Privacy policy

Last Updated: January 2026

1 General

This website (Site) is operated by Skillll Pty Ltd (ABN 26636533992) trading as The Human First Kids (we, us or our).

Your privacy is important to us, and we are committed to protecting your personal information in accordance with:

the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) (Privacy Act);

the General Data Protection Regulation (EU 2016/679), which applies across the European Union, and the UK General Data Protection Regulation under the Data Protection Act 2018 (UK) (collectively, GDPR); and

the California Consumer Privacy Act (CCPA) (as applicable), which applies to California residents (collectively, Privacy Laws).

This policy outlines how and when we collect, use, process, share, store, disclose, alter and destroy your personal information and applies to all personal information we collect through:

the Site; and

our products and related services.

If you have any questions about this policy, you can contact us using the details in section 14 below.

2 What personal information we collect

Personal information is information or an opinion about an identified individual or an individual who is reasonably identifiable, whether or not the information is true or recorded in a material form.

We collect and use personal information from customers, authorised users or visitors of the Site, staff (current or prospective), purchasers of our products, and any other individual who interacts with us.

We collect and use different types of personal information depending on your interaction with us, which may include:

your name, date of birth, address, phone number, email address and occupation;

information about the products you order or enquire about, including how the products are used;

your financial and payment information (such as credit card number and bank account details), method of payment and any additional information required for user authentication (Order Information); and

any other information you provide to us, including through emails, calls, surveys, competition entries, special events, or promotions.

We do not collect your sensitive information (as defined by the Privacy Laws).

3 Collection

We collect your personal information in several ways, including:

when you purchase our digital products or physical products from the Site, as part of the buying and selling process;

when you browse our Site, where we automatically receive your computer's internet protocol (IP) address to help us learn about your browser and operating system;

when you submit information through the Site, contact us, or complete forms related to our products or services; and

when you participate in surveys, competitions, promotions, or other marketing activities.

We will only collect personal information that is necessary for one or more of our functions or for a purpose outlined in this policy or otherwise disclosed to you.

If you choose not to provide personal information, we may be unable to provide our products or services to you.

By providing your personal information, you confirm that you are authorised to do so.

4 Consent
4.1 How do you get my consent?

When you provide personal information to complete a transaction, verify your credit card, place an order, arrange a delivery, or return a purchase, we imply that you consent to our collecting and using it for that specific purpose only.

If we ask for your personal information for a secondary reason (such as marketing), we will either ask you directly for express consent or provide you with an opportunity to decline.

4.2 Direct marketing

With your express consent, we may use your personal information to send you information about the Site, our store, new products, promotions, and other updates.

You may withdraw your consent for us to contact you, or to continue using or disclosing your information, at any time by contacting us at info@TheHumanFirstKids.com.

5 Disclosure
5.1 Disclosure to third parties

With your consent, we may provide your personal information to:

our employees, related entities, business partners, third-party contractors, suppliers, and agents for the purpose of delivering, providing and administering our products, services, or Site; and

third-party service providers who process or use your personal information on our behalf, such as marketing and analytics providers, payment gateways, hosting companies, logistics partners, customer support specialists, auditors, insurers, and legal advisers (collectively, Authorised Affiliates).

We use reasonable endeavours to ensure our Authorised Affiliates protect your information and use it only for the purpose for which it was disclosed.

We may also disclose your personal information if required by law or if you violate our Terms of Service.

5.2 Disclaimer

We will not disclose your personal information to any third party (other than Authorised Affiliates) without your written consent, unless:

we are required or authorised by relevant Privacy Laws;

it is permitted under this policy; or

such disclosure is, in our opinion, reasonably necessary to protect our rights or property, avoid injury to any person, or ensure proper Site operation.

This policy only covers information collected by us. The privacy practices of third parties are not within our control.

6 Shopify

Our store is hosted on Shopify Inc.
Shopify provides the online eCommerce platform that allows us to sell our products to you.

Your data is stored through Shopify's data storage, databases and general application, secured behind a firewall.

