Privacy & Cookie Policy

Last Updated: October 6, 2026

BRUTEforce® Australia (“BRUTEforce®”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy & Cookie Policy explains how BRUTEforce® collects, uses, discloses, stores and otherwise processes personal information when you visit our United States website offering, purchase products, contact us, subscribe to marketing, make a return or warranty claim, interact with our advertising or otherwise deal with BRUTEforce®.

This Policy also describes privacy rights that may be available to residents of certain U.S. states.

The rights available to you depend on where you live, the law that applies to BRUTEforce®, and whether applicable statutory thresholds and other requirements are met.

1. ABOUT BRUTEforce®

BRUTEforce® Australia supplies fitness equipment, functional trainers, benches, attachments, accessories and related products and services to customers in the United States and other markets where offered.

For privacy enquiries relating to the United States website or a U.S. purchase, contact:

• BRUTEforce® Australia
• Email: [email protected]
• Phone: +61 8 9446 4816
• Global Business Mobile: +61 413 431 835

For privacy matters, please mark your enquiry:

Privacy — United States

2. SCOPE OF THIS POLICY

This Policy applies to personal information handled by BRUTEforce® in connection with matters including:

• our United States website offering;
• online purchases;
• customer enquiries;
• quotations;
• orders and payments;
• freight and delivery;
• returns and refunds;
• warranty and support claims;
• product enquiries;
• email and SMS marketing;
• competitions and promotions where applicable;
• affiliate enquiries and relationships;
• website analytics;
• online advertising;
• cookies and similar technologies; and
• other interactions with BRUTEforce®

This Policy should be read together with our Terms & Conditions, Guarantee & Returns Policy, Shipping Policy, Warranty Policy and any other terms applying to a particular product, service or promotion.

3. PERSONAL INFORMATION

For purposes of this Policy, “personal information” or “personal data” generally refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household, as defined under applicable law.

The precise definition may vary under applicable U.S. state law.

4. CATEGORIES OF PERSONAL INFORMATION WE MAY COLLECT

Depending on your interaction with BRUTEforce®, we may collect the following categories of information.

A. Identifiers & Contact Information

This may include:

• name;
• billing address;
• shipping or delivery address;
• email address;
• telephone or mobile number;
• IP address;
• online identifiers; and
• other contact information you provide
• B. Customer & Transaction Information

This may include:

• products ordered;
• order number;
• order date;
• purchase history;
• product pricing;
• discounts or promotional codes;
• transaction status;
• payment status;
• refund information;
• invoice information;
• delivery information; and
• related transaction records
• C. Payment Information

Payments may be processed using:

• Stripe;
• PayPal;
• Shopify Payments;
• Afterpay;
• credit or debit card providers; and
• other payment services displayed at checkout

BRUTEforce® does not necessarily receive or retain complete payment-card information that you provide directly to a payment processor.

We may receive information necessary to confirm and administer a transaction, such as:

• payment status;
• transaction reference;
• payment method;
• limited payment-related information;
• refund status; and
• fraud or transaction-verification information
• D. Delivery & Freight Information

This may include:

• delivery address;
• recipient name;
• telephone number;
• email address;
• delivery instructions;
• property or site-access information you provide;
• freight tracking information;
• carrier information;
• delivery status;
• redelivery information; and
• information relating to freight damage or delivery problems
• E. Customer Service Information

When you contact BRUTEforce®, we may collect:

• correspondence;
• emails;
• live-chat communications where enabled;
• telephone enquiry details;
• product questions;
• complaint information;
• troubleshooting information; and
• other information you choose to provide
• F. Returns & Warranty Information

For returns, warranty claims and product-support matters, we may collect:

• proof of purchase;
• invoice or order details;
• product model;
• serial number where applicable;
• photographs;
• video;
• descriptions of faults or damage;
• maintenance information;
• assembly information;
• troubleshooting results;
• return or freight information; and
• communications concerning the claim
• G. Marketing Information

Where applicable, we may collect:

• marketing consent;
• email subscription status;
• SMS subscription status;
• communication preferences;
• unsubscribe requests;
• campaign interaction information;
• promotional information; and
• referral information
• H. Internet, Website & Device Information

