Sidekick Soda Privacy Policy

Last updated: 12 May 2026

Sidekick Soda is the trading name of GOBSMACKINGLY GOOD LIMITED, a New Zealand limited company.

For certain United States operations, Sidekick Soda may also operate through SIDEKICK SODA ENTERPRISES INC., a Delaware corporation.

In this Privacy Policy, “Sidekick Soda,” “Sidekick,” “we,” “us,” and “our” means GOBSMACKINGLY GOOD LIMITED trading as Sidekick Soda and, where relevant, SIDEKICK SODA ENTERPRISES INC.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, buy our products, create an account, sign up for marketing, use our store locator, submit a review, contact us, interact with our ads, use our wholesale or subscription services, or otherwise use our store and related services.

Our store is powered by Shopify. We also use third-party apps, pixels, analytics tools, marketing tools, payment providers, logistics providers, review tools, referral and affiliate tools, and other service providers to operate our business.

If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy controls in relation to the collection, use, disclosure, and processing of personal information.

1. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Email: hello@sidekicksoda.com

Phone:
United States: +1 800 917 2426
Australia: +61 2 9052 0881
New Zealand / International: +64 21 668 241

New Zealand postal address:
GOBSMACKINGLY GOOD LIMITED trading as Sidekick Soda
PO Box 645
Wānaka 9343
New Zealand

United States registered office:
SIDEKICK SODA ENTERPRISES INC.
c/o A Registered Agent, Inc.
8 The Green, Suite A
Dover, DE 19901
United States

Your Privacy Choices:
https://sidekicksoda.com/pages/your-privacy-choices

2. Who Is Responsible for Your Information

For customers in New Zealand, Australia, the United Kingdom, Taiwan, and other non-US markets, GOBSMACKINGLY GOOD LIMITED trading as Sidekick Soda is generally the company responsible for your personal information.

For customers in the United States, SIDEKICK SODA ENTERPRISES INC. is generally the US business responsible for personal information collected and processed in connection with US operations.

Where personal information is shared between our New Zealand and United States operations, both companies may be involved in determining how that information is used.

3. Personal Information We Collect

When we use the term personal information, we mean information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to you or your household.

Personal information does not include information that has been de-identified, aggregated, or anonymised so that it cannot reasonably identify you.

Depending on how you interact with us, we may collect the following information.

Information You Provide Directly

We may collect information you provide to us, including:

• Name

• Email address

• Phone number

• Billing address

• Shipping address

• Account login details

• Order details

• Payment-related information

• Subscription preferences

• Marketing preferences

• Reviews, ratings, photos, or other user-generated content

• Store locator or location-related requests

• Wholesale, retail, or partnership enquiries

• Customer support messages

• Survey, promotion, giveaway, referral, or competition entries

• Any other information you choose to provide

We do not intentionally ask you to provide sensitive personal information in free-text fields, reviews, support messages, or forms. Please avoid including sensitive information unless it is necessary for your request.

Information Collected Automatically

When you visit or use our website, we and our service providers may automatically collect information such as:

• IP address

• Device identifiers

• Browser type

• Operating system

• Pages viewed

• Products viewed

• Cart activity

• Search activity

• Referring URLs

• Clicks and interactions

• Approximate location derived from IP address

• Precise location if you allow a store locator or browser location feature

• Cookie, pixel, and similar tracking information

• Advertising, analytics, and attribution events

Information From Third Parties

We may receive information from third parties, including:

• Shopify

• Payment processors

• Fulfilment and logistics providers

• Email and SMS marketing providers

• Review platforms

• Referral and affiliate partners

• Advertising and analytics platforms

• Fraud prevention tools

• Customer support tools

• Wholesale or retail partners

• Social media platforms when you interact with us

• Other service providers that help us operate our business

4. How We Use Personal Information

We may use personal information to:

