Cookies Policy

Effective: 28 August 2026

In this Cookie Policy, 'us', 'our' and 'BRNDD' means K BUI & J.C Landon & M.C Portlouis ABN 70 179 131 337 trading as BRNDD and our related bodies corporate. This Cookie Policy explains what cookies and similar tracking technologies are, how and why we use them on our website, app and platform, and how you can manage or withdraw your cookie preferences.

This Cookie Policy should be read together with our Privacy, which explains more broadly how we collect, use, store and disclose your personal information. Where information collected through cookies and similar technologies is personal information (for example, where a cookie is linked to your account or profile), we will handle that information in accordance with our Privacy Policy and this Cookie Policy.

We may change our Cookie Policy from time to time by publishing changes to it on our website. We encourage you to check our website periodically to ensure that you are aware of our current Cookie Policy.

What are cookies?

Cookies are small text files that store information on your computer, TV, mobile phone or other device when you visit a website or use an app. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions, to remember your preferences and actions, and to understand how you use a website or app.

Cookies may be 'first-party' or 'third-party'. First-party cookies are set by us and can generally only be read by our platform. Third-party cookies are set by a party other than us (for example, an analytics, advertising, email or affiliate provider) and may allow that party to recognise your device across other websites and services that use the same provider.

Cookies may also be 'session' or 'persistent'. Session cookies exist only while your browser is open and are deleted automatically when you close your browser. Persistent cookies remain on your device after you close your browser, until they expire or you delete them, and are used to remember you when you return to our platform.

Similar tracking technologies

In addition to cookies, we use, or may from time to time use, other similar tracking technologies, including:

pixels and web beacons, which are small transparent images or snippets of code embedded in web pages or emails that record when a page or email has been viewed or an action has been taken;
software development kits (SDKs), which perform a similar function to cookies within apps;
local storage and session storage, which store information (such as authentication tokens, preferences and consent choices) in your browser;
tags and scripts, including tag management tools such as Google Tag Manager, which load and control other technologies described in this Cookie Policy;
tracking links and URL parameters, including UTM and campaign parameters and affiliate tracking links, which record the source of a visit, click or other action;
server-side conversion APIs, which transmit information about your interactions with our platform directly from our systems to analytics, advertising or measurement providers; and
email open and click tracking, which records when marketing or lifecycle emails are opened and which links are clicked.

In this Cookie Policy, we refer to cookies and these similar technologies collectively as 'cookies' unless stated otherwise.

What categories of cookies do we use?

We use, or may from time to time use, the following categories of cookies on our platform. Not every cookie in every category will be active at all times, and some technologies are deployed only where enabled by us or where a particular feature or campaign is running.

Necessary cookies

Necessary cookies are essential to the operation, security and integrity of our platform. Without them, our platform, or parts of it, cannot function. We use necessary cookies to:

authenticate you and manage your session, including keeping you logged in to your account and maintaining your login state as you move around the platform (for example, through authentication tokens set by our authentication and database provider, Supabase);
protect our website, forms and platform from spam, fraud, abuse, bots, unauthorised access and other security risks, including through challenge tokens and verification results set by security providers such as Cloudflare Turnstile;
support the hosting, delivery, routing, load balancing and performance of the platform, including through our hosting and infrastructure provider, Vercel;
record and store your cookie consent choices and preferences so that we can respect them on future visits;
enable core platform features to operate, such as saving items to boards, applying filters and submitting forms;
remember your stated preferences, including aesthetic style, size, price range, sustainability priorities, shipping origin preferences and other discovery preferences;
remember your applied filters, display settings, region and language preferences; and
support embedded forms and surveys (including waitlist and brand application forms provided through platforms such as Tally), for example by remembering your progress in a form.

Necessary cookies are typically session cookies or short-lived persistent cookies, although cookies that store your consent choices may remain on your device for up to 180 days. Because these cookies are essential, they cannot be switched off through our cookie preference tools, and consent is not required for their use under the GDPR, the UK GDPR and equivalent laws. You can block them through your browser settings, but if you do so, our platform may not work as intended for you (for example, you may not be able to log in, save brands to boards or submit forms).

Analytics cookies

Performance and analytics cookies help us understand how visitors use our platform so that we can operate, protect, improve and optimise it. We use these cookies to record information such as which pages you visit, the time and date of your visit, how you arrived at our platform (including referring URLs and UTM or campaign parameters), how you interact with pages and features, statistics on page views and traffic to and from the sites, and technical information such as device type, browser type and IP address. We use, or may from time to time use:

analytics and measurement providers such as Google Analytics, deployed through Google Tag Manager;
infrastructure analytics provided by our hosting provider, Vercel; and
user experience analytics, heatmap or session replay providers such as Hotjar, Microsoft Clarity or similar tools, where enabled.

