Privacy policy

I. Introduction

Welcome to our website. Birkenstock Australia Pty Ltd ABN 63089868404 (we, us or our) respects your privacy and we are committed to comply with the Privacy Act 1988 (Cth) (the Act) and the 13 Australian Privacy Principles in it. This Privacy Policy explains how we collect, use, hold, process and disclose your personal information that is covered by the Act when you visit our website birkenstock.com.au, purchase our products, or interact with us in other ways over our web shop.

This policy is designed to help you understand your rights and our obligations under Australian privacy laws. Our web shop is only intended for persons of legal age. Thus, we do not intentionally collect, hold, share or otherwise process any personal information of minors intentionally.

You can find out more information about the Act and the Australian Privacy Principles from the Office of the Australian Information Commissioner (https://www.oaic.gov.au/). The Australian Information Commissioner may be contacted at oaic.gov.au (email – enquiries@oaic.gov.au).

II. Who we are

Birkenstock Australia Pty Ltd ABN 63 089 868 404 is the operator of birkenstock.com.au, an online store specialising in sandals, shoes, and related footwear products.

If you have any questions, concerns, complaints or requests regarding this Privacy Policy or our privacy practices, you can contact our privacy team at:

• • Email:privacy@birkenstock.com.au
• • Phone: 1800 623 423
• • Post: Level 1, 551 Swanston Street, Carlton, Victoria 3053, Australia

III. What personal information we collect

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.

We, or third parties acting on our behalf, may collect, use, hold and process different types of personal information depending on how you interact with us. The main categories are set out below.

• • When you make a purchase, we collect your name, email address, phone number, delivery address, billing address, and payment information. We need this information to process your order and deliver your products.
• • When you create an account, we collect your name, email address, password, and any preferences you choose to share with us (such as your shoe size or style preferences). Having an account makes it easier to track orders and enjoy a more personalised shopping experience.
• • When you contact us or use our customer support, we collect your name, contact details, and any information you provide in your message or during our conversation. This helps us respond to your enquiry and improve our service.
• • When you sign up to our mailing list, we collect your name and email address. We only send marketing communications to you if you have opted in. In accordance with the Act, you also have the option to opt out of our mailing list at any time.
• • When you browse our website, we automatically collect certain technical information through cookies and similar technologies. This includes your IP address, device type, browser type, operating system, referring website, pages viewed, and how you interact with our site. We explain this in more detail in the "Cookies and tracking technologies" section below.
• • When you provide feedback, we collect your name (or username), email address, and the content of your feedback.

IV. How we collect your information

We collect personal information that is reasonably necessary for us to conduct our business activities. Generally, your personal information will be used for providing our products and services to you, responding to your enquiries and sending you information about our marketing activities.

We collect personal information in the following ways:

• • Directly from you, when you provide it to us (e.g., when you place an order, create an account, fill in a form, subscribe to our newsletter, or contact us).
• • Automatically, when you use our website (e.g., through cookies and similar technologies).

V. How we hold, store and protect your information

We will generally hold personal information in electronic records on our servers and, where necessary, electronic records on third party servers.

We have implemented appropriate technical and organisational measures to protect your personal information by ensuring that an appropriate level of security is applied with respect to particular risks.

Our security measures include secure servers and data encryption (including SSL/TLS for data in transit), access controls and authentication measures, regular security assessments and updates, and policies regulating privacy and data security.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. When personal information is no longer needed, we take reasonable steps to delete or anonymise it.

VI. Why we use your information

We use your personal information for the following purposes:

• • Processing and fulfilling your orders, including payment processing, packaging, and delivery
• • Managing your customer account and preferences
• • Communicating with you about your orders, including confirmations, shipping updates, and receipts
• • Responding to your enquiries, feedback, and complaints
• • Providing customer support
• • Sending you marketing communications about our products, promotions, and news
• • Improving our website, products, and services
• • Detecting, investigating, and preventing fraud or other illegal activity
• • Complying with our legal and regulatory obligations

We will only use your personal information for the purposes for which it was collected, or for a related purpose you would reasonably expect, unless you have consented to another use or the law requires or permits us to use it for a different purpose.

If you do not consent to the collection or use of your personal information, we may be unable to provide you with our products and services.

VII. Your rights

Australian privacy laws grant you the following rights in relation to your personal information:

• • Access: You have the right to access your personal information. You can request a copy of the personal information we hold about you, to be sent to you or any person nominated by you. We will respond to your request within a reasonable time and provide access as required under applicable privacy laws.

• • Correction: You have the right to correct or update your personal information. If you believe the information we hold about you is inaccurate, incomplete, irrelevant, out of date, or misleading, you can ask us to correct or delete it. If we previously disclosed your personal information to another entity, you may also request us to notify that entity of any corrections and we will take such steps as are reasonable in the circumstances, unless they are impracticable or unlawful, to do so.

• • Restriction: You have the right to object to or request us to otherwise restrict or the processing of your personal information. This includes withdrawing your consent to allow us to use or process your personal information.

• • Opt-Out: You have the right to opt out of marketing. You can unsubscribe from our marketing emails at any time by clicking the "unsubscribe" link in any email, updating your preferences in your account, or contacting us directly.

• • Complaint: You have the right to make a complaint. If you believe we have breached your privacy or handled your information inappropriately, you can make a complaint to us. We will investigate your complaint and respond within 30 days.

If you have a concern or complaint about how we have handled your personal information, please contact our Privacy Officer using the details above at section II. We take all complaints seriously and will work with you to resolve the issue.