• Operate our website and online store

• Process and fulfil orders

• Process payments and refunds

• Manage customer accounts

• Provide subscriptions

• Provide customer support

• Arrange shipping and delivery

• Process returns, exchanges, and complaints

• Send transactional messages, such as order confirmations and shipping updates

• Send marketing emails, SMS messages, and promotional offers where permitted

• Personalise your shopping experience

• Show relevant ads

• Measure advertising performance

• Attribute purchases to campaigns, affiliates, or referral partners

• Run reviews, loyalty, referral, giveaway, wholesale, or promotional programmes

• Improve our products, services, website, and customer experience

• Conduct analytics and business reporting

• Prevent fraud, abuse, and security incidents

• Comply with legal, accounting, tax, customs, and regulatory obligations

• Enforce our terms and protect our rights

• Respond to privacy requests, complaints, and legal requests

5. Cookies, Pixels, Analytics, and Advertising

We use cookies, pixels, tags, scripts, local storage, and similar technologies to run our website, remember preferences, measure performance, personalise content, provide marketing, and advertise our products.

These technologies may be used by us and by service providers or partners such as Shopify, Pandectes, Google, Meta, TikTok, Pinterest, Snapchat, Klaviyo, Impact, Judge.me, and other similar tools.

Some cookies and similar technologies are necessary for the website to work. Others are used for analytics, advertising, retargeting, affiliate attribution, campaign measurement, audience creation, and similar purposes.

We use a consent-management platform to help manage cookie, pixel, analytics, advertising, affiliate, and similar tracking preferences.

Where required, non-essential analytics, advertising, targeting, affiliate attribution, and similar tracking technologies are designed not to run unless the relevant consent has been given. This includes tracking used for advertising, retargeting, audience creation, campaign measurement, affiliate attribution, and similar marketing purposes.

You can manage your cookie and pixel preferences by using our cookie banner or by visiting:

https://sidekicksoda.com/pages/your-privacy-choices

Our privacy controls are designed to let visitors reject non-essential cookies and tracking, reopen the consent banner, change preferences, and opt out of sale, sharing, or targeted advertising where applicable.

If your browser sends a legally recognised Global Privacy Control signal, we will treat that signal as a request to opt out of sale or sharing of personal information for that browser or device, where required by law.

Your privacy choice may apply only to the browser, device, or account where the choice is made. If you clear cookies, change browsers, change devices, or use a different account, you may need to renew your choice.

We do not currently respond to ordinary “Do Not Track” signals. However, where required by law, we recognise Global Privacy Control and similar universal opt-out mechanisms.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

Service Providers and Processors

We disclose information to service providers that help us operate our business, including providers for:

• Website hosting and ecommerce infrastructure

• Payment processing

• Order fulfilment

• Shipping and logistics

• Email and SMS marketing

• Reviews

• Subscriptions

• Store locator functionality

• Customer support

• Fraud prevention

• Analytics

• Accounting and tax

• Legal, professional, and compliance services

• Data storage and security

• Consent management

These providers are authorised to use personal information only as needed to provide services to us or as otherwise permitted by law.

Advertising, Analytics, and Attribution Partners

We may disclose information to advertising, analytics, affiliate, referral, and attribution partners, including through cookies, pixels, server-side events, and similar technologies.

These partners may include Meta, TikTok, Google, Pinterest, Snapchat, Klaviyo, Impact, and similar providers.

Depending on where you live, these disclosures may be considered sale, sharing, or targeted advertising under privacy laws, even though we do not sell personal information for money.

You can opt out by using our Your Privacy Choices page.

Payment and Transaction Providers

Payment information is processed by payment providers such as Shopify Payments and related payment processors. We do not store full credit card numbers on our own systems.

Fulfilment and Logistics Providers

We disclose shipping and order information to warehouses, delivery companies, carriers, customs brokers, and other logistics providers so they can fulfil and deliver your order.

Review and User-Generated Content Providers

If you submit a review, rating, photo, video, or other user-generated content, that content may be displayed publicly on our website or in our marketing. We may use service providers to host, display, moderate, or manage reviews.

Legal, Safety, and Business Purposes

We may disclose information where we believe it is necessary to:

• Comply with law

• Respond to legal requests

• Enforce our terms

• Protect our rights, safety, customers, or business

• Prevent fraud, abuse, or security incidents

• Complete a merger, sale, financing, restructuring, acquisition, or transfer of business assets

With Your Consent

We may disclose information to other parties with your consent or at your direction.

