Privacy Policy
Last Revised: October 2026
Club AS, a corporation organized and existing under the laws of the Kingdom of Norway, with its head office located at Club AS, Eilert Sundts Gate 41, 0355 Oslo, Norway (“Club AS”), (collectively “Club AS,” “we,” “us,” or “our”) respect your privacy and we are committed to treating and using Personal Information (as defined below) about you responsibly.
This Privacy Policy (“Policy”) explains how Club AS collects information via this website (such website, and all of our activities thereon, constituting “the Online Services”), and how Club AS shares and uses that information.
Throughout this Policy, we refer to the nonpublic personal information that directly and without additional information identifies you or your accounts as “Personal Information.” “Personal Information” includes information such as your name, address, email address, or phone number and other information that is not otherwise publicly available (such as your date of birth, Social Security number and financial information). Please read this Policy carefully.
When you visit this site you consent to the terms of this Policy and the information described herein. Any dispute related to this Policy will be governed by our Club AS Terms of Service Agreement .
Personal Information we collect
We may collect and process the following personal data:
- Embed Sign-Up: We may collect personal information, including your name and email address, through sign-up forms embedded directly on participating brand storefronts ("Embed Sign-Up"). By submitting your information through an Embed Sign-Up, you consent to the creation of a Club account and the processing of your personal data as described in this Privacy Policy. The brand operating the storefront acts as a data controller for the purposes of initial data capture; Club acts as a data controller for all subsequent processing of your account data.
- Information you give us: you may give us information about you when you create an account on our website, including your name, gender, age, location, e-mail, picture.
- Social Login: You may choose to register or sign in to your Club account using your Google or Apple account ("Social Login"). When you use Social Login, we receive information from Google or Apple that may include your name, email address, and profile image, subject to the permissions you have granted to that provider. We use this information solely to create or authenticate your Club account and do not share it with third parties for marketing purposes. Your use of Social Login is also subject to the privacy policy of the relevant provider: Google Privacy Policy (https://policies.google.com/privacy) and Apple Privacy Policy (https://www.apple.com/legal/privacy/). You may disconnect your Social Login at any time from your account settings.
- You may choose to register or sign in to your Club account using your Google or Apple account ("Social Login"). When you use Social Login, we receive information from Google or Apple that may include your name, email address, and profile image, subject to the permissions you have granted to that provider. We use this information solely to create or authenticate your Club account and do not share it with third parties for marketing purposes. Your use of Social Login is also subject to the privacy policy of the relevant provider: Google Privacy Policy (https://policies.google.com/privacy) and Apple Privacy Policy (https://www.apple.com/legal/privacy/). You may disconnect your Social Login at any time from your account settings.
- Information we collect about you:
When you visit or browse the Online Services, we and our advertising, marketing, or service partners may collect information such as your Internet Protocol or “IP” address, the “URL” of the web pages you visit, and may use “cookies,” web beacons, or other objects to collect statistical and other information about your use of the our website and other websites. The purpose of collecting this information is to improve the effectiveness of the Online Services and to conduct targeted advertising or marketing. The collected information may include, for example, the web pages you visited; the date and time of your visit; the websites you visited immediately before and after visiting our website; your language preference; demographic information; the kind of browser you use; and the popularity of various advertising words and phrases used by us. The collection of this information allows for the compilation of aggregate and anonymous information about the usage of our online Services.
We may collect personal information, including your name and email address, through sign-up forms embedded directly on participating brand storefronts ("Embed Sign-Up"). By submitting your information through an Embed Sign-Up, you consent to the creation of a Club account and the processing of your personal data as described in this Privacy Policy. The brand operating the storefront acts as a data controller for the purposes of initial data capture; Club acts as a data controller for all subsequent processing of your account data.
Where you register for or access your account using passwordless authentication, we process your email address to generate and deliver a time-limited authentication token ("Magic Link"). Magic Links expire automatically after use or after a fixed validity period and are not retained beyond that time. We do not use Magic Link data for any purpose other than account authentication.
For users of our iOS application, we may collect the Identifier for Advertisers (IDFA). This is a unique device identifier provided by Apple that allows us and our advertising partners to track your activity across other companies’ apps and websites for the purpose of delivering personalized advertisements and measuring ad performance.
Passwordless Authentication (Magic Links): Where you register for or access your account using passwordless authentication, we process your email address to generate and deliver a time-limited authentication token ("Magic Link"). Magic Links expire automatically after use or after a fixed validity period and are not retained beyond that time. We do not use Magic Link data for any purpose other than account authentication.
The data table below shows what submitted personal data we store about you when you sign up and complete your account details. The period of retention is based on the last time you were active on the platform.
