Privacy policy

Last updated: 6 November 2026

1. Introduction

Card Cove AU ("Card Cove", "we", "us" or "our") respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, www.cardcove.com.au, purchase products, create an account, subscribe to marketing communications or interact with our business.

www.cardcove.com.au is operated by Card Cove AU, ABN 53 456 924 659, based in Wollongong, New South Wales, Australia.

We aim to handle personal information consistently with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to our business.

2. Information We Collect

Depending on how you interact with Card Cove, we may collect:

Personal and contact information

  • Full name
  • Email address
  • Phone number
  • Billing and delivery addresses
  • Account registration details

Order and transaction information

  • Products purchased
  • Order history and transaction amounts
  • Payment status and transaction references
  • Shipping and tracking information
  • Returns, refunds and customer service records

Information relating to cards or collections offered for sale to us

  • Contact information
  • Details, descriptions and photographs of trading cards or collections
  • Information about ownership, condition and authenticity
  • Payment details required to complete an agreed purchase
  • Relevant communications and transaction records

Website and technical information

  • IP address
  • Browser and device information
  • Website activity and interactions
  • Cookie identifiers
  • Referring websites and general location information derived from technical data

Marketing information

  • Newsletter subscription preferences
  • Marketing consent records
  • Interactions with promotional emails
  • Preferences or interests voluntarily provided to us

We do not intentionally collect more personal information than is reasonably necessary for our business activities.

3. How We Collect Information

We may collect personal information when you:

  • Place an order through our website
  • Register or use a customer account
  • Contact us through email, social media or website forms
  • Subscribe to our newsletter
  • Submit trading cards or collections for valuation or purchase
  • Participate in promotions or other activities
  • Browse or interact with our website

We may also receive relevant information from service providers involved in processing payments, fulfilling orders, providing website functionality or preventing fraudulent transactions.

4. How We Use Your Information

We may use personal information to:

  • Process payments and fulfil orders
  • Deliver products and provide tracking information
  • Manage customer accounts
  • Respond to enquiries and provide customer support
  • Assess cards or collections submitted for purchase
  • Process refunds, returns and disputes
  • Detect and prevent fraud or unauthorised activity
  • Maintain and improve website functionality
  • Analyse website performance and customer experience
  • Send marketing communications where permitted by law
  • Maintain business and financial records
  • Comply with applicable legal obligations

We will not use personal information for unrelated purposes unless permitted by law or we have obtained any necessary consent.

5. Shopify and Third-Party Services

Our website is hosted using Shopify, which provides our online store, checkout and e-commerce functionality.

Shopify and other authorised service providers may process personal information to support our business operations. These providers may include:

  • Shopify and its associated services
  • Payment processing providers
  • Delivery and postal service providers
  • Email marketing platforms
  • Website analytics providers
  • Fraud prevention and security providers
  • Professional advisers and service providers

We disclose personal information only where reasonably necessary for these purposes, where authorised by you or where required or permitted by law.

Each third-party provider may have its own privacy practices and policies.

6. Payment Information

Payments made through our website are processed using Shopify-supported payment providers.

We do not intentionally collect or store complete payment card numbers or card security codes in our own business records.

Payment providers may collect and process payment information in accordance with their applicable privacy and security practices.

We may retain payment confirmations, transaction references and related records for accounting, customer service and legal purposes.

7. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

  • Maintain shopping cart functionality
  • Support customer accounts and checkout
  • Remember website preferences
  • Analyse website traffic and performance
  • Improve customer experience
  • Measure advertising and marketing effectiveness

Some cookies are essential for website operation, while others may be used for analytics or advertising. The services we use for these purposes include Google Analytics, Google Ads and Meta Business Suite.

You can manage certain cookie preferences through your browser settings or any privacy preference controls made available on our website. Disabling some cookies may affect website functionality.

8. Marketing Communications

If you subscribe to a newsletter managed by us, or otherwise provide valid consent, we may send promotional communications about products, restocks, special offers and Card Cove updates.

We comply with applicable requirements under the Spam Act 2003 (Cth). Marketing messages will identify Card Cove as the sender and provide an appropriate way to unsubscribe.

You may withdraw your consent at any time by using the unsubscribe link in our marketing emails or contacting us directly.

Unsubscribing from marketing will not prevent us from sending necessary transactional communications relating to orders, accounts or customer service.

9. Disclosure and Overseas Processing

Some service providers, including Shopify and its supporting infrastructure, may process or store personal information outside Australia. The countries involved may vary depending on the services and systems used.

Where applicable, we take reasonable steps to ensure overseas handling of personal information is consistent with our legal obligations.

We do not sell customer contact lists or personal information to unrelated third parties for their independent marketing purposes.

10. Data Security

We take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include secure e-commerce infrastructure, access controls, account authentication and restricted access to business information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

If we become aware of a data breach, we will assess the incident and take appropriate steps, including notifying affected individuals and regulators where required by law.

11. Data Retention

We retain personal information only for as long as reasonably necessary for our business operations, legitimate recordkeeping requirements, dispute resolution and applicable legal obligations.

Certain financial and transaction records may need to be retained for statutory recordkeeping periods.

When personal information is no longer required, we will take reasonable steps to securely delete or de-identify it, where practicable and legally appropriate.

12. Access, Correction and Deletion Requests

You may contact us to request access to personal information we hold about you or to ask that inaccurate information be corrected.

You may also request deletion of personal information, subject to any applicable legal obligations or legitimate requirements to retain records.

We will consider and respond to requests in accordance with applicable law.

13. Children's Privacy

Our website is intended for customers who can lawfully enter into purchases or who have appropriate parental or guardian involvement.

We do not knowingly collect personal information from children where doing so would be unlawful.

Parents or guardians who have concerns about personal information provided by a child may contact us.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our business operations, technology or legal obligations.

The current version will be published on our website with its last updated date.

Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

15. Contact and Privacy Complaints

For privacy enquiries, access or correction requests, or complaints about how personal information has been handled, please contact:

Card Cove AU
Website: www.cardcove.com.au
Email: cardcove@outlook.com.au

We will review privacy complaints and respond within a reasonable timeframe.

Where the Privacy Act applies to our business, individuals may also have the right to complain to the Office of the Australian Information Commissioner (OAIC). More information is available at www.oaic.gov.au.