7. Specific Third Parties We Use

The third parties we use may change over time, but they may include:

Shopify

Shopify Payments

Shop Pay

Pandectes

Klaviyo

Google

Meta / Facebook / Instagram

TikTok

Pinterest

Snapchat

Impact / impact.com

Judge.me

Xero

Store locator, subscription, wholesale, fulfilment, logistics, fraud prevention, accounting, tax, legal, and customer support providers

Because our store is powered by Shopify, Shopify may collect and process personal information about your access to and use of our store in order to provide, secure, operate, and improve Shopify-powered ecommerce services. Shopify may also process information as described in Shopify’s own applicable privacy terms.

Some providers may process information in the United States, New Zealand, Australia, the United Kingdom, Canada, the European Economic Area, Taiwan, or other locations where they or their subprocessors operate.

8. Sale, Sharing, and Targeted Advertising

We do not sell personal information for money.

However, we may disclose personal information, including website activity, device information, online identifiers, hashed contact information, purchase events, cart events, or advertising events, to advertising, analytics, affiliate, and attribution partners.

Depending on where you live, this may be considered:

• Sale of personal information

• Sharing of personal information

• Targeted advertising

• Cross-context behavioural advertising

You can opt out by visiting:

https://sidekicksoda.com/pages/your-privacy-choices

If your browser sends a legally recognised Global Privacy Control signal, we will treat it as an opt-out request for that browser or device where required by law.

9. Sensitive Personal Information

We do not intentionally ask you to provide sensitive personal information.

However, we may process limited sensitive personal information in the following situations:

• Account login credentials, where you create an account

• Precise location, if you allow browser location access for a store locator or similar feature

• Contents of communications, where you contact us and include sensitive information

• Sensitive information you voluntarily submit in a support request, form, review, or message

We use sensitive personal information only for limited purposes, such as providing the requested service, account access, security, fraud prevention, support, legal compliance, or responding to your request.

We do not use sensitive personal information to infer characteristics about you.

We do not use sensitive personal information for marketing personalisation, behavioural analytics, audience building, customer segmentation, or advertising in a way that requires a separate “Limit Use of Sensitive Personal Information” link under California law.

For residents of states that require consent to process sensitive personal information, including Virginia, Colorado, Connecticut, Montana, Oregon, New Jersey, New Hampshire, Delaware, Maryland, Minnesota, Texas, and similar states, we do not knowingly process sensitive personal information without consent where consent is required.

If you voluntarily provide sensitive information in a support request, review, form, email, message, or other communication, we will treat that as consent to process it for the limited purpose of responding to or handling that request.

10. Automated Processing, Profiling, and Personalisation

We and our service providers may use automated tools to help operate our store, recommend products, measure marketing, prevent fraud, analyse customer behaviour, segment audiences, and understand business performance.

This may include automated inferences about:

• Product interest

• Purchase likelihood

• Churn risk

• Customer lifetime value

• Marketing engagement

• Cart abandonment

• Referral or affiliate attribution

• Similar commercial or behavioural patterns

We do not use automated processing to make decisions that produce legal or similarly significant effects about you, such as eligibility for credit, employment, housing, insurance, or essential services.

11. Artificial Intelligence and Machine Learning

We may use service providers that incorporate artificial intelligence, machine learning, automation, or similar technologies into their products.

These tools may help with analytics, fraud prevention, customer support, marketing optimisation, product recommendations, search, attribution, personalisation, and operational efficiency.

Some vendors may use aggregated, anonymised, or de-identified information to improve their services, including AI or machine-learning features.

We do not authorise vendors to use identifiable customer personal information for unrelated AI model training without appropriate disclosure, contractual protection, or consent where required.

12. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate our business, provide products and services, comply with law, resolve disputes, prevent fraud, enforce agreements, and maintain business records.

