FanArt Cards is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what data we collect, how we use it, and your rights regarding that data.
1. Information We Collect
When you place an order or interact with our website, we may collect the following personal information:
- Identity & contact: full name, email address, phone number.
- Shipping details: delivery address, suburb, state, postcode, and country.
- Payment information: card details are processed securely by Stripe, Inc. We do not store full card numbers on our servers.
- Order history: items purchased, order values, and transaction references.
- Technical data: IP address, browser type, device identifiers, and pages visited.
2. How We Use Your Information
- To process and fulfil your orders, including printing and dispatching trading cards.
- To communicate with you about your order status, shipping updates, and any issues.
- To send you marketing emails about new drops and releases — only if you have opted in. You may unsubscribe at any time.
- To improve our website, products, and customer experience.
- To comply with legal obligations and resolve disputes.
3. Third Parties
We share your information only where necessary:
- Stripe, Inc.: processes all payment transactions. Stripe is PCI-DSS compliant.
- Shipping carriers: your name and delivery address are passed to our fulfilment and courier partners solely to deliver your order.
- Email service providers: we use a transactional email platform to send order confirmations and shipping notifications.
- We do not sell, rent, or trade your personal information to any third party for marketing purposes.
4. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by Australian law. Order records are typically retained for seven (7) years for tax and accounting purposes.
5. Data Security
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Our website uses HTTPS encryption, and payment data is handled exclusively by Stripe's secure infrastructure.
6. Your Rights
Under the Australian Privacy Act 1988, you have the right to:
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to correct inaccurate or out-of-date information.
- Deletion: request that we delete your personal information, subject to legal retention requirements.
- Opt-out: unsubscribe from marketing communications at any time via the link in any email we send.
7. Cookies
Our website uses cookies and similar technologies to improve your browsing experience and analyse site traffic. You can control cookie settings through your browser.
8. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at [email protected]. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.