1. Scope
This policy explains how TCG Finder (ABN 74 514 112 827) handles personal information provided through this website. For privacy enquiries, email support@tcgfinder.com.au. We aim to follow privacy good practice and, where applicable, the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
2. Information we collect
Depending on how you use the website, we may collect:
- Your name, email address and optional phone number.
- Delivery address and order details when you place an order.
- Messages and any order reference supplied through the contact form.
- Descriptions, card lists, Collectr links, photographs and files submitted when offering cards for sale.
- Basic technical information needed to operate, secure and diagnose the website.
We use local storage to remember the cards and quantities in your shopping bag. Session storage remembers browsing filters, search terms, page position, checkout progress, invitation or discount codes, and contact and delivery details you enter during checkout. This helps you continue without re-entering everything. You can clear this information through your browser settings, but doing so may clear your bag and checkout progress. Do not use a shared device for checkout without clearing your information afterwards.
3. Why we use information
We use personal information to process and deliver orders, respond to questions, review cards offered for sale, communicate about transactions, prevent misuse, maintain records and improve the website. We do not use order or enquiry details for marketing unless we introduce a separate opt-in process in the future. We do not currently add advertising pixels or marketing analytics to the storefront. Our service providers may use technical logs, cookies and similar tools for their own payment, security and service functions.
4. Payments
Payments are processed through Stripe-hosted checkout. Payment-card details are entered directly with Stripe and are not stored by TCG Finder. We retain order details, payment status and Stripe transaction references to fulfil orders and reconcile payments. Stripe may also process device and fraud-prevention information. If you choose an optional service such as Stripe Link, its own terms and privacy practices apply. See Stripe’s Privacy Policy.
6. Retention and security
We keep information only for as long as reasonably needed for transactions, enquiries, business records, dispute resolution and legal obligations. We use reasonable technical and organisational safeguards, including owner-restricted administration, but no internet service can guarantee absolute security. Copies of records and uploaded files may be retained in private backups for recovery. Removing information from the live store does not necessarily remove it immediately from an older backup. Access, correction and deletion requests are reviewed manually, including their implications for retained backups and any subsequent restoration. We do not promise automatic deletion on a fixed schedule. Please do not upload identity documents, bank details or unrelated personal information with a card-sale enquiry.
7. Access and correction
You may ask what personal information we hold about you, request a correction, or ask us to delete information where it is no longer required and may lawfully be deleted. Email support@tcgfinder.com.au or use the contact form and include enough information for us to identify the relevant order or enquiry. We may need to verify your identity before disclosing or changing personal information. Do not send identity documents unless we have agreed a suitable way to verify your request. If information must be retained for legal obligations, transactions or disputes, we will explain any limits on your request.
8. Third-party links
The website may link to external services such as Collectr. Their privacy practices are governed by their own policies.
9. Questions and complaints
Send privacy questions or complaints to support@tcgfinder.com.au or use our contact page and select “Other”. Describe your concern and any relevant order or enquiry reference. We aim to acknowledge enquiries within two business days; resolving a privacy complaint or access request may take longer. We will review the matter and explain the outcome or any further information needed. If you remain dissatisfied, you may seek guidance from the Office of the Australian Information Commissioner, which can advise whether it can handle your complaint. If this policy changes materially, the effective date above will be updated.