We use the following retention periods or criteria:

Data Type	Retention Period or Criteria
Active customer account information	For the duration of the customer relationship
Inactive customer account information	Generally up to 3 years after the last purchase or meaningful interaction, unless a longer period is required or permitted
Order and transaction records	Generally up to 7 years for tax, accounting, audit, fraud prevention, and legal purposes
Payment information	Processed by payment providers; we do not store full card numbers on our own systems
Marketing email records	Until you unsubscribe, plus a reasonable period to process and record the opt-out
SMS marketing records	Until you opt out, plus a reasonable period to process and record the opt-out
Cart abandonment information for non-purchasers	Generally up to 90 days, unless retained longer in aggregated or de-identified form
Customer support messages	Generally up to 3 years from the last update, unless needed longer for legal, safety, or dispute reasons
Reviews and user-generated content	For as long as the review or content remains published, unless removed earlier or retained longer for legal reasons
Affiliate, referral, and promotion records	For the duration of the programme plus up to 7 years for accounting, tax, audit, and fraud prevention
Wholesale or retail partner records	For the duration of the relationship plus up to 7 years
Cookie and pixel consent records	For the consent period set by our consent-management tool or as required to demonstrate compliance
Pixel-derived advertising event data	Controlled partly by the relevant advertising or analytics platform’s retention settings
Legal and compliance records	As long as required or permitted by law

For this Privacy Policy, a customer relationship generally ends 3 years after your last purchase, account activity, support interaction, subscription activity, wholesale interaction, or other meaningful interaction with us, unless the information is deleted sooner or must be kept longer.

When information is no longer required, we may delete, anonymise, aggregate, or de-identify it.

13. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information.

These safeguards may include encryption in transit, access controls, account authentication, secure vendor platforms, staff access limits, logging, monitoring, and vendor diligence.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If we become aware of a data breach affecting your personal information, we will take reasonable steps to investigate, respond, and notify affected individuals, regulators, or others where required by law.

14. International Transfers

We are based in New Zealand and the United States, and our service providers may process personal information in other countries.

Your personal information may be transferred to, stored in, or processed in countries outside your country of residence, including New Zealand, the United States, Australia, Canada, the United Kingdom, the European Economic Area, Taiwan, and other countries where our service providers or their subprocessors operate.

Privacy laws in those countries may differ from the laws in your country.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, recognised transfer mechanisms, adequacy decisions, standard contractual clauses, data processing agreements, or other lawful mechanisms.

We do not directly target or sell to residents of the European Economic Area unless we later change our business operations. Some providers may nevertheless process data from or in the EEA as part of their global infrastructure.

15. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access personal information we hold about you

• Confirm whether we process your personal information

• Receive a copy of your personal information

• Correct inaccurate information

• Delete personal information

• Restrict or object to certain processing

• Withdraw consent where processing is based on consent

• Opt out of sale, sharing, targeted advertising, or certain profiling

• Appeal a decision we make about your request

• Complain to a privacy regulator

These rights may be subject to legal exceptions.

To exercise rights, contact us at:

Email: hello@sidekicksoda.com

Your Privacy Choices:
https://sidekicksoda.com/pages/your-privacy-choices

We may need to verify your identity before fulfilling your request. Verification may include confirming control of your email address, account login, order information, or other information reasonably necessary to verify the request.

We will respond within the time required by applicable law.

16. Authorised Agents

Where permitted by law, you may use an authorised agent to submit a privacy request on your behalf.

We may require the agent to provide proof that you authorised them to act for you. We may also require you to verify your identity directly with us before we fulfil the request.

17. Marketing Choices

You can unsubscribe from promotional emails by using the unsubscribe link in our emails.

You can opt out of promotional SMS messages by following the instructions in the message, such as replying STOP.

You may still receive non-promotional messages from us, such as order confirmations, shipping updates, subscription notices, account messages, or customer support replies.

18. User-Generated Content

If you submit a review, photo, video, comment, social media post, testimonial, or other content, we may display that content publicly on our website, social media, advertisements, emails, product pages, or other marketing channels.

Please do not include information in public reviews or comments that you do not want others to see.