Analytics cookies may be session or persistent cookies. Persistent analytics cookies typically remain on your device for up to 2 years (for example, Google Analytics cookies used to distinguish visitors commonly have a duration of around 2 years). Performance and analytics cookies are optional, and in jurisdictions where consent is required (such as the EEA and the UK) they will only be set with your consent. Currently, Google Analytics (GA4) and Google Tag Manager load on our website only when you have allowed both Analytics and Marketing cookies, because they share the same tag-management boundary.

Marketing cookies

Advertising and targeting cookies are used to deliver, measure and optimise advertising for BRNDD, and to make advertising more relevant to you. We use, or may from time to time use, advertising, remarketing and audience providers such as Google Ads, Meta and, where enabled, TikTok. These cookies and related technologies (including pixels and server-side conversion APIs) may be used for:

conversion tracking, so that we can measure the effectiveness of our advertising campaigns;
remarketing, so that we can show you advertising for BRNDD on other websites, apps and social platforms after you visit our platform;
customer matching and advanced matching, including through the sharing of hashed contact information such as email addresses or phone numbers with advertising and measurement providers;
building custom audiences, lookalike audiences and suppression lists; and
campaign optimisation, frequency capping, fraud prevention and advertising measurement.

Advertising cookies are typically persistent cookies. Their durations vary by provider and commonly range from around 3 months (for example, certain Meta cookies) up to 2 years. Advertising and targeting cookies are optional. In jurisdictions where consent is required, they will only be set with your consent. In California, the use of these technologies may constitute 'sharing' or a 'sale' of personal information under the CCPA/CPRA, and you may opt out as described in this Cookie Policy.

We use email, SMS and lifecycle marketing providers such as Klaviyo to send you marketing, lifecycle and service communications and to understand how you engage with them. These technologies may include:

onsite tracking scripts and cookies that recognise your device and, where you have identified yourself (for example, by joining our waitlist, subscribing or creating an account), associate your onsite activity with your marketing profile;
pixels within emails that record when an email is opened and which links are clicked; and
tracking links that attribute visits and actions on our platform to a particular email, campaign or flow.

Cookies set by our email marketing provider are typically persistent and may remain on your device for up to 2 years. These technologies are optional. You can opt out of receiving marketing communications at any time using the unsubscribe link in our emails or by contacting us, and you can manage the associated cookies through our cookie preference tools and your browser settings.

How long do cookies remain on your device?

How long a cookie remains on your device depends on whether it is a session or persistent cookie and on the duration set by the party that placed it. As a general guide:

session cookies are deleted automatically when you close your browser;
necessary cookies are typically session cookies or short-lived, although consent-preference cookies may persist for up to 180 days;
functional cookies typically persist for between the duration of your session and 12 months;
performance and analytics cookies typically persist for up to 2 years;
advertising and email marketing cookies typically persist for between around 3 months and 2 years; and
affiliate and attribution cookies typically persist for between around 7 days and 90 days, depending on the relevant program or network.

Exact cookie names, providers and durations may change from time to time as we and our service providers update our technologies, and third parties control the durations of the cookies they set. You can delete cookies from your device at any time through your browser settings, regardless of their stated duration.

Third-party cookies and service providers

We use third party service providers to operate, host, secure, analyse, market and improve BRNDD, and a number of these providers set or read cookies and similar technologies on our platform. These may include, or may from time to time include:

hosting and infrastructure providers such as Vercel;
database, authentication and storage providers such as Supabase;
spam, fraud, bot-protection and security providers such as Cloudflare Turnstile;
tag management providers such as Google Tag Manager;
analytics and measurement providers such as Google Analytics;
advertising, remarketing and audience providers such as Google Ads, Meta and, where enabled, TikTok;
email, SMS and lifecycle marketing providers such as Klaviyo;
form and survey providers such as Tally;
user experience analytics, heatmap or session replay providers such as Hotjar, Microsoft Clarity or similar tools, where enabled; and
affiliate partners and affiliate network providers.

These third parties may process information collected through cookies for their own purposes and in accordance with their own privacy and cookie policies. Some of these providers are located outside Australia, or may process, store, access, support, cache or route information collected through cookies outside Australia. Our Privacy Policy explains how we deal with the disclosure of personal information outside Australia.

