Privacy Policy

CardYard ("we", "us", "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect, why, and how we handle it.

1. Who we are

CardYard operates an online marketplace for trading card game singles in Australia. For privacy matters, contact us at [email protected].

2. What we collect

We collect personal information you provide, including:

• Account information: name, email address, password (hashed), and profile details.
• Transaction information: listings, purchases, bids, offers, and order history.
• Payment information: payment and payout details are collected and processed by our payment provider, Stripe. We do not store your full card number; we store payment identifiers Stripe provides to us.
• Delivery information: name and address for delivery.
• Usage information: pages visited, searches, and device information (collected via cookies and analytics).

3. How we collect it

We collect personal information directly from you (when you register, list, buy, bid, or contact us) and automatically (through cookies and similar technologies when you use the site).

4. Why we collect, hold and use it

We collect, hold and use personal information to:

• provide and operate the marketplace (accounts, listings, transactions);
• process payments and payouts;
• facilitate delivery and resolve disputes;
• detect and prevent fraud, abuse and unlawful activity;
• improve the platform and personalise your experience;
• communicate with you (including transactional and, with your consent, marketing messages);
• comply with legal obligations (including record-keeping and tax).

5. Disclosure

We may disclose personal information to:

• Sellers and buyers, as necessary to complete a transaction (e.g. delivery name/address to the seller).
• Stripe (our payment processor), which is based in the United States, for payment processing, payouts, and fraud prevention. Stripe handles that data in accordance with its own privacy policy.
• Service providers who help us operate the platform (hosting, analytics, email), under obligations to protect your information.
• Law enforcement or regulators where required or authorised by law.

6. Overseas disclosure

Some personal information may be disclosed to, or stored with, providers located overseas, including Stripe in the United States. Where we do so, we take reasonable steps to ensure the recipient handles the information in accordance with the APPs, and you consent to this overseas disclosure.

7. Cookies and analytics

We use cookies and similar technologies for functionality, security and analytics. You can control cookies through your browser settings, though some features may not work without them.

8. Storage and security

We store personal information on secure servers and take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Access and correction

You may request access to, or correction of, the personal information we hold about you. Contact us at [email protected]. We will respond within a reasonable time, as required by the APPs.

10. Marketing and opting out

Where you have consented, we may send you marketing communications. You may opt out at any time using the unsubscribe link in the message or by contacting us.

11. Retention

We retain personal information for as long as needed for the purposes in this policy and to meet legal obligations, after which we securely delete or de-identify it.

12. Complaints

If you have a complaint about how we handle your personal information, contact us at [email protected]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Changes

We may update this policy from time to time. The updated version will be posted with a revised date.

14. Contact

CardYard — [email protected].