If you want us to remove a review or other user-generated content, contact us at hello@sidekicksoda.com. We may not be able to remove content that has already been shared, copied, indexed, archived, or reposted by others.

19. Children’s Privacy

Our website and products are not directed to children under 16.

We do not knowingly collect, sell, or share personal information from children under 16.

Because online visitors may use our website before we know their age, some technical information may be collected automatically before age is known. Where required, we will delete or suppress information associated with a child if we become aware that it was collected without appropriate consent.

If you believe a child has provided personal information to us, contact us at hello@sidekicksoda.com.

20. Notice of Financial Incentive

From time to time, we may offer discounts, promotional codes, free shipping, referral rewards, loyalty benefits, giveaway entries, or similar benefits when you sign up for email or SMS marketing, refer a friend, enter a promotion, create an account, or otherwise provide contact information.

The exact offer may vary by campaign and will be shown at the time of signup or participation.

These offers may be considered a financial incentive or price or service difference under California law because they involve the collection of personal information, such as your name, email address, phone number, marketing preferences, referral activity, or purchase information.

Participation is voluntary. You may opt in by following the signup or participation instructions shown with the offer. You may withdraw by unsubscribing from marketing emails, replying STOP to SMS messages, or contacting us.

The value of the personal information related to these offers is reasonably related to the value of the benefit, discount, reward, or offer provided to you, together with our anticipated business value from being able to market to you, attribute referrals, or understand customer engagement.

Withdrawing from marketing will not affect completed purchases or discounts already validly used, but you may no longer receive future marketing offers.

21. Notice to New Zealand Residents

If you are in New Zealand, the Privacy Act 2020 gives you rights in relation to your personal information, including rights to access and request correction of your information.

We collect personal information where it is lawful, connected to our business, and reasonably necessary for purposes such as operating our store, fulfilling orders, providing customer support, marketing, analytics, advertising, fraud prevention, wholesale, subscriptions, legal compliance, and related business activities.

We may collect personal information directly from you and indirectly from service providers, apps, advertising platforms, analytics partners, referral partners, payment providers, logistics providers, retail or wholesale partners, and other sources described in this Privacy Policy.

Where required by New Zealand privacy law, including Information Privacy Principle 3A, we will take reasonable steps to notify individuals when personal information is collected indirectly, unless an exception applies.

You may request access to or correction of your personal information by contacting us.

You may also contact the New Zealand Office of the Privacy Commissioner if you have a privacy complaint.

22. Notice to Australian Residents

If you are in Australia, you may have rights under the Australian Privacy Act and Australian Privacy Principles.

You may contact us to request access to or correction of your personal information or to make a privacy complaint.

If you are not satisfied with how we handle your complaint, you may be able to contact the Office of the Australian Information Commissioner at oaic.gov.au.

23. Notice to United Kingdom Residents

If you are in the United Kingdom, we may process your personal information under the following legal bases, depending on the context:

• Performance of a contract, such as processing and delivering your order

• Consent, such as for certain cookies, SMS marketing, or email marketing where consent is required

• Legitimate interests, such as improving our store, preventing fraud, responding to customers, and measuring business performance

• Legal obligations, such as tax, accounting, regulatory, and consumer law obligations

UK residents may have rights to access, correct, delete, restrict, object to processing, request portability, and withdraw consent where processing is based on consent.

You may also have the right to complain to the UK Information Commissioner’s Office.

Where we transfer personal information outside the UK, we use appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, the UK International Data Transfer Agreement, or other recognised transfer mechanisms.

24. Notice to Taiwan Residents

If you are in Taiwan, you may have rights under applicable personal data protection laws, including rights to access, review, request copies of, supplement, correct, request deletion of, or request cessation of collection, processing, or use of your personal information, subject to legal exceptions.

You may contact us at hello@sidekicksoda.com to exercise applicable rights.

25. Notice to United States Residents

Depending on your state of residence, you may have privacy rights under state privacy laws, including rights to:

• Confirm whether we process your personal information

• Access personal information

• Correct inaccurate personal information

• Delete personal information

• Obtain a copy of personal information

• Opt out of sale of personal information

• Opt out of sharing personal information

• Opt out of targeted advertising

• Opt out of certain profiling

• Limit or withdraw consent for sensitive personal information where applicable

• Appeal a decision regarding your request

These rights may apply to residents of states such as California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, Indiana, New Jersey, New Hampshire, Maryland, Minnesota, and other states with applicable privacy laws.

