Cookie & Tracking Policy

This policy explains how Glass House Solutions Pty Ltd (trading as Personal Best Collective) uses cookies and tracking technologies on the Platform and associated websites. It is required under Australian Privacy Principle 5 of the Privacy Act 1988 (Cth), which requires APP entities to notify individuals at or before the time of collecting personal information about the fact of collection and how that information will be handled.

Cookies and tracking technologies collect personal information. This policy satisfies Personal Best Collective’s APP 5 notification obligations in relation to that collection.

• Applies to all users of the Platform and Personal Best Collective’s website, including coaches and Coach Clients.
• The current version of this policy is available at personalbestcollective.com/cookies.

A cookie is a small text file placed on a user’s device (computer, tablet, or mobile phone) by a website or application when the user visits or interacts with it. Cookies allow the website or application to recognise the device on subsequent visits and to store information about the user’s preferences and behaviour.

Cookies are not programs and cannot carry viruses or access information on the user’s device beyond what the cookie itself contains. They do not give Personal Best Collective access to a user’s device.

In addition to cookies, Personal Best Collective uses other tracking technologies on the Platform and website, including web beacons, pixel tags, and analytics scripts. These include the Meta Pixel, used for advertising measurement and remarketing. These technologies function similarly to cookies and are covered by this policy.

Session vs Persistent Cookies

• Session cookies are temporary and exist only for the duration of a browser session. They are deleted automatically when the user closes their browser, and are used to maintain a logged-in state and enable core Platform functionality during a session.
• Persistent cookies remain on the device after the browser is closed, for a defined period or until deleted manually. They are used for analytics, advertising and remarketing, and to remember user preferences across sessions.

Personal Best Collective uses the following categories of cookies and tracking technologies on the Platform and website.

Essential Cookies

The Coach Dashboard uses a small number of essential cookies provided by AWS Cognito, our authentication service. These cookies are strictly necessary for the application to function and cannot be disabled. When you sign in, Cognito stores an identity token and access token that authenticate your session and authorise your requests to the server; these expire after one hour. A refresh token keeps you signed in for up to 30 days without re-entering your credentials. Cognito may also store a clock drift value to correct time differences between your device and the server, and a last authenticated user identifier so the application knows which account is active. No personal data is collected, tracked, or shared with third parties through these cookies — they exist solely to keep you securely signed in. The dashboard also stores a small amount of non-cookie data in your browser’s local storage, such as your theme preference and unit system, to improve loading performance. This data never leaves your device.

Analytics Cookies

Personal Best Collective intends to use Google Analytics to collect information about how users interact with the Platform, including which pages are visited, how long users spend on each page, and where users navigate from. This data will be used in aggregate to improve the Platform. Google Analytics is not yet active on the Platform. This section will be updated when analytics cookies are enabled, and users will be notified of any changes.

Advertising and Remarketing Cookies

Personal Best Collective uses the Meta Pixel and related cookies on its website to measure how its advertising performs and to show ads to people who have visited the website (remarketing). These cookies record actions taken on the website, such as viewing a page or submitting a form, and allow Meta to deliver ads on Facebook, Instagram, and other Meta services to people who have visited. Where a user provides contact details, a hashed (irreversible) version may be shared with Meta to measure advertising and match website activity to a Meta account (advanced matching). These cookies are not essential, are set only where the user has not declined non-essential cookies, and can be opted out of as described in Section 06. Sensitive health and fitness information is never used for advertising.

Preference Cookies

Personal Best Collective does not currently use preference cookies. User preferences such as theme and unit system are stored in your browser’s local storage, which is not a cookie and cannot be accessed by third parties or transmitted to Personal Best Collective’s servers. If preference cookies are introduced in the future, this policy will be updated accordingly.

The following register sets out the specific cookies currently in use on the Platform and website. Personal Best Collective will update this register when cookies are added, removed, or materially changed.

Third-party cookies set by Google Analytics are governed by Google’s privacy policy at policies.google.com/privacy. Cookies set by the Meta Pixel and related Meta cookies are governed by Meta’s Privacy Policy at facebook.com/privacy/policy. Personal Best Collective does not control the data practices of Google or Meta in relation to information collected through these technologies.

Where a user submits a form or otherwise provides contact details on the website, a hashed (irreversible) version of that information may be shared with Meta through advanced matching to improve the measurement of advertising and to match website activity to a Meta account. The information is hashed before it is transmitted and cannot be reversed by Personal Best Collective.

The information collected through cookies and tracking technologies on the Platform and website includes:

• IP address (which may be used to infer approximate geographic location)
• Browser type and version
• Operating system and device type
• Pages visited and the order in which they were visited
• Time and date of each visit
• Time spent on each page
• Links clicked within the Platform
• Actions taken on the website used to measure advertising, such as viewing a page or submitting a form
• The URL of the page from which the user navigated to the Platform (referral URL)
• Session identifiers used to maintain logged-in status

Analytics data collected through Google Analytics is transmitted to and stored on Google’s servers. Google Analytics is configured with IP anonymisation enabled, meaning the last portion of each IP address is masked before storage. Personal Best Collective accesses this data in aggregated, anonymised form through the Google Analytics dashboard.