When you use our website, we or our service providers may collect information such as:

• IP address;
• browser type;
• device type;
• operating system;
• approximate location derived from technical information;
• pages viewed;
• referring page or website;
• dates and times of visits;
• session information;
• interactions with pages;
• products viewed;
• cart activity;
• checkout activity;
• purchase events;
• advertising interactions;
• cookie identifiers;
• pixel identifiers;
• device or advertising identifiers; and
• similar technical or usage information
• I. Inferences

Where permitted by applicable law, information collected through our website or transactions may be used to make limited inferences about matters such as:

• product interests;
• likely purchasing interests;
• marketing preferences; and
• website engagement

5. SENSITIVE PERSONAL INFORMATION

BRUTEforce® does not ordinarily need sensitive personal information to sell fitness equipment.

We do not intentionally request information such as:

• Social Security numbers;
• government identification numbers;
• racial or ethnic origin;
• religious beliefs;
• precise geolocation for unrelated advertising purposes;
• genetic information;
• biometric information used for unique identification;
• health diagnoses; or
• sexual orientation

Please do not provide sensitive personal information unless reasonably necessary for your interaction with us.

Where sensitive personal information is collected or processed, BRUTEforce® will handle it consistently with applicable law.

6. SOURCES OF PERSONAL INFORMATION

We may collect personal information:

Directly From You

For example when you:

• place an order;
• complete checkout;
• request a quotation;
• contact us by email or telephone;
• use live chat where enabled;
• request delivery;
• request a return;
• submit a warranty claim;
• subscribe to marketing;
• participate in a promotion;
• apply to or participate in our Affiliate Program; or
• otherwise communicate with us
• Automatically

We may collect information through:

• cookies;
• pixels;
• tags;
• analytics tools;
• server logs;
• local storage;
• advertising technologies; and
• similar website technologies
• From Service Providers

We may receive information from providers involved in:

• payment processing;
• freight and delivery;
• website hosting;
• e-commerce;
• fraud prevention;
• customer service;
• analytics;
• advertising; and
• marketing communications
• From Other Lawful Sources

In appropriate circumstances, we may receive information from authorised representatives, business contacts, publicly available sources or other lawful sources.

7. GUEST CHECKOUT

BRUTEforce® currently operates using guest checkout.

Customers are not currently required to create a BRUTEforce® customer account to purchase products.

We nevertheless retain appropriate order, transaction, customer-service, warranty, freight and other records associated with purchases where reasonably necessary.

8. WORDPRESS & WOOCOMMERCE

The BRUTEforce® website uses WordPress and WooCommerce.

These systems support functions including:

• website operation;
• product listings;
• shopping-cart functionality;
• checkout;
• order processing;
• transaction records;
• customer communications; and
• website administration

Information entered into the website may therefore be processed through the website and e-commerce infrastructure necessary to provide these functions.

9. PURPOSES FOR WHICH WE USE PERSONAL INFORMATION

BRUTEforce® may collect, use, process or disclose personal information for purposes including:

• providing products and services;
• responding to enquiries;
• preparing quotations;
• processing orders;
• processing and confirming payments;
• preventing or investigating fraud;
• arranging freight;
• delivering products;
• providing tracking information;
• communicating about orders;
• handling delivery problems;
• processing returns;
• issuing refunds;
• administering warranties;
• providing replacement parts;
• providing technical and customer support;
• maintaining transaction and accounting records;
• complying with tax and legal obligations;
• administering promotions;
• administering affiliate relationships;
• managing marketing preferences;
• sending permitted marketing;
• analysing website use;
• measuring advertising performance;
• measuring conversions;
• personalising or improving website experiences where permitted;
• improving our website;
• improving products and services;
• maintaining website and information security;
• preventing misuse of our systems;
• managing complaints and disputes;
• enforcing contractual rights; and
• complying with applicable law

10. IF YOU DO NOT PROVIDE INFORMATION

You may choose not to provide requested personal information.

