Privacy Policy

Who this covers

This policy explains how HGC (ABN 83 884 752 436) collects, uses, discloses, and protects personal information through this site. We handle your information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information we collect

• Account information — your name, email address, and password (stored only as a one-way hash, never in readable form) when you sign up.
• Order and collection history — which packs you've bought, what you've opened, and the digital cards in your collection.
• Shipping details — delivery address and contact details when you request a physical shipment.
• Payment records — order totals, currency, and payment status. We never see or store your full card number; Stripe handles payment directly.
• Support communications — a record of any correspondence when you contact us.
• Technical data — standard web request information (such as IP address) that our hosting provider processes to serve you this site, and your login session.

How we use it

To create and run your account, process orders and payments, fulfil and ship what you've bought, calculate shipping cost for the address you provide, and respond when you contact us. We don't use your information for advertising, and we don't sell it to anyone.

Who we share it with

We share only what each provider needs to do its job, and each is bound to use it for that purpose only:

• Stripe — to process payments and refunds.
• Australia Post — to calculate shipping cost and deliver physical orders.
• Resend — to deliver transactional emails (receipts, password resets, shipping updates).
• Neon and Vercel — our database and hosting providers, who store and process data on our behalf to run this site.

We may also disclose information where required by law, or to protect our rights or the safety of others.

Overseas disclosure

Some of our service providers may store or process data outside Australia, including in the United States (Stripe, Resend, Vercel). Our database is hosted in Australia. Where personal information is disclosed overseas, we rely on those providers' own data protection commitments.

Cookies

We use a single cookie to keep you signed in. We don't use tracking or advertising cookies, and we don't run third-party analytics on this site today.

How we protect it

Your password is never stored in readable form — only a one-way cryptographic hash. Your data is held in a managed, access-controlled database, and all traffic to this site is encrypted in transit. No method of transmission over the internet is completely secure, and we can't guarantee absolute security.

How long we keep it

We keep your information for as long as your account is active or as needed to provide our services, meet our legal obligations (including tax record-keeping), resolve disputes, and enforce our agreements.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete your account and associated data, subject to what we're required to keep for legal or tax reasons. Contact us using the details below and we'll action it as soon as reasonably possible. If you think we've mishandled your personal information, you can also lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

If this policy changes in a way that matters, we'll update the date at the top of this page.

Contact

Questions? Contact us at hogucollect@gmail.com.