Privacy Policy

Who we are

PokeDownUnder is an Australian online trading card store. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

• Order details — name, email, phone, shipping and billing address, and the items you buy.
• Payment information — processed directly by our payment providers. We receive confirmation and the last few digits of your card only; we never store full card numbers.
• Account & marketing data — if you create an account or subscribe, your email and preferences.
• Support correspondence — messages you send us and any photos you provide for a claim.
• Technical data — IP address, device and browser type, pages visited and referring site, collected via cookies and analytics.

Your cart, wishlist and recently viewed items are stored locally in your own browser, not on our servers.

How we use it

• To process, ship and support your orders.
• To send order confirmations, tracking and service updates.
• To send product news, drops and restock alerts — only if you opt in.
• To enforce purchase limits and prevent fraud or abuse.
• To improve our store, understand what customers are looking for, and meet our legal and tax obligations.

Who we share it with

We share information only with the service providers needed to run the store, and only as much as they need:

• our e-commerce and hosting platform;
• payment processors;
• couriers and Australia Post for delivery;
• email and analytics providers.

Some of these providers store data overseas. We take reasonable steps to ensure they handle your information consistently with the Australian Privacy Principles. We may also disclose information where required by law. We never sell your personal information.

Cookies

We use cookies and similar technologies to keep your cart working, remember preferences, and measure how the site is used. You can block or delete cookies in your browser settings, but parts of the store (like checkout) may not work properly without them.

Marketing emails

Marketing emails are opt-in and every one includes an unsubscribe link. Unsubscribing doesn't stop transactional emails about an order you've placed.

How long we keep it

We keep order and transaction records for at least 7 years to meet Australian tax and record-keeping requirements. Marketing and account data is kept until you ask us to remove it.

Security

Our site is served over encrypted HTTPS and payments are handled by PCI-compliant providers. We restrict access to personal information to the people who need it to do their job. No online system can be guaranteed completely secure, but if a data breach likely to cause serious harm occurs, we'll notify you and the OAIC as required.

Children

Our store is intended for customers aged 18 and over. We don't knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.

Your rights & choices

You can ask us to access, correct or delete the personal information we hold about you, or unsubscribe from marketing at any time. Email contact@pokedownunder.com and we'll respond within 30 days. Some information must be retained for legal reasons even after a deletion request.

Complaints

If you're unhappy with how we've handled your information, contact us first and we'll work to resolve it. If you're still not satisfied, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We may update this policy from time to time. The current version is always published here with its last-updated date. See also our Terms of Service.