This 2XU Privacy Policy pertains to the 2XU Affiliate Marketing system and describes how we may collect and use personal information and the rights granted to merchants, affiliates and customers regarding their respective data.

 

By joining the Affiliate program, you signify your approval of the terms set out in this Privacy Policy, and the Operating Agreement and Terms and Conditions set forth at https://ca.2xu.com/pages/terms-and-conditions (“Operating Agreement”). If you do not agree to this Privacy Policy and the Operating Agreement, you are not be authorized to use the affiliate marketing system. Please carefully review this Privacy Policy and the Operating Agreement.

 

This Policy only applies to information collected and maintained by us. We may update this Privacy Policy from time to time in order to reflect, by updating this Policy website page, which is how users will be notified of changes (for example, changes to our privacy practices or for other operational, legal, or regulatory reasons). You are encouraged to regularly review this Policy website page for changes to these terms. Prior versions of this Policy are available for review but are inapplicable once updated. By continuing to our affiliate program after these changes are posted, you agree to the revised policy.

 

 

PERSONAL INFORMATION CONTROLLER

 

Any Personal Information provided to or gathered by 2XU under this Privacy Policy will be stored and controlled by 2XU (the data controller).

 

COLLECTION OF PERSONAL INFORMATION

 

Personal Information means personally identifiable information such as name, postal or email addresses, telephone, fax or mobile numbers. We will explicitly ask you when we need information that personally identifies you or allows us to contact you ("Personal Information"). Personal Information may include, but is not limited to the following categories:

 

·       First and last name

·       Contact information (company (if applicable), name, email, phone, physical address)

·       ID data such as browser type and operating system details

·       Unique identifiers such as user name, account number and password details

·       Social media handles (i.e. Instagram, TikTok, etc.)

·       Demographic information such as age, education, gender and interests

·       Payment and financial information

 

Generally, Personal Information is requested when you request a particular service or information from us, when you purchase access to a product or service. The extent of the Personal Information to which you submit is determined and controlled by you at your sole discretion. Additionally, when possible, we will provide you with the opportunity to make sure that your Personal Information is correct and up to date.

 

Information collected from Merchants

 

When merchant uses the app, we are automatically able to access certain types of information from your Shopify account such as email, first name, last name, and shop information (shop domain, shop currency, shop address). We collect this information to provide you with our Services; for example, to confirm your identity, contact you, provide customer support when you contact us, provide you with advertising and marketing activities.

 

Information collected from Affiliates

 

When an Affiliate signs up to join a program, we collect information to inform merchants such as email, personal information, payment details, social network information, and how the affiliate discovered the program. The information would help merchant evaluate affiliate background and potential, along with process specific activities within the app and contact affiliate if needed.

 

Information collected from Customers when visiting merchant website

 

In order to track referral order, when customers visit merchant website and make a purchase, the 2XU system will collect information of order such as total order, order items, and order ID.

 

USE OF PERSONAL INFORMATION

 

We may use Personal Information:

 

·       to respond to your inquiries and fulfil your requests;

·       to inform you about information regarding the website, products and/or services that you may be interested in, or in which you are already enrolled, changes to terms, conditions, and policies and/or other administrative information;

·       to deliver marketing communications that may be of interest to you, including, ads or offers tailored for you;

·       to send email newsletters and commercial messages to readers who have voluntarily opted to receive the products and provided their email address. Each email we send includes an "opt-out" link readers can use to remove themselves from the distribution list;

·       to respond to merchants, affiliates and/or customers’ service requests and support needs more efficiently;

·       to manage merchant, customer and/or affiliate relationships:  We may use personal information that you provide, particularly your contact information and information relevant to the applicable product or service offerings, for the purpose of managing the relationship and in connection with any potential contractual arrangements between us;

·       to improve products, processes and/or services;

·       to comply with federal and provincial laws requiring employers to maintain certain records; and/or

·       to process payments.

 

All communications are sent in accordance with applicable laws including Canada’s Anti-Spam Legislation (CASL).

 

 

DISCLOSURE OF PERSONAL INFORMATION

 

Ensuring your privacy is important to us. We do not share your personal information with third parties except as described in this Privacy Policy. We may share your personal information with third-party service providers who we employ to process specific functions; examples include providing email marketing activity, analyzing data and other marketing support. Third-party service providers have access to Personal Information only as needed to perform their functions and they must use the Personal Information in accordance with this Privacy Policy.

 

We may also disclose your personal information to any applicable third-party service-providers, including but not limited to those referenced in this Privacy Policy, with your prior consent.

 

Third parties that may have access to data, including Personal Information, through our Website and the purposes they perform are described below:

 

Shopify - https://www.shopify.com/legal/privacy

 

UpPromote is a Shopify plug-in. Please refer to the above Shopify privacy terms as well as the Shopify terms of service, available at https://www.shopify.com/legal/terms.

 

AP21 - https://www.apparel21.com/privacy-policy

 

AP21, our Enterprise Resource Planning (ERP) system, integrates with Shopify to securely collect and process order, customer, inventory and product data. This integration enables streamlined operations such as order fulfilment, stock management, accounting and customer service. All data is handled in compliance with applicable privacy regulations and is used solely to support and enhance your shopping experience. Please refer to the above AP21 privacy terms for more information about how AP21 protects Personal Information we share with them on your behalf with respect to the services.

 

Gorgias - https://www.gorgias.com/legal/privacy

 

Gorgias is a Shopify app that helps manage customer support requests across channels, including email, chats, SMS, and social media, with AI and automation features.

 

Loop Returns - https://www.loopreturns.com/security/

 

Loop Returns is a Shopify app that manages the return and exchange process through a self-service portal, providing customers with automated options for exchanges, store credit, and prepaid shipping labels.

