Privacy policy

Last updated: 3 December 2025

This Privacy Policy explains how The Token Trove (ABN 88 493 635 923) collects, uses and shares your personal information when you visit our website or buy from our store. Nothing here limits your rights under the Australian Consumer Law (ACL).

If you have questions or want to make a request, please contact us.

What we collect

We may collect:

  • Identity & contact: name, billing/shipping details, and order references.

  • Order & payment: items purchased, totals, and payment confirmations from our payment providers (we don’t see full card numbers).

  • Delivery: email/phone (if provided for shipping), delivery address, tracking updates.

  • Site usage & device: pages viewed, links clicked, approximate location, IP, browser/device info, cookies, and similar technologies.

  • Marketing preferences: your opt-in/opt-out choices.

  • Support: messages you send us and any info you provide in those messages.

How we use your information

  • To provide our store: take orders, process payments, ship products, handle returns and support.

  • To improve & secure: troubleshoot, analyse performance, prevent fraud/abuse.

  • To communicate: order updates and service messages.

  • Marketing (with consent where required): send news and offers; you can unsubscribe any time.

Legal bases we rely on (plain English)

We use your information because we need it to perform a contract (fulfil your order), for legitimate interests (running and protecting our store), and/or with your consent (e.g., marketing). Where laws require consent first, we’ll ask for it.

Cookies, analytics & ads

We (and our service providers) use cookies, pixels and similar tech to run the shop, understand performance and (if enabled) measure ads. You can adjust your browser’s cookie settings or use built-in blocking tools, and you can opt out of marketing at any time (see Marketing choices).

Sharing your information

We share personal information with trusted providers who help us run the store, for example:

  • Shopify (store platform & hosting, checkout infrastructure).

  • PayPal (payment processing; we don’t store full card or PayPal credentials).

  • Australia Post (shipping and tracking for deliveries).

  • Email/notification tools (for order updates and support; may be built into Shopify).

  • Fraud prevention & security tools (as needed to protect our store).

  • Analytics/advertising partners (only if we enable them in the future).

Some providers may operate outside Australia. Where we disclose information overseas, we take reasonable steps to ensure appropriate safeguards are in place. If we add new provider categories, we’ll update this page.

Marketing choices

We only send marketing if you’ve opted in or if it’s otherwise permitted. Every message includes an unsubscribe link; you can also contact us to update your preferences. We’ll action requests within a reasonable time.

Access, correction & deletion

You can request access to the personal information we hold about you, ask for corrections, or request deletion where appropriate. Use our Contact page and we’ll respond within a reasonable time. If the Privacy Act applies to us, you may also have rights to complain to the OAIC (see Complaints).

Retention

We keep information only as long as needed for the purposes above—typically:

  • Orders & tax records: kept for legal/accounting requirements.

  • Support messages: kept while your issue is open and for reasonable audit periods.

  • Marketing data: kept until you unsubscribe or it’s no longer needed.

Security

We use reasonable administrative, technical and physical safeguards suitable for a small online retailer. No method of transmission or storage is perfectly secure, but we work to protect your information from unauthorised access, misuse or loss.

Children

Our products and site are not directed to children under 13. If you believe we’ve collected information from a child, please contact us so we can delete it.

International customers

If you shop from outside Australia, your information will be processed where our providers are located. We will take reasonable steps to respect local privacy requirements and honour valid rights requests submitted via our Contact page.

Complaints

If you have a privacy concern, please reach out and we’ll try to resolve it. If the Privacy Act 1988 (Cth) applies to us and you’re not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

We may update this policy to reflect changes to our practices or the law. We’ll post the new date at the top when we do.