For more information about the data Cloudflare processes when providing Turnstile bot protection, see the Cloudflare Turnstile Privacy Addendum.

How do we obtain your consent

Necessary cookies are always active, because the platform cannot operate without them. For all other categories of cookies, how we obtain your consent depends on where you are located:

in Australia, we provide notice of our use of cookies through this Cookie Policy and our Privacy Policy, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we provide you with tools to manage your cookie preferences as described below;
in the European Economic Area and the United Kingdom, we will only set optional cookies with your prior consent, obtained through our cookie banner or preference centre. You can give or refuse consent on a per-category basis, and you can withdraw your consent at any time, as easily as you gave it, through our cookie preference tools; and
in United States jurisdictions with comparable laws, we provide notice of our use of cookies at or before the point of collection, and we provide you with the ability to opt out of the 'sale' or 'sharing' of your personal information, including through our cookie preference tools.

Where different jurisdictions impose different obligations, we aim to apply the highest practical standard, so that a single approach to cookie transparency and consent can be used internationally. Your consent choices are recorded and respected on future visits, and we may periodically re-present our cookie banner, including where we make material changes to our use of cookies.

How do we manage or withdraw your cookie preferences?

You can manage or withdraw your cookie preferences at any time in the following ways:

cookie preference tools: Where our cookie banner or preference centre is available, you can use it to accept, refuse or adjust optional cookie categories, and to withdraw any consent you have previously given, at any time via the cookie settings link on our platform;
browser settings: Most browsers allow you to view, block and delete cookies, including through settings that block all cookies or third-party cookies only. Instructions are available in the help pages of your browser (including Chrome, Safari, Firefox and Edge). You can disable cookies through your internet browser, but our platform may not work as intended for you if you do so;
mobile device settings: Your mobile device settings may allow you to limit ad tracking, reset your advertising identifier, or control whether apps may track your activity;
provider opt-outs: You can opt out of Google Analytics using the Google Analytics opt-out browser add-on, manage the advertising you see from Google through your Google Ads Settings, and manage the advertising you see from Meta through your Meta ad preferences. You can also opt out of interest-based advertising from participating providers through industry tools such as Your Online Choices (EU/UK), the Network Advertising Initiative and the Digital Advertising Alliance (US); and
email tracking: You can opt out of marketing and lifecycle emails, and the associated open and click tracking, at any time by using the unsubscribe link in our emails or by contacting us using the details set out below.

Please note that opting out of advertising cookies does not mean you will stop seeing advertising; it means that the advertising you see will be less relevant to you. If you use multiple browsers or devices, you may need to set your preferences on each browser and device separately, and if you clear your cookies, you may need to set your preferences again.

Do we 'sell' or 'share' your personal information?

We do not sell your personal information for money. However, under the CCPA/CPRA, the use of certain advertising, analytics and similar cookies may be considered a 'sale' or 'sharing' of personal information, including where information collected through cookies is made available to advertising providers for cross-context behavioural advertising.

Your privacy rights

Depending on where you are located, you may have rights in relation to the personal information we collect through cookies, including:

in Australia, the right to access and seek correction of your personal information, and to make a complaint to us or to the Office of the Australian Information Commissioner (OAIC), as described in our Privacy Policy;
in the European Economic Area and the United Kingdom, rights of access, rectification, erasure, restriction of processing, data portability and objection, the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), and the right to lodge a complaint with your local supervisory authority or the UK Information Commissioner's Office (ICO); and
in California, the rights to know, access, correct and delete personal information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising those rights.

You can exercise these rights by contacting us using the details set out below. Our Privacy Policy contains further information about how we handle personal information, how you may access and correct your personal information, and how we handle complaints.

Changes to this Cookie Policy

We may amend this Cookie Policy from time to time by posting an updated version on our website. Where the change is material (for example, where we introduce new categories of cookies or materially change the purposes for which cookies are used), we will take reasonable steps to notify you, for example by email, by in-product notice or by re-presenting our cookie banner, and, where your consent is required, we will seek it. The date at the bottom of this Cookie Policy indicates when it was last updated. We encourage you to check our website periodically to ensure that you are aware of our current Cookie Policy.

Contact Us

For further information about this Cookie Policy or our use of cookies and similar technologies, or to exercise any of your rights or make a complaint, please contact us using the details set out below:

Compliance Officer

legal@brndd.com.au