However, depending on the information involved, BRUTEforce® may then be unable to:

• process an order;
• take payment;
• arrange delivery;
• respond to an enquiry;
• process a return;
• assess a warranty claim;
• provide replacement parts;
• provide requested support;
• send requested communications; or
• provide another requested product or service

11. PAYMENT PROVIDERS

BRUTEforce® uses or may offer payment services including:

• Stripe;
• PayPal;
• Shopify Payments;
• Afterpay; and
• credit or debit card processing

Payment providers may collect and process personal information under their own privacy policies and terms.

BRUTEforce® may disclose or transmit information reasonably necessary to:

• process a transaction;
• authenticate payment;
• prevent fraud;
• process a refund;
• manage a payment dispute; or
• comply with applicable payment requirements

12. FREIGHT, LOGISTICS & DELIVERY

BRUTEforce® sells large and heavy fitness equipment and uses freight, warehousing and logistics providers to fulfil orders.

We may disclose information reasonably necessary for fulfilment and delivery, including:

• customer name;
• delivery address;
• telephone number;
• email address;
• order information;
• product or package information;
• access instructions; and
• delivery-related communications

Freight providers may use this information to:

• schedule delivery;
• contact the recipient;
• transport products;
• provide tracking;
• manage failed deliveries;
• process freight damage; and
• provide related logistics services

13. CUSTOMER SERVICE, RETURNS & WARRANTY CLAIMS

Information provided in connection with customer service, returns and warranty matters may be used to:

• identify the order;
• assess the issue;
• troubleshoot equipment;
• determine an appropriate remedy;
• arrange replacement parts;
• arrange freight or collection;
• investigate product or safety issues;
• maintain warranty records; and
• manage complaints or disputes

Photographs and videos supplied for a claim may be shared with relevant personnel or service providers where reasonably necessary to assess or resolve the matter.

14. EMAIL & SMS MARKETING

BRUTEforce® uses or may use:

• Mailchimp;
• Klaviyo;
• Shopify Email; and
• other lawfully implemented communication systems

Marketing communications may include:

• product information;
• new product announcements;
• promotions;
• discounts;
• offers;
• educational content; and
• BRUTEforce® news

We manage commercial email communications in accordance with applicable U.S. requirements.

15. UNSUBSCRIBING FROM MARKETING

Marketing emails include an unsubscribe mechanism where required.

You may also contact BRUTEforce® to request removal from marketing communications.

We may retain limited information necessary to record and respect your unsubscribe request.

Unsubscribing from marketing does not prevent us from sending non-marketing communications reasonably necessary for matters such as:

• orders;
• payments;
• deliveries;
• returns;
• warranty claims;
• safety information;
• customer-service matters; and
• legally required notices

16. ANALYTICS & ADVERTISING TECHNOLOGIES

BRUTEforce® uses or may use the following technologies where enabled:

• Google Analytics;
• Google Ads tracking;
• Meta Pixel; and
• TikTok Pixel

These technologies may collect or receive information about website activity such as:

• pages viewed;
• products viewed;
• cart activity;
• checkout events;
• purchases;
• referral source;
• browser or device information;
• IP or network information;
• cookie or device identifiers; and
• advertising interactions

We may use this information for:

• measuring website traffic;
• understanding website use;
• measuring advertising performance;
• improving website functionality;
• measuring conversions;
• advertising attribution;
• creating advertising audiences where permitted;
• targeted or interest-based advertising where permitted; and
• displaying or measuring relevant advertising

BRUTEforce® seeks to configure these technologies so that unnecessary sensitive information is not intentionally disclosed to advertising platforms.

17. COOKIES & SIMILAR TECHNOLOGIES

Cookies are small data files or identifiers stored or accessed through a browser or device.