We take certain appropriate security measures to help protect your personal information from accidental loss and from unauthorized access, use or disclosure. However, we cannot guarantee that unauthorized breaches won’t occur. The period of retention for each of your personal data is 24 months.
Users:
- First Name: We use this information to identify you on the platform. This allows the brands to recognize you as user
- Last Name: We use this information to identify you on the platform. This allows the brands to recognize you as user
- Country, City: This information allows the brands to present customized missions and content to you
- Interests: This information allows the brands to present customized missions and content to you, and also showing brands that correlate with your interests
- Photo: Brands will use this information to identify you on the platform. This allows the brands to recognize you as user
- Gender: This information allows the brands to present customized missions and content to you
- Measurements: With this information brands will be able to send you products that match your indicated measurements
- Address: With this information brands will be able to send you products.
- Social Network Info (Facebook, Instagram, Twitter, TikTok, YouTube (Google)): Club stores the social network identifier, your reach and an access token if you choose to link your accounts. This information will allow the brands to present customized missions and content to you. The access token will only be used to validate and store the contents that you publish on your social networks which are submitted in relationship with Club and, for Instagram Business and Creator accounts, to read performance metrics for those submitted posts. This to make sure the social media content you share with brands through submitting to missions is made available to the brand admins, and to ensure we can evaluate and give feedback on your submitted content in a timely and simple manner. Brand admins can see your submitted posts and their metrics, individually and combined per mission, to review your submission, and to analyze and understand how the brand’s missions perform. We only collect these metrics for posts you submit, for up to 90 days after submission, and we do not sell them or use them for advertising. You can stop collection at any time by removing Club in your Instagram settings (Apps and websites) or by contacting Club support at info@club.co. To request deletion of your data, see “How to request deletion of your data” below.
- Club is using the YouTube API Services. To better understand the data collected through the API, please read the Google Privacy Policy. If you wish to revoke your user data, please do so on your Google security settings page.
- IP Address: Club stores your IP address as a means to detect fraudulent behavior.
- Device identifiers: The device identifiers let us send you push notifications to your device, making sure that you are up-to-date on the actions related to you
- Bank details: Club keeps the address and the last four digits of your bank account, to provide this information to our third-party provider, Payoneer
- E-mail address: We collect this information to be able to contact you about updates and information related to your use of the service.
- Mobile number: We collect this information to be able to contact you regarding information related to your use of the service. E.g as a part of shipping information.
- ID verification: When verifying your ID we store all details about your submitted document as well as profile image taken during the verification process.
- Address verification: When verifying your address, we store all details about your submitted document.
- Tracking Data (including IDFA and User ID): We collect these identifiers to provide you with a personalized experience and to track the effectiveness of our advertising campaigns. This data is shared with third-party service providers like Meta and TikTok.
Brand Representatives:
- First name: We use this information to identify you as a representative of a brand
- Last name: We use this information to identify you as a representative of a brand]
- E-mail address: We collect this information to be able to contact you about updates and information related to your use of the service.
- Country
- Photo
For brands using Shopify
Through connecting your Shopify to Brandbassador, we will connect the following Shopify data from purchases made through discount codes created in Brandbassador: 'id', 'order-number', 'total-price', 'discount-codes', 'currency', 'financial_status', 'total_shipping_price_set', 'referring_site' , 'landing_site_ref' and 'created_at'.
We collect this data to provide analytics to the brand on sales tracking and performance from discount codes shared by its users - both on a campaign level as well on an user level. Data deletion / retention: As long as a brand is signed up to Brandbassador, we will store the previously listed data. When a brand proceeds to delete their account, Brandbassador will delete all stored personal data within 7 days of account deletion. Where a Brand has disabled customer email recruitment in its platform settings, customer email addresses from Shopify orders are not collected or stored by Club. In such cases, only order-level data (order ID, total price, discount codes, currency, financial status, shipping price, referring site, landing site, and timestamps) is processed. The scope of personal data collected via Shopify integrations therefore depends on the Brand’s active configuration at the time of order processing.
Child Safety Standards
At Club, we are committed to the safety and protection of minors using our platform. We adhere to rigorous child safety standards that comply with all applicable child protection laws. Our measures include automatic content filtering, age verification, real-time monitoring to prevent exploitation and abuse, and mechanisms that allow for the appropriate and safe access of content by children. Additionally, we provide users with the ability to report any concerns directly through the app, ensuring a rapid response to safeguard our community. These practices demonstrate our dedication to creating a safe and secure environment for all users.
If you have any concerns or questions about our child safety measures, please contact us at hello@club.co.
General Use and Legal Basis
Users
We use your personal data:
- To provide, maintain and improve your user experience and website operation, and to facilitate the creation of and securing your account on our network. It is in our legitimate business interests to continue to maintain our product and service offering to individuals in order to keep running our business;
- To provide you with our services we need this information in order to fulfill our obligations arising out of the Terms of Service entered into between you and us. Without this information we would not be able to provide the services requested by you.