If you use a direct payment gateway to complete your purchase, Shopify stores your credit card data encrypted through the Payment Card Industry Data Security Standard (PCI-DSS).
Your transaction data is stored only as long as necessary to complete your purchase and is then deleted.

All direct payment gateways comply with PCI-DSS standards managed by the PCI Security Standards Council (Visa, MasterCard, American Express, Discover).

For more insight, please read Shopify's Terms of Service and Privacy Policy.

7 Third-party links

Our Site may contain hyperlinks or advertising banners linking to third-party websites.

We do not endorse or control the privacy practices or content of these third-party websites and encourage you to read their respective privacy policies.
We are not responsible for any loss or damage arising from your use of third-party websites.

8 Storage and security
8.1 Protecting your personal information

We take reasonable precautions and follow industry best practices to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

If you provide credit card information, it is encrypted using SSL (Secure Socket Layer) technology and stored with AES-256 encryption.
While no internet transmission is completely secure, we comply with PCI-DSS and generally accepted industry standards.

8.2 Destruction of personal information

We will destroy or de-identify personal information when it is no longer required, unless we are required or authorised by law to retain it.
We determine retention based on:

the purpose for which information was collected;

legal or regulatory obligations (e.g., financial reporting);

ongoing customer relationships;

deletion requests; and

legitimate business interests such as analytics or legal defence.

8.3 Storage of your information

Your personal information is stored only as long as necessary for business or legal purposes following account closure or request completion.

8.4 Suspected data security incidents

We have a formal Data Breach Response Plan.
If we discover or suspect unauthorised access, loss, or disclosure of your personal information that may cause serious harm, we will notify you as soon as practicable and take action to mitigate risks.

9 Cookies

We use cookies and similar technologies to enhance your browsing experience.
Cookies allow us to track preferences, analyse usage, and improve Site performance.

Examples of cookies used:

Type

Description

_session_id

Sessional

Tracks session data (referrer, landing page)

_shopify_visit

Persistent (30 mins)

Tracks visits for analytics

_shopify_uniq

Daily

Counts visits per customer

cart

Persistent (2 weeks)

Stores cart content

_secure_session_id

Sessional

Authenticates secure sessions

storefront_digest

Indefinite

Used for password-protected stores

You can disable cookies via your browser, though some Site functions may not work properly.

10 Age of consent

By using this Site, you represent that you are at least the age of majority in your state or country of residence, or you have obtained parental consent for minors under your care to use this Site.

11 Your rights in relation to privacy
11.1 Privacy rights (EU and UK only)

Under the GDPR, you have several rights, including the right to:

access, rectify, or erase your personal information;

restrict or object to processing;

withdraw consent at any time; and

request data portability.

You can exercise these rights by contacting us at info@TheHumanFirstKids.com.

11.2 Privacy rights (California only)

Under the CCPA, you have the right to:

know what personal information we collect and how it's used;

request deletion of your information (subject to exceptions);

opt-out of data sales (we do not sell personal data);

correct inaccurate data;

limit use of sensitive data; and

be free from discrimination for exercising these rights.

11.3 Access rights

We use reasonable efforts to keep your information accurate and up-to-date.
You may request access to or correction of your personal information by writing to us. Proof of identity may be required.

If access is restricted, we will provide a written explanation.
We do not charge for access requests but may recover reasonable administrative costs.

12 Changes to this privacy policy

We reserve the right to modify this policy at any time.
Changes take effect immediately when posted on the Site.
Your continued use of our products, services or the Site after updates constitutes acceptance of the revised policy.

13 Facebook advertising

We may advertise on Facebook and Instagram, which may collect personal information when you interact with our Site or content.
Their data collection and use are governed by their own privacy policies, available at:
https://www.facebook.com/legal/technology_terms

14 Questions and contact information

If you would like to:

access, correct, amend or delete any personal information we hold about you;

obtain more information about this policy,

please contact our Privacy Compliance Officer at:

Skillll Pty Ltd (ABN 26636533992)
Attention: Privacy Compliance Officer
Email: info@TheHumanFirstKids.com