BRUTEforce® may use:

• cookies;
• pixels;
• tags;
• local storage;
• scripts; and
• comparable technologies
• These technologies may be used for the following purposes
• Strictly Necessary

Including:

• website security;
• shopping-cart operation;
• checkout;
• session management;
• fraud prevention; and
• essential website functions
• Functional

Including:

• remembering preferences; and
• improving user experience
• Analytics

Including:

• measuring website traffic;
• understanding page use;
• measuring site performance; and
• identifying technical problems
• Advertising & Marketing

Where enabled, advertising technologies may be used to:

• measure advertising;
• attribute conversions;
• build advertising audiences;
• understand advertising interactions;
• support targeted or interest-based advertising where permitted; and
• measure advertising performance

18. COOKIE & PRIVACY CONTROLS

BRUTEforce® uses cookie-consent or privacy-control software on its website.

Where available through our consent tool, website users may be able to accept, reject or manage categories of non-essential cookies and similar technologies.

You may also be able to manage cookies through your browser or device settings.

Blocking certain technologies may affect website functionality.

Where applicable law requires BRUTEforce® to recognise a legally valid universal opt-out preference signal or similar mechanism, we will handle such signals in accordance with applicable law.

19. TRACKING PIXELS & TARGETED ADVERTISING

BRUTEforce® may use tracking technologies provided by platforms including Google, Meta and TikTok.

These technologies may communicate information concerning website interactions to the relevant provider.

Depending on the technology, configuration and applicable state law, use of certain advertising technologies may be characterised as:

• targeted advertising;
• cross-context behavioral advertising;
• sharing of personal information; or
• another regulated processing activity

BRUTEforce® does not use these technologies with the intention of disclosing sensitive personal information.

Where applicable law provides a right to opt out of targeted advertising, sale or sharing, BRUTEforce® will provide or honour the applicable opt-out mechanism as required.

20. AFFILIATE TRACKING

BRUTEforce® currently does not use a 90-day affiliate tracking cookie.

Affiliate sales may instead be attributed through methods actually implemented by BRUTEforce®, such as:

• referral links;
• affiliate codes;
• promotional codes; or
• other approved attribution methods
• BRUTEforce® does not promise a 90-day affiliate cookie attribution period

21. CLOUDFLARE

BRUTEforce® uses Cloudflare as part of its website content-delivery, security and network infrastructure.

Cloudflare may process technical information in connection with services such as:

• content delivery;
• website performance;
• traffic routing;
• security;
• bot protection;
• network protection; and
• threat detection

22. DATA HOSTING & INTERNATIONAL PROCESSING

BRUTEforce® Australia is based in Australia, and relevant website/store data is hosted in Sydney, Australia under our current hosting arrangements.

BRUTEforce® also uses international technology and service providers.

Accordingly, personal information relating to U.S. customers may be transferred to, stored in or processed in Australia and other jurisdictions in which our providers or their service providers operate.

Those jurisdictions may have privacy and data-protection laws different from those in your U.S. state.

23. SERVICE PROVIDERS & THIRD PARTIES

BRUTEforce® uses providers that may include:

• WordPress;
• WooCommerce;
• Stripe;
• PayPal;
• Shopify and Shopify Payments;
• Afterpay;
• Mailchimp;
• Klaviyo;
• Shopify Email;
• Google;
• Meta;
• TikTok;
• Cloudflare;
• freight providers;
• warehousing and logistics providers;
• IT and cybersecurity providers; and
• other service providers reasonably necessary to operate our business

We may disclose personal information to these providers where reasonably necessary for the purposes described in this Policy.

24. CATEGORIES OF RECIPIENTS

Depending on the circumstances, personal information may be disclosed to:

• BRUTEforce® personnel;
• website and e-commerce providers;
• hosting providers;
• content-delivery and security providers;
• payment processors;
• banks and financial institutions;
• fraud-prevention providers;
• freight providers;
• couriers;
• warehousing and logistics providers;
• installation or service providers where applicable;
• customer-service providers;
• marketing providers;
• analytics providers;
• advertising platforms;
• IT and cybersecurity providers;
• accountants;
• insurers;
• legal and professional advisers;
• regulators;
• courts;
• law-enforcement authorities; and
• other parties where authorised or required by law

25. SALE & SHARING OF PERSONAL INFORMATION

BRUTEforce® does not operate a business model based on selling customer lists or personal information to unrelated third parties for money.

However, some U.S. privacy laws define terms such as “sale” or “sharing” more broadly than an ordinary monetary sale.

