Privacy

Your information on Card Club.

What we collect, why we need it, who sees it, and how to get it changed or deleted. Written plainly, because it should be.

Updated October 2026

1Who we are

Card Club (cardclub.com.au) is run by BWL Succession Partners Pty Ltd (ABN 39 690 843 746) in Queensland, Australia. When this page says "we", that's who it means. Questions about your information go to hello@cardclub.com.au.

Card Club is a marketplace. The vendors who sell here are separate businesses. When you buy from or contact a vendor, they get the details they need to deal with you, and their own privacy practices apply to what they do with them.

2What we collect

  • Your email when you sign in. We send a code to it. There are no passwords.
  • Order details when you buy online: your name, email, phone and delivery address, entered on Stripe's checkout. Your card details go straight to Stripe. Card Club never sees or stores them.
  • What you send a vendor with a hold, offer, trade or message, such as your name, phone, email or Instagram.
  • Alerts and collections: the cards you're watching or collecting, the prices you'd pay, and the email we send alerts to.
  • Reviews you leave for a vendor.
  • Vendor information: store name, contact details, location, stock, photos, prices, sales records and, privately, what you paid for your cards.
  • Connected accounts: if a vendor connects Stripe, Shopify, Square or eBay, we keep the access the vendor approved so Card Club can do the job they asked for (take payments, sync stock, end an eBay listing when it sells here). You sign in on their site. We never see those passwords.
  • Basic technical information: our hosting keeps standard request logs (like IP address and browser type), and forms use a bot check from Cloudflare. Your browser stores your sign-in, cart and settings on your device.
  • Visit counts: to know how many people use Card Club, each page view is counted against a code made from your IP address and browser that changes every day, so it can't follow you from one day to the next. No cookies, and we keep only the code, the pages you opened and the site that sent you.

We don't use advertising trackers, and we don't sell personal information.

3Why we use it

  • To sign you in and keep your account and collection.
  • To get your order, hold, offer or trade to the right vendor, and keep you updated on it.
  • To send the alerts and notifications you asked for. Every alert email has a link to change or stop it.
  • To run vendor stores, payments, stock syncing and sales records.
  • To keep Card Club safe: stopping spam and bots, and looking into reported listings.
  • To show price history. Sold prices are shown as card prices only, never with buyer details.

4Who we share it with

  • The vendor you deal with, so they can post your order or reply to you.
  • Stripe, which handles payments and payouts.
  • Resend, which delivers our emails.
  • Netlify, which hosts the site and stores its data.
  • Cloudflare, for the bot check on forms.
  • Shopify, Square or eBay, only when a vendor connects their own account, and only for that vendor's store.
  • PSA, which gets a slab's cert number (nothing about you) when a vendor checks it.
  • Anyone the law requires us to share it with.

Some of these companies store data outside Australia, mostly in the United States.

5How long we keep it

We keep account, order and sales records while your account is active and for as long as we need them for tax, refunds and disputes. Alerts stop as soon as you turn them off. If a vendor disconnects Stripe, Shopify, Square or eBay, Card Club stops using that connection. If you close your eBay account, eBay tells us and we delete the connection automatically.

6Seeing, fixing or deleting your information

Email hello@cardclub.com.au from the address on your account and tell us what you'd like to see, change or delete. We'll reply within 30 days. Some records, like completed sales, may need to be kept for a while for legal reasons, and we'll tell you if that's the case.

If you're unhappy with how we've handled your information, tell us first and we'll try to fix it. If we can't, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

7Changes

If we change how we handle information, we'll update this page and the date at the top.