Privacy Policy

Last Revised: October 2026

Club AS, a corporation organized and existing under the laws of the Kingdom of Norway, with its head office located at Club AS, Eilert Sundts Gate 41, 0355 Oslo, Norway (“Club AS”), (collectively “Club AS,” “we,” “us,” or “our”) respect your privacy and we are committed to treating and using Personal Information (as defined below) about you responsibly.

This Privacy Policy (“Policy”) explains how Club AS collects information via this website (such website, and all of our activities thereon, constituting “the Online Services”), and how Club AS shares and uses that information.

Throughout this Policy, we refer to the nonpublic personal information that directly and without additional information identifies you or your accounts as “Personal Information.” “Personal Information” includes information such as your name, address, email address, or phone number and other information that is not otherwise publicly available (such as your date of birth, Social Security number and financial information). Please read this Policy carefully.

When you visit this site you consent to the terms of this Policy and the information described herein. Any dispute related to this Policy will be governed by our Club AS Terms of Service Agreement .

Personal Information we collect

We may collect and process the following personal data:

When you visit or browse the Online Services, we and our advertising, marketing, or service partners may collect information such as your Internet Protocol or “IP” address, the “URL” of the web pages you visit, and may use “cookies,” web beacons, or other objects to collect statistical and other information about your use of the our website and other websites. The purpose of collecting this information is to improve the effectiveness of the Online Services and to conduct targeted advertising or marketing. The collected information may include, for example, the web pages you visited; the date and time of your visit; the websites you visited immediately before and after visiting our website; your language preference; demographic information; the kind of browser you use; and the popularity of various advertising words and phrases used by us. The collection of this information allows for the compilation of aggregate and anonymous information about the usage of our online Services.

We may collect personal information, including your name and email address, through sign-up forms embedded directly on participating brand storefronts ("Embed Sign-Up"). By submitting your information through an Embed Sign-Up, you consent to the creation of a Club account and the processing of your personal data as described in this Privacy Policy. The brand operating the storefront acts as a data controller for the purposes of initial data capture; Club acts as a data controller for all subsequent processing of your account data. 

Where you register for or access your account using passwordless authentication, we process your email address to generate and deliver a time-limited authentication token ("Magic Link"). Magic Links expire automatically after use or after a fixed validity period and are not retained beyond that time. We do not use Magic Link data for any purpose other than account authentication. 

For users of our iOS application, we may collect the Identifier for Advertisers (IDFA). This is a unique device identifier provided by Apple that allows us and our advertising partners to track your activity across other companies’ apps and websites for the purpose of delivering personalized advertisements and measuring ad performance.

Passwordless Authentication (Magic Links): Where you register for or access your account using passwordless authentication, we process your email address to generate and deliver a time-limited authentication token ("Magic Link"). Magic Links expire automatically after use or after a fixed validity period and are not retained beyond that time. We do not use Magic Link data for any purpose other than account authentication. 

The data table below shows what submitted personal data we store about you when you sign up and complete your account details. The period of retention is based on the last time you were active on the platform.

We take certain appropriate security measures to help protect your personal information from accidental loss and from unauthorized access, use or disclosure. However, we cannot guarantee that unauthorized breaches won’t occur. The period of retention for each of your personal data is 24 months.

Users:

Brand Representatives:

For brands using Shopify

Through connecting your Shopify to Brandbassador, we will connect the following Shopify data from purchases made through discount codes created in Brandbassador: 'id', 'order-number', 'total-price', 'discount-codes', 'currency', 'financial_status', 'total_shipping_price_set', 'referring_site' , 'landing_site_ref' and 'created_at'.

We collect this data to provide analytics to the brand on sales tracking and performance from discount codes shared by its users - both on a campaign level as well on an user level. Data deletion / retention: As long as a brand is signed up to Brandbassador, we will store the previously listed data. When a brand proceeds to delete their account, Brandbassador will delete all stored personal data within 7 days of account deletion. Where a Brand has disabled customer email recruitment in its platform settings, customer email addresses from Shopify orders are not collected or stored by Club. In such cases, only order-level data (order ID, total price, discount codes, currency, financial status, shipping price, referring site, landing site, and timestamps) is processed. The scope of personal data collected via Shopify integrations therefore depends on the Brand’s active configuration at the time of order processing.

 

Child Safety Standards

At Club, we are committed to the safety and protection of minors using our platform. We adhere to rigorous child safety standards that comply with all applicable child protection laws. Our measures include automatic content filtering, age verification, real-time monitoring to prevent exploitation and abuse, and mechanisms that allow for the appropriate and safe access of content by children. Additionally, we provide users with the ability to report any concerns directly through the app, ensuring a rapid response to safeguard our community. These practices demonstrate our dedication to creating a safe and secure environment for all users.

If you have any concerns or questions about our child safety measures, please contact us at hello@club.co.

 

General Use and Legal Basis

Users

We use your personal data:

We may disclose your personal data to the following third parties:


We use Google Analytics 4 to collect and analyse user behaviour on our platform, including signup events and associated brand identifiers. Data transmitted to Google Analytics may include unique brand identifiers and event-level behavioural data. Google Analytics operates as a data processor on our behalf under Google's data processing terms. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on available at https://tools.google.com/dlpage/gaoptout. 


Representatives of brands

We use your personal data:

How is Personal Information protected?

We take certain appropriate security measures to help protect your personal information from accidental loss and from unauthorized access, use or disclosure. However, we cannot guarantee that unauthorized breaches won’t occur.

Your rights

You have the right to access your personal data (Art. 15 GDPR); to correct, delete or restrict (stop any active) processing of your personal data (Art. 16- 18 GDPR); and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller (Art. 20 GDPR).

In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing – Art. 21 GDPR)).

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.

The easiest way to access and update the information you provided to us is to log into your account. To exercise any of the above mentioned rights, you can get in touch with us – or our data protection officer – using the details set out below. When addressing us, please always provide your name, address and/or email address as well as detailed information about the change you require.

If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred.

When we ask you to supply us with personal data we will make it clear whether the personal data we are asking for must be supplied so that we can provide the services to you, or whether the supply of any personal data we ask for is optional.

For iOS users, you can also manage your tracking preferences at any time by going to your device's Settings > Privacy > Tracking. Here, you can withdraw or grant permission for our app to track your activity.

How long we keep your personal data

Where you are a customer or a registered user, we will keep your information for the duration of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this notice.

How to request deletion of your data

If you wish to delete your account, please send your deletion request to info@club.co with the subject line “Account / Data Deletion”. You can request specific data or all data to be permanently removed. You may only delete your account if your cash balance is positive. Once deleted, you will receive a confirmation by email.

Might this Privacy Policy change?

We may update this Policy from time to time. We may notify you of an update to this Policy by any reasonable means, including by e-mail, by an online account notification, mobile application pop-up, or by regular mail. You agree that if you choose to continue to use the Online Services after Club AS sends you such an e-mail, online account notification, mobile application pop-up, or regular mail (allowing one week from the sent date for delivery of regular mail), you are bound to the most recent version of the Policy. You should periodically check the effective date at the top of this Policy to be sure that you are aware of the most recent version of this Policy and the important information described in it.

How do I contact Club AS about this Privacy Policy?

If you have questions about this Privacy Policy, or to contact Club AS about your Personal Information, please contact us at:

Attention: Consumer Affairs Department

Club AS

Eilert Sundts Gate 41,

0355 Oslo,

Norway

info@club.co

+47 854 24 810