Information collected through the Meta Pixel is transmitted to Meta. This includes pages visited, actions taken on the website, device and browser information, and IP address, together with, where advanced matching applies, hashed contact identifiers. Meta processes this information in the United States and may combine it with information it already holds about a person who has a Meta account.

The collection of information through cookies constitutes collection of personal information under the Privacy Act 1988 (Cth). Personal Best Collective handles this information in accordance with the Privacy Policy and the APPs.

Cookie Preference Settings

When a user first accesses the Platform or Personal Best Collective’s website, a cookie notice will be displayed. Users may accept all cookies or choose to accept essential cookies only. This preference is recorded and applied for subsequent visits. Advertising and analytics cookies are set only where the user has not chosen essential cookies only.

Changing Cookie Preferences

• Access the cookie preference centre via the Cookies link in the footer of the website.
• Clear cookies through your browser settings, which will reset all cookie preferences.

Opting Out of Google Analytics

Users may opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout. This prevents Google Analytics from collecting information about website visits, and does not affect the operation of essential cookies or the user’s ability to use the Platform.

Opting Out of Advertising and Remarketing Cookies

Users may decline advertising and remarketing cookies through the cookie notice by choosing to accept essential cookies only. Users with a Meta account can also control how their information is used for advertising through their Meta account settings (Accounts Centre, then Ad preferences). The Meta Pixel’s _fbp and _fbc cookies are first-party cookies, so blocking third-party cookies in the browser will not remove them; declining non-essential cookies in the cookie notice, or clearing cookies in the browser, will. Declining advertising cookies does not affect essential cookies or the user’s ability to use the Platform.

Browser-Level Cookie Controls

All major browsers provide settings that allow users to block or delete cookies. The effect of doing so varies by cookie type:

• Block all cookies — the Platform may not function correctly, as authentication and session management depend on essential cookies.
• Block third-party cookies — Google Analytics will not function and Meta’s third-party advertising cookie (fr) will be blocked. Essential Platform cookies and the Meta Pixel’s first-party cookies (_fbp, _fbc) are not affected; decline non-essential cookies in the cookie notice to prevent the latter.
• Delete all cookies — the user will be logged out, cookie preferences will be reset, and the cookie notice will reappear on the next visit.
• Delete specific cookies — the effect depends on which cookies are deleted; deleting essential cookies will end the current session.

Browser Settings

• Chrome — support.google.com/chrome/answer/95647
• Firefox — support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Safari — support.apple.com/en-au/guide/safari/sfri11471/mac
• Edge — support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge

• APP 3 (Collection) — Personal Best Collective collects personal information through cookies only where it is reasonably necessary for one or more of its functions or activities, being delivering and improving the Platform and measuring its advertising.
• APP 5 (Notification) — This policy constitutes notification that personal information is being collected through cookies, the purposes for which it is collected, and how it is handled. The cookie notice displayed on the Platform satisfies the requirement to notify at or before the time of collection.
• APP 6 (Use or Disclosure) — Cookie data is used only for the purposes described in this policy and is not disclosed to third parties except as described in Sections 03 and 04 (Google Analytics as an analytics provider, and Meta in connection with advertising measurement and remarketing).
• APP 11 (Security) — Personal Best Collective takes reasonable steps to protect personal information collected through cookies from misuse, interference, loss, and unauthorised access.

Australia does not currently require express consent for cookies equivalent to the EU’s General Data Protection Regulation (GDPR) or the EU Cookie Directive. However, Personal Best Collective provides a consent mechanism for non-essential cookies, including advertising and remarketing cookies, as best practice and to accommodate users who may be subject to other jurisdictions. Advertising and remarketing cookies are set only on the basis of the consent obtained through the cookie notice.

Cookie data is retained in accordance with the duration of each cookie set out in the register in Section 04. Session cookies are deleted when the browser is closed. Persistent cookies expire at the end of the period specified in the register.

• Google Analytics is configured to retain user-level and event-level data for 14 months, after which it is automatically deleted from Google’s servers.
• Cookies set by the Meta Pixel persist for up to a maximum of 90 days, after which they expire unless refreshed. Information transmitted to Meta is retained by Meta in accordance with its own data retention practices, which Personal Best Collective does not control.
• Aggregated, de-identified analytics reports generated from cookie data may be retained indefinitely, as they do not constitute personal information.

Personal Best Collective may update this policy from time to time to reflect changes in the cookies used on the Platform, changes in applicable law, or changes in Personal Best Collective’s practices.

Where changes are material — for example, where new categories of cookies are introduced or where the purposes of collection change — Personal Best Collective will notify coaches by email at least 30 days before the changes take effect. The updated policy will also be published at personalbestcollective.com/cookies with the new effective date.

Questions or concerns about this policy or Personal Best Collective’s use of cookies should be directed to:

Complaints about Personal Best Collective’s handling of personal information collected through cookies may be made in accordance with the Complaints Handling Policy, available at personalbestcollective.com/complaints.

• Version 1.0 — 13/04/2026 — Initial version. Approved by Joel Dallow.
• Version 1.1 — 08/06/2026 — Added advertising and remarketing cookies (Meta Pixel) and advanced matching; updated the cookie register, information collected, opt-out controls, legal basis, and retention. Approved by Joel Dallow.