Gap QLD 4061
Australia

Email: ceo@trek2health.org.au
Phone: 0401 713 039
ABN: 41 635 257 046