Privacy Policy

Ground Vault is a registered business name of Vatilon Associates, ABN 24 640 158 210. We are an Australian-based online retailer of coins and collectables, selling to customers in Australia and internationally through our website and the Shopify commerce platform. This policy explains what Personal Information we collect, how we collect it, why we need it, and the choices available to you.

We handle Personal Information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us. Our aim is to collect only what we reasonably need to run the store, use it for the purposes described here, and keep it protected while we hold it.

Depending on how you interact with us, the information we hold may include:

• Your name, billing address and shipping address
• Email address and telephone number
• Customer account details and order history
• Order and transaction information, including items purchased and amounts paid
• Customer service correspondence, enquiries and return requests
• Device and browser information, IP address and general location
• Information gathered through cookies and similar technologies
• Your marketing and communication preferences

Payments are processed by Shopify and its supported third-party payment providers. Full payment card numbers are entered with those providers and are not stored by Ground Vault. We generally receive only limited confirmation details, such as the payment method type, the last digits of a card and whether the transaction succeeded.

We may collect information directly from you and through the systems we use to operate the store, including the Ground Vault website, the Shopify platform, customer accounts, the checkout process, purchases, contact forms, email and customer service conversations, newsletter subscriptions, cookies and analytics technologies, payment providers, shipping and courier providers, and other service providers required to run an online store.

We use Personal Information for purposes including:

• Processing orders and taking payment
• Delivering products and providing tracking information
• Creating and maintaining customer accounts
• Communicating with you about your order
• Providing customer support and handling returns and refunds
• Detecting and preventing fraud and misuse
• Improving the website, our range and the customer experience, including analytics
• Meeting legal, tax, accounting and regulatory obligations
• Sending marketing communications where you have consented or where applicable law allows

You can opt out of marketing at any time using the unsubscribe link in any marketing email or by contacting us. Opting out of marketing does not stop essential messages about an order you have placed.

We do not generally need to collect sensitive information to sell coins and collectables. If sensitive information is ever collected, we will only handle it where it is reasonably necessary for a purpose described in this policy, with your consent, or where required or authorised by law.

We may disclose Personal Information where reasonably required to organisations that help us operate the store. These may include Shopify, payment processors, shipping and courier companies, cloud and hosting providers, email service providers, analytics providers, fraud prevention services, our professional advisers, and government or regulatory authorities where we are legally required to do so.

We do not sell your Personal Information.

Because we sell internationally and rely on global technology and logistics providers, your information may sometimes be processed or stored outside Australia, including in countries where those providers operate their infrastructure. We take reasonable steps to work with reputable providers and to require appropriate protections for the information they handle on our behalf.

We and our providers use cookies and similar technologies to keep your shopping cart and session working, remember preferences such as your selected region and currency, measure site performance, understand aggregate usage through analytics, and — where applicable — support marketing. You can generally manage or block cookies through your browser settings or any consent controls shown on the site, although some store features may not work as intended if you do.

We use reasonable administrative, technical and organisational safeguards to protect Personal Information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These include encrypted connections, access controls and using established platforms for payments and hosting. No method of transmission or storage can be guaranteed to be completely secure, so we cannot promise absolute security.

We keep Personal Information for as long as it is reasonably necessary for the purposes it was collected for — including completing transactions, providing customer service, accounting and tax records, fraud prevention, and meeting legal or regulatory obligations. Retention periods differ by record type: some information is kept only briefly, while transaction records may need to be retained for longer where the law requires it. When information is no longer required we take reasonable steps to delete or de-identify it.

You may request access to the Personal Information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. We may need to verify your identity before releasing information, and there are limited situations where the law allows us to decline a request — if that happens we will explain why.

If you are located outside Australia, you may have additional rights under the privacy laws of your own country. Where such rights apply to us, we will handle requests consistently with those obligations. Please contact us if you would like to discuss a right you believe applies to your information and we will respond to your request on its merits.

We may update this Privacy Policy from time to time to reflect changes to our practices, the services we use or legal requirements. The current version is always published on the Ground Vault website, with the "Last updated" date shown above.

To ask a question about privacy, request access or correction, or make a complaint, contact: