Privacy policy

PRIVACY POLICY

Last updated: 18 August 2026

1. Who we are

ECOHEADS is owned and operated by 2B1K Imports Pty Ltd (ABN 52 161 929 540).

Shop 1, 1 Adelaide St, Bondi Junction, NSW 2022, Australia

info@ecoheads.com.au

ecoheads.com.au

This policy explains how we handle personal information when you visit ecoheads.com.au, buy from us, contact us or subscribe to our emails. It is the only privacy policy that applies to ECOHEADS and P.O.D by ECOHEADS. In this policy, “we”, “us” and “our” mean 2B1K Imports Pty Ltd, and “our website” means ecoheads.com.au.

2. What we collect

your name

your salon or business name

your email address and phone number

your billing and delivery addresses

your orders and payment details. Payments are handled by our payment providers and we do not store full card numbers

your marketing preferences

messages you send us

how you use our website, including your IP address, device and browser type, and the pages you visit

We do not collect sensitive information such as health, racial or political information.

3. How we collect it

Usually you give it to us directly, when you place an order, create an account, fill in a form, subscribe to our emails or contact us.

Some of it is collected automatically when you use the website, through cookies and similar technology.

Sometimes we receive it from a distributor or business partner who has referred you to us.

4. Why we use it

to process and deliver your order

to manage your account

to handle returns, warranty claims and product support

to answer your questions

to send you marketing emails where you have agreed, or where we are permitted to

to improve our products, our website and our service

to meet our legal, tax and record-keeping obligations

5. Who we share it with

We share personal information with the businesses that help us run ECOHEADS:

Shopify, which runs our online store

Klaviyo, which sends our marketing emails

Meta, which runs our Facebook and Instagram advertising and measures how those ads perform

Google, which runs our Google and YouTube advertising and measures how our website and ads are used

Judge.me, which collects and publishes our product reviews

Chatbase, which powers the chat assistant on our website. Anything you type into that chat is processed by Chatbase

our payment providers

our delivery and logistics providers

our distributors, where they serve your region

our professional advisers, such as accountants and lawyers

government agencies, courts or regulators, where the law requires it

a buyer or successor, if we sell or restructure the business

We do not sell or rent your personal information.

Shopify also processes your data when you visit and make purchases on our store, including to provide services based on your interactions with other merchants. You can read how Shopify handles that in the Shopify Consumer Privacy Policy at shopify.com/legal/privacy/consumers.

6. Where your information is stored

Some of the businesses that help us run ECOHEADS store and process information outside Australia. Australian privacy law asks us to tell you which countries your information is likely to go to, so here they are.

Our Shopify store data is hosted in the United States.

Klaviyo, which sends our marketing emails, stores all customer data in the United States.

Shopify moves data between its own facilities and its service providers. Those are located in Australia, Canada, France, Germany, India, Ireland, Italy, Japan, Lithuania, the Netherlands, New Zealand, Poland, Singapore, Spain, Sweden, the United Kingdom and the United States.

Some information reaches Meta and Google directly from our systems rather than from your browser. That means it is sent even if you use ad blocking or tracking protection. Meta and Google are both located in the United States.

Before we disclose personal information overseas we take reasonable steps to make sure it is handled consistently with the Australian Privacy Principles, including through the data processing terms we have in place with these providers.

7. If you are in the European Union or the United Kingdom

We sell and deliver into Europe, so the General Data Protection Regulation and the UK GDPR apply to how we handle your personal information. This section sets out what that means for you. It is in addition to the rest of this policy, not instead of it.

Our lawful bases for using your personal information are:

performance of a contract, where we need your information to take and fulfil your order and to provide support and warranty service

legal obligation, where we are required to keep business and tax records

consent, where you have subscribed to our marketing emails. You can withdraw consent at any time

legitimate interests, where we improve our products, our website and our service, protect against fraud, and measure how our advertising performs. Where we rely on legitimate interests you can object, and we will stop unless we have compelling grounds to continue

You have the right to ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, delete it, restrict how we use it, provide it in a portable format, and object to us using it. You can also withdraw consent to marketing at any time. To exercise any of these rights, email info@ecoheads.com.au.

We will respond within one month. If we need longer because a request is complex, we will tell you why within that month.

Some of the providers listed in section 5 are located outside the European Economic Area, including in the United States. Where personal information is transferred outside the EEA or the United Kingdom, we rely on the transfer terms our providers make available, which include the European Commission's standard contractual clauses and the UK addendum.

If you think we have handled your personal information wrongly, you can complain to the data protection authority in the country where you live or work.

8. Marketing and how to stop it

Every marketing email we send has an unsubscribe link. Click it and we will stop, within five working days at the latest. You can also email info@ecoheads.com.au and ask us to stop.

If you unsubscribe we will still send you messages about your orders, deliveries, warranty and product safety. Those are not marketing.

9. How long we keep it

We keep personal information for as long as we need it for the reasons set out above, and for as long as we are required to keep business and tax records. When we no longer need it, we take reasonable steps to delete it or to remove anything that identifies you.

10. Keeping it secure

We take reasonable steps to protect personal information from loss, misuse and unauthorised access. This includes access controls on our systems, and using established providers who run their own security programs.

No system is completely secure. We cannot guarantee the security of information sent to us over the internet.

11. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is wrong or out of date. Email info@ecoheads.com.au.

We will confirm who you are before we respond. If we cannot give you access or make a correction, we will tell you why in writing.

12. Complaints

If you think we have mishandled your personal information, email info@ecoheads.com.au with “Privacy complaint” in the subject line. Tell us what happened and what you would like us to do.

We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.

Website: oaic.gov.au

Phone: 1300 363 992

If you are in the European Union or the United Kingdom, you can instead complain to the data protection authority where you live or work.

13. Changes to this policy

We update this policy from time to time. The current version is always on this page, and the date at the top tells you when it last changed.