For example, certain disclosures or availability of identifiers and website activity to advertising or analytics providers may potentially constitute “sale,” “sharing,” targeted advertising or another regulated disclosure under applicable state law, depending on the circumstances and configuration.

BRUTEforce® therefore does not rely solely on the statement that we do not sell customer information for money.

Where applicable law gives you a right to opt out of sale, sharing or targeted advertising, we will provide or recognise the applicable method for exercising that right.

26. DATA RETENTION

BRUTEforce® retains personal information for as long as reasonably necessary for purposes including:

• completing orders;
• maintaining transaction records;
• accounting and taxation;
• freight and delivery;
• warranty administration;
• product support;
• returns and refunds;
• customer service;
• product safety;
• fraud prevention;
• dispute resolution;
• legal claims;
• marketing consent records;
• unsubscribe records; and
• compliance with legal requirements

Retention periods vary depending on the type of information, purpose and applicable legal requirements.

When information is no longer reasonably required, we may delete, destroy or de-identify it as appropriate and consistent with applicable law.

27. DATA SECURITY

BRUTEforce® takes reasonable measures designed to protect personal information against:

• unauthorised access;
• loss;
• misuse;
• alteration; and
• unauthorised disclosure

Measures may include, where appropriate:

• access controls;
• authentication;
• secure website technologies;
• Cloudflare security infrastructure;
• service-provider controls;
• system updates;
• administrative controls;
• restricted access; and
• appropriate internal procedures

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

28. DATA BREACHES & SECURITY INCIDENTS

If BRUTEforce® becomes aware of a suspected security incident involving personal information, we may:

• investigate;
• contain the incident;
• assess affected information;
• take remedial action;
• work with relevant service providers; and
• notify affected individuals or regulators where required by applicable law
• U.S. data-breach notification requirements vary by jurisdiction
• BRUTEforce® will respond in accordance with applicable legal requirements

29. CHILDREN'S PRIVACY

BRUTEforce® products and online purchasing services are directed to adults and are not designed or intended for children.

BRUTEforce® does not knowingly seek to collect personal information from children for independent online purchasing.

If we learn that information has been collected from a child in circumstances requiring deletion or other action under applicable law, we will take appropriate steps.

30. THIRD-PARTY WEBSITES & SERVICES

Our website may link to third-party websites or services.

Third parties may have their own privacy policies, terms and data-handling practices.

BRUTEforce® is not responsible for an independent third party's privacy practices merely because its website or service is linked from our website.

31. YOUR U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states may have privacy rights under applicable state law.

Depending on your state, the law that applies to BRUTEforce®, and any applicable thresholds or exemptions, these rights may include the right to:

• confirm whether we process your personal information;
• access personal information;

obtain certain information concerning our collection, use or disclosure practices;

correct inaccurate personal information;

request deletion of personal information;

obtain a portable copy of certain personal information;

opt out of the sale of personal information;

opt out of sharing for cross-context behavioral advertising;

opt out of targeted advertising;

opt out of certain profiling;

limit certain uses or disclosures of sensitive personal information;

withdraw consent where applicable;

appeal certain decisions concerning a privacy request; and

receive equal service and not be unlawfully discriminated against for exercising applicable privacy rights.

These rights are not identical in every state and may not apply in every circumstance.

Nothing in this Policy is intended to provide a statutory right that does not otherwise apply under applicable law.

32. CALIFORNIA PRIVACY RIGHTS

If the California Consumer Privacy Act, as amended (“CCPA”), applies to BRUTEforce® and your personal information, California residents may have rights including:

• the right to know/access;
• the right to request deletion, subject to exceptions;
• the right to request correction;
• the right to opt out of sale or sharing;

the right to limit certain uses and disclosures of sensitive personal information where applicable; and

the right to non-discrimination for exercising CCPA rights.

For purposes of California law, certain use of third-party advertising technologies may potentially constitute “sharing” for cross-context behavioral advertising even where BRUTEforce® does not sell customer information for money.