Forter - https://www.forter.com/privacy-security-hub/

 

Forter is a Shopify app that provides automated fraud prevention and identity verification by analyzing customer data in real-time to assess transaction risk and ensure secure order processing.

Royal Bank of Canada - https://www.rbc.com/privacysecurity/ca/

 

We will share banking details, name, email address, physical address, Ban name, routing and account details and Swift code details with Royal Bank of Canada (“RBC”) for purposes of paying any fees due to You, hereunder. Please refer to the above RBC privacy terms for more information about how RBC protects Personal Information we share with them on your behalf with respect to the services.

 

 

Other Disclosure of Personal Information

 

·       We do not sell, trade, or rent Personal Information to others.  We may disclose Personal Information about you to affiliated companies, third party service providers and partners who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our website), or who otherwise process Personal Information for purposes that are described in this Privacy Policy or notified to you when we collect Personal Information about you. Parties with whom we may share Personal Information are bound to contracts requiring them to use and disclose Personal Information only for the permitted purposes set forth in the contract and to use reasonable security measures to protect Personal Information from unauthorized access and use.

·       We may also disclose Personal Information about you to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use Personal Information only for the purposes disclosed in this Privacy Policy.

·       In certain situations, we may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet law enforcement requirements.

 

Terms for Disclosing Personal Information

 

We may disclose Personal Information if required to do so by law or in the good-faith belief that such action is necessary to (a) conform to the edicts of the law or comply with legal process served on us or our affiliates; (b) protect and defend our rights or property, or those of our users; or (c) act as immediately necessary in order to protect the personal safety of our users or the public.

 

 

USE OF SERVICES BY MINORS

The UpPromote app, and our website and services are not directed at persons under 16 and we do not intend to collect personal information from children under 16 in our capacity as a controller. If you become aware that a person under 16 has provided us with personal information without appropriate consent, then please contact us using the details below so that we can take the appropriate steps in accordance with our legal obligations and this Privacy Policy.

YOUR CANADIAN PRIVACY RIGHTS

The Personal Information Protection and Electronic Documents Act, Schedule 1, Clause 4.9 permits Canadian residents that are users of our Site to request certain information regarding the existence, use, and disclosure of personal information and authorizes access to that information. To make such a request, please send an email to privacy@2xu.com. We may require that you provide us with acceptable verification of your identity before providing access to such information.

 

If you are an affiliate and wish to exercise these rights, please contact the merchant you interacted with directly — we serve as a processor on their behalf, and can only forward your request to them to allow them to respond.

 

Removal

 

You may opt-out of receiving promotional communications, remove your information from our database, unsubscribe from communications related to our products or services, or cancel any accounts you may have by contacting us at privacy@2xu.com. In some cases, we may not be able to remove your Personal Information, in which case we will explain that we are unable to do so and why.

 

COOKIES AND SIMILAR TECHNOLOGIES

Our Site uses cookies and similar technologies (collectively referred to as cookies) to distinguish you from other users of our Site. This helps us enhance and personalize your user experience, to monitor and improve our Site and services, and for other internal purposes. As is true of most websites, we gather certain information automatically.

We use the following types of cookies:

Strictly necessary cookies. These cookies are required for the essential operation of our Site such as to authenticate you and prevent fraudulent use.

Analytical/performance cookies. These cookies allow us to recognize and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our Site works, for example, by ensuring that you can find information easily.

Functionality cookies. These cookies are used to recognize you when you return to our Site. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies. These cookies record your visit to our Site, the pages you have visited and the links you have followed. We will use this information to make our Site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

We may partner with a third party to either display advertising on our Site or to manage our advertising on other sites. Our third-party partner may use technologies such as cookies to gather information about your activities on this Site and other sites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used to serve you interest-based ads, you may opt-out by contacting us. Please note this does not opt you out of being served ads. You will continue to receive generic ads.

You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including strictly necessary cookies) you may not be able to access all or parts of our site.

 

Please note that we use third-party analytics services for our website, such as Google Analytics. There is more information about how these service providers including Google collect, use and

process data on their respective websites including at http://www.google.com/policies/privacy/partners/.

 

 

SECURITY

 

We use reasonable efforts to maintain the accuracy and integrity of Personal Information and to update it as appropriate. We have implemented physical and technical safeguards to protect Personal Information from loss, misuse, and unauthorized access, disclosure, alternation, or destruction. We also employ access restrictions, limiting the scope of employees who have access to Personal Information.

 

The protection of Personal Information is of paramount concern to us, and we are prepared to take appropriate and timely steps in the event of any incidents involving Personal Information in accordance with applicable privacy laws.

 

We retain personal information only as long as is reasonable to fulfil the purposes for which the information was collected, or for legal or business purposes.

 

LINKS TO THIRD PARTY SITES

 

Our Site uses embedded material and has hyperlinks to other websites that are not owned or controlled by us. We do not manage or monitor the privacy policies of those sites and you are encouraged to review all third-party sites to review the third party’s privacy policy and terms of use.

 

 

CHANGES TO THIS POLICY

 

We may update this Privacy Policy from time to time and so you should review this page periodically. When we change this privacy policy in a material way, we will update the “last modified” date at the end of this Privacy Policy. Changes to this Privacy Policy are effective when they are posted on this page.

 

CONTACTING US

If you have any questions, comments or requests about your personal information or this Privacy Policy, please contact our Privacy Officer , Lindsay Swaik, VP of Digital by email at privacy@2xu.com or by telephone at 855-632-1800.

 

THIS PRIVACY POLICY WAS LAST MODIFIED ON: APRIL 7, 2026