- To comply with applicable laws and protect Club’s legal rights, including, but not limited to, in connection with legal claims, compliance, regulatory, and investigative purposes (including disclosure of such information in connection with legal process or litigation).
- To provide Personalized Advertising and Analytics we use identifiers and usage data to show you relevant advertisements and to analyze the performance of our marketing efforts. This includes tracking your activity across other platforms as permitted by your device settings.
We may disclose your personal data to the following third parties:
- Brands: we disclose your personal data to brands in order to provide our services to you and the brands;
- Suppliers and subcontractors: we may disclose your personal data to suppliers that provides us services, for example suppliers of identity verification, cloud solutions and payment service providers;
- Divestment of business or assets: If we sell any business or assets, we may disclose your personal data to the prospective buyer of such business or assets;
- Authorities: we will share your personal data with authorities if we are under a duty to disclose or share your personal data in order to comply with any legal obligation.
- Advertising and Analytics Partners (SDKs): We share certain identifiers (such as IDFA and User IDs) and event data with third-party SDK providers, specifically the Meta SDK and TikTok SKD, to help us target and measure the effectiveness of our ads. You can view Meta's privacy practices at facebook.com/about/privacy and TikTok's privacy practices at https://www.tiktok.com/legal/page/row/privacy-policy/en
- Google Analytics: We use Google Analytics 4 to collect and analyse user behaviour on our platform, including signup events and associated brand identifiers. Data transmitted to Google Analytics may include unique brand identifiers and event-level behavioural data. Google Analytics operates as a data processor on our behalf under Google's data processing terms. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
We use Google Analytics 4 to collect and analyse user behaviour on our platform, including signup events and associated brand identifiers. Data transmitted to Google Analytics may include unique brand identifiers and event-level behavioural data. Google Analytics operates as a data processor on our behalf under Google's data processing terms. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
Representatives of brands
We use your personal data:
- To provide, maintain and improve your user experience and website operation, and to facilitate the creation of and securing your account on our network. It is in our legitimate business interests to continue to maintain our product and service offering to brands in order to keep running our business;
- To provide our services to the brand that you represent. We use the personal data to give you access to the services (e.g. by registering an account). The processing is necessary for our legitimate business interest to provide our services to the brand that you represent.
- To comply with applicable laws and protect Club’s legal rights, including, but not limited to, in connection with legal claims, compliance, regulatory, and investigative purposes (including disclosure of such information in connection with legal process or litigation).
How is Personal Information protected?
We take certain appropriate security measures to help protect your personal information from accidental loss and from unauthorized access, use or disclosure. However, we cannot guarantee that unauthorized breaches won’t occur.
Your rights
You have the right to access your personal data (Art. 15 GDPR); to correct, delete or restrict (stop any active) processing of your personal data (Art. 16- 18 GDPR); and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller (Art. 20 GDPR).
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing – Art. 21 GDPR)).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.
The easiest way to access and update the information you provided to us is to log into your account. To exercise any of the above mentioned rights, you can get in touch with us – or our data protection officer – using the details set out below. When addressing us, please always provide your name, address and/or email address as well as detailed information about the change you require.
If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred.
When we ask you to supply us with personal data we will make it clear whether the personal data we are asking for must be supplied so that we can provide the services to you, or whether the supply of any personal data we ask for is optional.
For iOS users, you can also manage your tracking preferences at any time by going to your device's Settings > Privacy > Tracking. Here, you can withdraw or grant permission for our app to track your activity.
How long we keep your personal data
Where you are a customer or a registered user, we will keep your information for the duration of any contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this notice.
How to request deletion of your data
If you wish to delete your account, please send your deletion request to info@club.co with the subject line “Account / Data Deletion”. You can request specific data or all data to be permanently removed. You may only delete your account if your cash balance is positive. Once deleted, you will receive a confirmation by email.
Might this Privacy Policy change?
We may update this Policy from time to time. We may notify you of an update to this Policy by any reasonable means, including by e-mail, by an online account notification, mobile application pop-up, or by regular mail. You agree that if you choose to continue to use the Online Services after Club AS sends you such an e-mail, online account notification, mobile application pop-up, or regular mail (allowing one week from the sent date for delivery of regular mail), you are bound to the most recent version of the Policy. You should periodically check the effective date at the top of this Policy to be sure that you are aware of the most recent version of this Policy and the important information described in it.
How do I contact Club AS about this Privacy Policy?
If you have questions about this Privacy Policy, or to contact Club AS about your Personal Information, please contact us at:
Attention: Consumer Affairs Department
Club AS
Eilert Sundts Gate 41,
0355 Oslo,
Norway
+47 854 24 810