Privacy policy

Last updated: 29 October 2026

This policy explains how AHAY Society Pty Ltd (ABN 61 652 694 454), trading as CLUTCH Glue ("CLUTCH", "we", "us"), collects, uses, shares and protects your personal information when you visit clutchglue.com, buy from us or contact us. We are responsible for your personal information (in the UK and EU, we are the "controller").

1. Contact us

Privacy Officer, AHAY Society Pty Ltd
Suite 3.07, Level 3, 333 Kent Street, Sydney NSW 2000, Australia
Email: ahay@clutchglue.com

Contact us with any question, request or complaint about how we handle your personal information.

2. What we collect

  • Contact and order details: name, email, phone number, billing and shipping address, what you bought, your order history and any subscription.
  • Payment details: processed by Shopify Payments or PayPal. We don't see or store your full card number.
  • Account details: if you create an account, your login and preferences.
  • Messages: anything you send us by email, chat, contact form or social media, including returns and complaints.
  • Health information you choose to share: if you contact us about a skin concern, the details and any photos you send.
  • Reviews and survey answers: reviews you post (with the name you choose to show) and answers to our post-purchase questions.
  • Marketing preferences: whether you've signed up to our emails or SMS, and whether you open or click them.
  • Device and usage information: IP address, browser and device type, approximate location, pages and products viewed, searches and how you reached our site, collected using cookies, pixels and similar technologies.

You can browse our site and ask general questions without telling us who you are. To fulfil an order we need your name, email, shipping address and payment; without them we can't sell to you.

3. Where we get it

Mostly from you. We also collect it automatically when you use our site (see section 9), and receive it from our service providers, such as payment providers (to confirm payment and screen for fraud), delivery companies (delivery updates) and advertising platforms (how our ads performed).

4. How we use it, and our legal grounds

For people in the UK and EU, the legal ground for each use is in brackets.

  • To process, ship and support your order, subscription, return or refund (performing our contract with you).
  • To answer your messages and handle complaints and claims (our contract with you, and our legitimate interest in looking after customers).
  • To look into any skin concern you raise and meet our product safety obligations, including reporting to regulators where the law requires (your explicit consent, legal obligation, and establishing or defending legal claims).
  • To prevent fraud and keep our site secure (legitimate interests).
  • To keep the tax, accounting and other records the law requires (legal obligation).
  • To send you marketing emails and SMS (your consent or, for existing customers where the law allows, our legitimate interest in telling you about similar products). You can opt out at any time.
  • To understand how our site is used, improve it, and show and measure our ads on other sites (your consent where the law requires it, for example for non-essential cookies in the UK and EU; otherwise our legitimate interest in running and growing our business).
  • To publish reviews you submit (your consent).

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Our store platform runs automated fraud checks on orders; contact us if you think one has affected you.

5. Who we share it with

We don't sell your personal information. We share it only with:

  • Shopify (our store platform) and our payment providers (Shopify Payments and PayPal);
  • the warehouses and delivery companies that pack and deliver your order;
  • Seal Subscriptions (subscriptions), Klaviyo (email and SMS) and Google Workspace (our email);
  • Judge.me (reviews), Revoq (EU cancellation requests) and other apps that run parts of our store, such as post-purchase surveys and our store locator;
  • Google, Meta and TikTok (analytics and advertising);
  • our professional advisers, such as accountants, lawyers and insurers;
  • regulators, courts or police where the law requires, or where needed to protect our rights; and
  • a buyer of all or part of our business, if that ever happens.

Shopify, PayPal, Google, Meta and TikTok also use some information for their own purposes under their own privacy policies. You can read Shopify's here: shopify.com/legal/privacy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties.

6. Sending information overseas

We're based in Australia. Our service providers store and process information in other countries, including the United States, Canada, the United Kingdom, Ireland, the Netherlands and other EU countries. Where UK or EU law applies, we rely on adequacy decisions or standard contractual clauses (or an equivalent safeguard) for these transfers. Contact us for a copy of the relevant safeguard.

7. How long we keep it

  • Order, payment and tax records: 7 years, as Australian company and tax law requires.
  • Skin concerns and claims: as long as needed to meet our product safety obligations and deal with any claim.
  • Marketing: until you unsubscribe. We keep a record that you unsubscribed so we don't contact you again.
  • Everything else (messages, account, analytics): only as long as we need it for the purpose we collected it, then we delete or anonymise it.

8. How we protect it

We hold personal information electronically with our service providers, who use industry-standard security such as encryption. Only people who need it for their work can access it.

9. Cookies and tracking

We use cookies, pixels and similar technologies to make our store work (for example your cart and checkout), to understand how our site is used, and for advertising with Google, Meta, TikTok and Klaviyo. These partners may collect information about your activity on our site and other websites over time.

Where the law requires it (for example in the UK and EU), we ask for your consent before using non-essential cookies, and you can change your choice through our cookie banner. You can also block or delete cookies in your browser settings, though parts of our store may stop working. To limit personalised ads, use Google Ad Settings, Meta ad preferences or your TikTok ad settings.

Our site does not respond to "Do Not Track" browser signals.

10. Your rights

Wherever you live, you can ask to see or correct the personal information we hold about you, and you can unsubscribe from marketing at any time (use the unsubscribe link in any email, or reply STOP to any SMS).

Depending on where you live (including the UK, EU, New Zealand, Canada and some US states), you may also have the right to:

  • ask us to delete your personal information;
  • restrict or object to how we use it, including objecting to direct marketing at any time;
  • receive a copy in a portable format; and
  • withdraw your consent at any time (this doesn't affect anything we did before you withdrew it).

To make a request, email us. We may ask you to confirm your identity. Requests are free, and we'll respond within 30 days. If we can't do what you ask, we'll tell you why.

11. Complaints

Please email us first. We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you're not satisfied, you can complain to the privacy regulator where you live:

  • Australia: Office of the Australian Information Commissioner, oaic.gov.au
  • New Zealand: Office of the Privacy Commissioner, privacy.org.nz
  • United Kingdom: Information Commissioner's Office, ico.org.uk
  • EU: your local data protection authority
  • Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca

If you're in the UK or EU, you can complain to your regulator at any time.

12. Children

Our store isn't intended for children under 16, and we don't knowingly collect their personal information. If you think a child has given us their information, contact us and we'll delete it.

13. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we'll tell you directly about significant changes where the law requires.