Privacy Policy
This policy covers Cardboard Culture (ABN 78 697 788 953) of 467 Hume Highway, Yagoona NSW 2199, including this website and our in-store services. Questions any time: support@cardboardculture.com.au.
What we collect
- Mailing list & competition entries — your name, email address and (optionally) mobile number when you join the list or enter a giveaway.
- Grading submissions — your name, contact details, card details, declared values and the photos you upload.
- Contact messages — your name, email and whatever you write to us.
- Analytics & advertising data — with your consent, usage data via Google Analytics and the Meta Pixel (pages viewed, device type, approximate location). Our host also collects cookieless, aggregated performance analytics.
- Online orders— purchases on our online store are processed by Square; Square's own privacy policy applies to payment information. We never see or store your full card details.
- Membership accounts — if you create a member account: your email address, a display name and handle you choose, an optional avatar, and a link to your Square customer record so points earned in store reach the right account.
- Points and store credit history — every movement of points or store credit, with the reason for it, the resulting balance, and the purchase it relates to.
Why we collect it
- To run the mailing list and competitions you enter (with your consent).
- To deliver services you ask for — grading pre-assessments, order fulfilment, replies to your messages.
- To send marketing emails you've opted into — every email includes a way to unsubscribe.
- To understand how the site is used and improve it, and to measure our advertising (only with your consent).
Where it's stored
Data is stored with reputable providers: Vercel (website hosting), Supabase (database and member sign-in), Resend (email delivery), Vercel Blob and Supabase Storage (uploaded photos) and Square (commerce, point of sale and loyalty). Some providers store data outside Australia (typically the United States) under their own security and privacy safeguards.
What we don't do
- We do not sell your personal information. Ever.
- We do not share it with third parties except the service providers above, or where the law requires.
- We do not knowingly collect personal information from children without guardian consent.
Cookies & analytics
Analytics and advertising cookies only load after you accept the cookie notice. You can decline — the site works exactly the same. You can also clear the choice in your browser storage at any time, and control cookies through your browser settings.
Unsubscribing
Every marketing email includes unsubscribe instructions, or just email support@cardboardculture.com.au with “unsubscribe” and we'll remove you promptly. Unsubscribing after entering a competition doesn't void an entry already submitted.
Deleting your member account
You can delete your member account yourself, from inside the app or the member card — you never have to email or ring us to do it. Here is exactly what happens, because we would rather be accurate than make a promise we cannot keep.
Removed straight away: your email address and mobile number, your display name, your handle (released for someone else to use), your avatar, and the link between your account and your Square customer record. You are signed out immediately and cannot sign back in. If you signed in with Apple, we also tell Apple to revoke the connection.
Kept, in de-identified form: the record of points and store credit movements on the account, and the orders behind them. These are financial records. We are required to keep business records for five years under Australian tax law, and our books have to balance for that period. After deletion those records no longer carry your name, contact details or anything else identifying you — they are rows of amounts and dates attached to an account number that is no longer connected to a person.
If you have never earned or spent points, there is nothing to retain and your account is removed outright.
Deleting your Cardboard Culture account does not delete your Square customer record, which Square holds under its own retention rules, and does not cancel a grading submission already in transit.
How long we keep things
- Mailing list — until you unsubscribe, then we remove you.
- Grading submissions — for the life of the submission plus the record-keeping period above.
- Contact messages — as long as needed to deal with what you wrote to us.
- Points and store credit records — five years, as described above, de-identified after account deletion.
Access & correction
You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it — email support@cardboardculture.com.au and we'll respond within a reasonable time. If you believe we've breached the Australian Privacy Principles, contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
We'll update this policy as the business grows and post the current version here. Materially different uses of your data will only happen with fresh consent.