Privacy Policy

1. Information We Collect

1.1 Account Information

When you register, we collect your email address, username, and password (hashed). You may optionally provide a display name, profile photo, bio, and location.

1.2 Transaction Data

We collect information about listings you create, purchases you make, offers you submit, and messages exchanged on the platform. This includes pricing, item descriptions, and shipping details.

1.3 Payment Information

Payment card details are processed and stored exclusively by Stripe. TCG Market never stores raw card numbers. We retain transaction records (amounts, dates, statuses) for accounting and dispute resolution purposes.

1.4 Usage Data

We collect information about how you use TCG Market including pages visited, search queries, listing views, and device/browser information. This helps us improve the platform.

1.5 Communications

Messages sent through our platform are stored to facilitate transactions and resolve disputes. We may review messages in connection with dispute investigations or safety concerns.

2. How We Use Your Information

• ›To operate and provide TCG Market's marketplace services
• ›To process transactions and facilitate buyer-seller communications
• ›To send transactional emails (purchase confirmations, shipping notifications)
• ›To detect and prevent fraud, abuse, and policy violations
• ›To resolve disputes between buyers and sellers
• ›To improve platform features and personalise your experience
• ›To comply with legal obligations and respond to lawful requests
• ›To send you product updates and promotional communications (you can opt out)

3. Information Sharing

We share your information only in limited circumstances:

3.1 With Other Users

Your username, profile information, and listing history are visible to other users. Your email address is never shared with other users. Shipping address is shared only with the seller for the specific transaction.

3.2 With Service Providers

We use trusted third-party providers to operate TCG Market. These include: Stripe (payments), Supabase (database), Vercel (hosting), Resend (email delivery), and AfterShip (shipment tracking). These providers are contractually required to protect your data.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, safety, and property of TCG Market or our users.

4. Data Retention

We retain your account information for as long as your account is active. After account deletion, we retain transaction records for 7 years for tax and legal compliance purposes. Usage logs are retained for 12 months.

5. Your Rights

Under the Australian Privacy Act, you have the right to:

• ›Access the personal information we hold about you
• ›Request correction of inaccurate information
• ›Request deletion of your account and associated data (subject to legal retention requirements)
• ›Opt out of marketing communications at any time
• ›Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us at privacy@tcgmarket.com.au.

6. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyse platform usage. See our Cookie Policy for full details.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access controls. While we take reasonable precautions, no internet service can guarantee absolute security.

8. Contact

For privacy-related enquiries: privacy@tcgmarket.com.au

To lodge a complaint with the OAIC: www.oaic.gov.au