You can submit a request by contacting us at hello@sidekicksoda.com or by using:

https://sidekicksoda.com/pages/your-privacy-choices

We will verify and respond to requests as required by applicable law.

We will respond to verified privacy requests without undue delay and within 45 days of receiving the request, unless a shorter period is required by law. If reasonably necessary due to the complexity or number of requests, we may extend the response period by an additional 45 days. If we need an extension, we will notify you within the original 45-day period and explain the reason for the extension.

Texas residents: We do not sell sensitive personal data, and we do not sell biometric data.

26. Notice to California Residents

This section applies to California residents and supplements the rest of this Privacy Policy. It is intended to provide notice under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, where applicable.

A. Categories of Personal Information We Collect

In the past 12 months, we may have collected the following categories of personal information:

CCPA Category	Examples We May Collect	Sources	Purposes	Disclosed for Business Purposes To	Sold or Shared?
Identifiers	Name, email, phone, address, IP address, device ID, online identifiers, account ID	You, your device, Shopify, apps, ad partners, referral partners	Orders, accounts, support, marketing, analytics, fraud prevention	Shopify, payment providers, fulfilment providers, Klaviyo, Judge.me, referral providers, ad/analytics providers	Yes, for advertising, analytics, attribution, or targeted advertising where applicable
Customer Records Information	Name, address, phone, payment-related information, billing details, transaction records	You, checkout, Shopify, payment providers	Payment, fulfilment, tax, accounting, legal compliance	Shopify, payment providers, accounting providers, fulfilment providers, professional advisers	Yes — transaction-related identifiers, such as hashed email or phone number, may be shared with advertising and analytics partners. Full payment information is not sold or shared.
Protected Classifications	We do not intentionally request this, but you may choose to submit it in free-text fields	You	Support, reviews, forms, legal compliance where applicable	Service providers supporting the relevant feature	No
Commercial Information	Products viewed, cart activity, purchases, subscriptions, order history, reviews, referral activity	You, Shopify, Klaviyo, apps, ad partners	Fulfilment, subscriptions, marketing, analytics, attribution, personalisation	Shopify, Klaviyo, subscription providers, fulfilment providers, ad/analytics providers, referral providers	Yes, for advertising, attribution, and targeted advertising where applicable
Biometric Information	None intentionally collected	Not applicable	Not applicable	Not applicable	No
Internet or Network Activity	Browsing activity, device data, clicks, page views, ad interactions, referring URLs	Your device, cookies, pixels, analytics tools	Site operation, analytics, advertising, fraud prevention, personalisation	Shopify, Pandectes, Google, Meta, TikTok, Pinterest, Snapchat, Klaviyo, analytics providers	Yes, for advertising, analytics, and targeted advertising where applicable
Geolocation Data	Approximate location from IP address; precise location if you allow browser location access	Your device, browser, Shopify, store locator tools	Store locator, fraud prevention, analytics, regional site experience	Shopify, store locator providers, analytics providers	Approximate location may be shared for analytics/advertising; precise location is not sold or shared for targeted advertising
Sensory Information	Photos, videos, or images you submit in reviews, social posts, or support messages	You	Reviews, support, marketing, moderation	Review providers, marketing providers, service providers	Not sold for money; may be displayed publicly or used with your permission
Professional or Employment Information	Wholesale, retail, distributor, or partnership details you provide	You, business partners	Wholesale, retail, distributor, and partnership management	Wholesale tools, CRM tools, fulfilment providers, professional advisers	No
Education Information	None intentionally collected	Not applicable	Not applicable	Not applicable	No
Inferences	Product interests, purchase likelihood, marketing segments, customer preferences	Shopify, Klaviyo, pixels, analytics tools, advertising partners	Personalisation, analytics, marketing, advertising, business reporting	Marketing, analytics, and advertising providers	Yes, for targeted advertising where applicable
Sensitive Personal Information	Account login credentials; precise location if allowed; contents of communications if voluntarily provided	You, your device	Account access, security, store locator, support, legal compliance	Relevant service providers only	No sale or sharing for advertising purposes