Where required, BRUTEforce® will provide an appropriate Do Not Sell or Share My Personal Information or equivalent privacy-choice mechanism.

BRUTEforce® will also recognise valid browser-based opt-out preference signals such as Global Privacy Control where required by applicable law.

33. CATEGORIES OF INFORMATION — CALIFORNIA NOTICE

During the relevant period, BRUTEforce® may collect categories of personal information described in this Policy, including:

• identifiers;
• customer-record information;
• commercial information;
• internet or other electronic network activity;
• approximate geolocation information derived from technical data;
• customer-service and communications information;
• payment/transaction information; and
• inferences concerning product or marketing interests

Sources may include:

• you;
• your device/browser;
• payment providers;
• freight/logistics providers;
• analytics providers;
• advertising providers; and
• other service providers
• Business or commercial purposes are described in Section 9
• Categories of recipients are described in Sections 23 and 24

34. COLORADO & OTHER STATE PRIVACY RIGHTS

Where applicable state privacy law applies, residents may have rights such as:

• access;
• correction;
• deletion;
• data portability;
• opt-out of sale;
• opt-out of targeted advertising;
• opt-out of certain profiling; and
• appeal of certain privacy-request decisions

Where a state requires BRUTEforce® to recognise a valid universal opt-out mechanism, BRUTEforce® will do so as required.

Other U.S. states may provide similar or additional rights.

BRUTEforce® will administer applicable rights according to the law governing the relevant request.

35. HOW TO EXERCISE A PRIVACY RIGHT

To submit an applicable privacy request, contact:

[email protected]

Use the subject:

U.S. Privacy Request

Please include:

• your name;
• state of residence;
• email address used in dealing with BRUTEforce®;
• order number where relevant; and
• the privacy right you wish to exercise
• Do not send unnecessary sensitive information with your initial request

Where required or permitted by law, BRUTEforce® may request additional information reasonably necessary to verify:

• your identity;
• your state of residence;
• your relationship with BRUTEforce®; and
• the authenticity of the request
• We will respond within the period required by applicable law

36. AUTHORISED AGENTS

Where applicable law allows an authorised agent to make a request on your behalf, BRUTEforce® may require appropriate evidence that the agent is authorised to act for you.

We may also verify your identity directly where permitted by law.

37. APPEALS

Where applicable state law gives you a right to appeal a decision concerning a privacy request, you may submit an appeal by contacting:

[email protected]

Subject:

U.S. Privacy Appeal

Please identify the original request and explain why you believe the decision should be reconsidered.

38. NON-DISCRIMINATION

BRUTEforce® will not unlawfully discriminate against a consumer for exercising a privacy right provided by applicable law.

Exercising a privacy right will not, by itself, result in unlawful denial of goods or services, different pricing or another discriminatory treatment prohibited by applicable law.

39. AUTOMATED DECISION-MAKING & PROFILING

BRUTEforce® may use technology to support ordinary business functions such as:

• fraud detection;
• payment processing;
• website security;
• spam filtering;
• advertising measurement;
• analytics;
• order processing; and
• customer communications

BRUTEforce® does not currently represent that it uses automated profiling to make decisions producing legal or similarly significant effects concerning ordinary retail customers.

If our practices change, we will update this Policy and provide applicable rights where required by law.

40. CHANGES TO THIS PRIVACY & COOKIE POLICY

BRUTEforce® may update this Policy from time to time to reflect:

• changes to our website;
• new or changed service providers;
• changes to payment methods;
• changes to cookies or tracking technologies;
• changes to marketing systems;
• operational changes;
• changes to our privacy practices; or
• changes to applicable law

The current version will be published on the BRUTEforce® website with its applicable effective or last-updated date.

41. CONTACT BRUTEforce®

For questions, privacy requests or complaints concerning this Policy:

• BRUTEforce® Australia
• Email: [email protected]
• Phone: +61 8 9446 4816
• Global Business Mobile: +61 413 431 835

For general U.S. privacy enquiries, please use:

Privacy — United States

For a state privacy-right request, please use:

• U.S. Privacy Request
• Effective Date: October 6, 2026
• Last Updated: October 6, 2026