We will acknowledge your complaint within five business days, investigate the matter, and provide a written response within 30 days. If you are not satisfied with our response, you can escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

• • Website: www.oaic.gov.au
• • Phone: 1300 363 992
• • Post: GPO Box 5218, Sydney NSW 2001

To exercise any of these rights, please contact us using the details in section II of this Privacy Policy. You will not have to pay a fee to request access to your personal information or to exercise any of your other rights. However, we may charge a reasonable fee for administrative costs if your request is clearly unfounded, repetitive or onerous. If we refuse your request in relation to any of your rights, we will provide you with our reasons for doing so.

We may need to request specific information from you to help us confirm your identity when exercising your rights. This is a security measure to ensure that your personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to help speed up our response.

VII. Who we share your information with

We may share your personal information with the following types of third parties:

• • Affiliate companies of ours within the Birkenstock group such as parent and sister companies
• • Delivery and logistics partners
• • Payment providers
• • IT and hosting providers
• • Marketing and analytics providers
• • Social media platforms
• • Professional advisers, such as accountants, lawyers, and auditors
• • Government authorities and law enforcement may receive information where we are required or authorised by law to disclose it.

Unless we have another lawful means for processing your personal information, we will obtain your opt-in consent before we share your personal information with any company outside of our group for promotional and marketing purposes. You have the right to elect not to receive any third party promotional or marketing communications at any time by using the “Unsubscribe” op-out link within any emails received or contacting the third party directly.

IX. Overseas disclosures

Some of the third parties we work with are located overseas or store data in overseas locations. This means the information we collect from you may be transferred to, and stored or processed at, a location outside of Australia. The countries may include the USA, Singapore, Ireland, Canada and countries within the European Union. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient is subject to laws or binding schemes substantially similar to, and handles your personal information in a manner consistent with, the applicable Australian privacy laws, through measures such as legal reviews and assessments of applicable security and privacy policies and contractual agreements to ensure compliance with such policies.

By using this website, you consent to the transfer, storing or processing of your personal information outside of Australia.

X. Cookies and tracking technologies

Our website uses cookies and similar tracking technologies (together defined as ‘Cookies’) that serve multiple purposes. We use the following types of Cookies:

• • Strictly Necessary Cookies are used to properly display our website and to offer its core functions. Without these Cookies our website or its core functions would not work properly. The legal basis for processing personal data stored in these Cookies is our legitimate interest in providing a fully functional website. This interest outweighs a potential opposing interest to not process such data which is why Strictly Necessary Cookies are always active.

• • Functional Cookies are needed for additional features of our website that are not essential for it to work properly. They may be placed by us or by third-party vendors whose services we have added to our website. If you do not allow these Functional Cookies then some or all of these services may not function properly.

• • Marketing Cookies help us analyse the preferences of potential customers, market our products to them, and improve our products and services based on these preferences. This primarily means that we can see which marketing campaigns (e.g., ads, social media or influencer content) are of interest to potential customers. These Marketing Cookies also give us a better understanding of which parts of our websites are of interest to the visitors and to make the website more user-friendly or interesting based on this. These Marketing Cookies can be rejected and disabled.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. Please note that disabling certain cookies may affect the functionality of our website.

Some of our cookies are provided by third parties, such as Microsoft Corporation, Google LLC, Meta Platforms, Inc., Klaviyo, Inc., Gorgias, Inc. Athos Commerce, Inc., Shopify Inc., HEL SG PTE LTD, Scope Digital Ventures Limited (LTD), Foursixty Inc., Xariable, Inc., Nextools S.R.L., ITissible, SIA, POWR, Inc., PayPal Australia Pty Ltd and are subject to their privacy policies. For more information about their privacy policies, please visit their respective websites. The information these third parties collect may be transferred to, and stored at, a location outside Australia. By using this website or accepting its cookies or subscribing to receive emails from us or our service providers, you consent to that transfer, storing or processing of your personal information.

This website may include links to other websites, plug-ins and applications provided by others, including those acting on our behalf. By clicking on those links or enabling those connections, you may allow third parties to collect or share data about you, and these third parties may have their own privacy policies. We make no representations or warranties and disclaim all liability in relation to the privacy practices of any third-party provider or website. We do not control third party websites and are not responsible for their privacy policies or actions. When you leave our website, we encourage you to read the privacy policy and terms of use of every website you visit.

XI. Data Breaches

In the event of a notifiable data breach, we must comply with our obligations under the Act and report the breach to the OAIC and those individuals who are affected by the breach.

A data breach is a “notifiable data breach” if it is a breach which is likely to cause “serious harm” to an individual. Serious harm is not defined in the Act but includes physical, psychological, emotional, and reputational harm, as well as financial and economic harm.

In determining whether a data breach does or may cause serious harm, we will consider the following factors:

• • Kind or kinds of information involved;
• • Sensitivity of the information;
• • Whether the information is protected (e.g. encrypted, password protected) and the strength of those security measures;
• • Persons who have or could obtain the information;
• • Likelihood that the information could be misused;
• • Nature of any potential harm that would result from the data breach; and
• • Any other relevant matters.

We have 30 days from the time we become aware, or ought to have become aware, of a data breach to assess and report it. If, in our assessment, the data breach does not constitute a notifiable breach, we are not required by law to report it.

If you think that a data breach may have affected your personal information and you have not been told, you have the right to contact us for information about the data breach (including whether your personal information was affected). If we do not respond to your request, or you are not satisfied with our response, you have the right to make a complaint to the OIAC in writing. For more information, visit https://www.oaic.gov.au/privacy/your-privacy-rights/data-breaches/make-a-data-breach-complaint.

XII. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We encourage you to review this policy periodically. Our most recent Privacy Policy will apply to our collection, use and disclosure of your personal information.

Any changes we may make to this Privacy Policy will be posted on this website or, where appropriate, we will communicate the changes to you by email or other means.

Last updated: April 16, 2026

Version: 2.2