B. Categories of Sources

We collect personal information from:

• You

• Your device and browser

• Shopify

• Payment processors

• Fulfilment and logistics providers

• Marketing and SMS providers

• Advertising platforms

• Analytics providers

• Review providers

• Referral and affiliate partners

• Store locator providers

• Social media platforms

• Customer support tools

• Other service providers and business partners

C. Business or Commercial Purposes

We collect, use, and disclose personal information for:

• Processing orders and payments

• Shipping products

• Managing accounts

• Providing subscriptions

• Customer support

• Reviews and user-generated content

• Marketing and advertising

• Analytics and reporting

• Affiliate and referral attribution

• Fraud prevention and security

• Legal, tax, and accounting compliance

• Business operations and improvement

D. Sale and Sharing

We do not sell personal information for money.

We may sell or share personal information as defined by California law when we disclose website activity, online identifiers, hashed contact information, purchase events, cart events, or advertising events to advertising, analytics, affiliate, or attribution partners.

You can opt out by visiting:

https://sidekicksoda.com/pages/your-privacy-choices

We also recognise Global Privacy Control where required.

We do not knowingly sell or share personal information of consumers under 16 years old.

E. Sensitive Personal Information

We may collect limited sensitive personal information as described in this Privacy Policy.

We do not use sensitive personal information to infer characteristics about you.

Because we do not use sensitive personal information for purposes that require a separate limitation right under California law, we do not currently provide a separate “Limit the Use of My Sensitive Personal Information” link.

F. California Privacy Rights

California residents may have the right to:

• Know what personal information we collect, use, disclose, sell, or share

• Access specific pieces of personal information we have collected

• Delete personal information, subject to exceptions

• Correct inaccurate personal information

• Opt out of sale or sharing of personal information

• Limit the use or disclosure of sensitive personal information where applicable

• Not be discriminated against for exercising privacy rights

G. How to Exercise California Rights

California residents may submit privacy requests by contacting us at:

Email: hello@sidekicksoda.com

Phone:
United States: +1 800 917 2426
Australia: +61 2 9052 0881
New Zealand / International: +64 21 668 241

Your Privacy Choices:
https://sidekicksoda.com/pages/your-privacy-choices

We will acknowledge and respond to requests within the timeframes required by law.

We may need to verify your identity before fulfilling your request.

H. California Shine the Light

California residents may request information about our disclosure of certain personal information to third parties for their own direct marketing purposes. To make this request, contact us at hello@sidekicksoda.com.

I. Authorised Agents

California residents may use an authorised agent to submit a request. We may require proof of authorisation and may also require you to verify your identity directly with us.

J. Non-Discrimination

We will not discriminate against you for exercising your California privacy rights.

27. Complaints and Appeals

If you have a privacy complaint, contact us at hello@sidekicksoda.com.

If we decline your privacy request, you may appeal our decision by emailing hello@sidekicksoda.com with “Privacy Appeal” in the subject line.

Please submit your appeal within 60 days of our decision, unless a longer period is required by law.

We will respond to your appeal in writing within the timeframe required by applicable law. Where a 45-day appeal period applies, we will respond within 45 days. Where a 60-day appeal period applies, we will respond within 60 days. Our response will explain any action taken or not taken and the reasons for our decision.

If we deny your appeal, we will provide information about how you may contact your state Attorney General or other applicable regulator to submit a complaint, where required by law.

28. Third-Party Links

Our website may link to third-party websites, social media pages, retailers, partners, or services that we do not own or control.

Those third parties may have their own privacy policies and practices. We are not responsible for their privacy practices.

29. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, services, legal obligations, or business operations.

We will post the updated Privacy Policy on this page and update the “Last updated” date.

If we make material changes, we may provide additional notice, such as by email, website notice, pop-up, or another method required by law.