Privacy Policy

About this policy

The Whole Nine Cards is an Australian trading-card retailer. This policy applies to information handled through wholeninecards.com, direct customer enquiries and orders placed with us.

Questions or privacy requests can be sent to wholeninecards@gmail.com.

Information we collect

• Contact and delivery details, such as your name, email address, phone number and postal address.
• Order, payment-status, refund, shipping and customer-service records. We do not receive or store your full card number from Stripe or PayPal.
• Offer details, including the amount, quantity, message and email-verification status.
• Security and technical information needed to operate the site, prevent misuse and diagnose faults, such as request identifiers, browser information and necessary cookie data.
• First-party storefront analytics, including an anonymous visitor and session identifier, pages viewed, broad device type, referring website, traffic source and country. We do not store a raw IP address in the analytics ledger.
• Messages and information you choose to provide when contacting us.
• Email-update requests, selected card collections, confirmation and unsubscribe records, and requested stock alerts. Saved cards are stored in your browser, not linked to a customer account.

Why we use it

• To operate the cart, reserve stock, process payments and fulfil orders.
• To assess and respond to offers, returns, refunds and support enquiries.
• To prevent fraud, secure the service, keep business records and meet legal obligations.
• To understand storefront usage, improve product discovery, measure checkout conversion and diagnose operational problems. We do not use this information for cross-site advertising or sell it to third parties.

Who receives information

We disclose only what is reasonably required to service providers involved in an order or in operating the site. These may include Stripe or PayPal for payment, Resend for requested emails, Australia Post or another displayed carrier for delivery, and Cloudflare for hosting and security. Their own privacy terms also apply to their services.

Some service providers may process information outside Australia. The countries involved can vary with the provider and service used. We do not sell customer personal information.

Collector updates and saved cards

Weekly collection emails and stock alerts are activated only after you confirm your email request. A purchase does not automatically subscribe you. Every update includes a preferences and unsubscribe link; unsubscribing from updates does not stop order receipts or dispatch messages.

Your wishlist is saved only in the browser where you use it and can be cleared by removing saved cards or browser site data. Saving a card does not reserve it.

Recent sales display

To show recent shop activity, we may display the purchased card title and image with the buyer’s first name and destination country. We do not display a surname, email address, phone number, street address, order number or payment details.

Retention and security

We retain information only for as long as reasonably needed for fulfilment, support, fraud prevention, accounting, dispute handling and legal recordkeeping. Contact and delivery details submitted for a payment-pending order are retained only as needed to complete, expire or safely reconcile that checkout.

We use access controls, encrypted connections and restricted operational systems. No internet service can guarantee absolute security, but we limit access and collect only what the transaction needs.

Access, correction and complaints

You can ask to access or correct personal information we hold about you, or raise a privacy concern, by emailing wholeninecards@gmail.com. We may need to verify your identity before releasing order information. We will respond within a reasonable period.