Privacy Policy

1 Who we are

The Mana Reserve ("we", "us", "our") is an Australian online store selling Magic: The Gathering singles and sealed product, and buying cards from players through our buylist. This policy explains what personal information we collect through manareserve.com.au, why we collect it, and how we handle it.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Whether or not a business of our size is strictly required to comply with the Act, we treat your information as though it is.

Our privacy contact is support@manareserve.com.au.

2 What we collect

We only collect information that we need to run the store. Depending on how you use the site, that can include:

Identity and contact

Your name, email address, phone number, and billing and shipping addresses.

Account

Your login, order history, saved addresses, wishlist, loyalty points balance and store credit balance.

Orders and payment

What you bought, when, and how you paid. Card numbers are handled entirely by our payment processors; we never see or store your full card number.

Buylist and trade-ins

Your name, email, the cards you offer us with their condition, any notes you add, and the bank details you give us so we can pay you.

Communications

Emails you send us, and our replies.

Technical

Your IP address, browser and device type, the pages and products you view, and how you arrived at the site — collected automatically by our web server and the store's own product-view analytics.

We do not ask for, and do not want, sensitive information such as health, religious or political details. Please do not include it in order notes or emails.

3 How we collect it

Most of what we hold, you give us directly — when you create an account, place an order, submit a buylist or collection enquiry, join the newsletter, or email us.

Some information is collected automatically as you browse, through server logs and cookies (see the cookies section below).

A small amount comes from third parties: our payment processors confirm whether a payment succeeded, and our shipping carrier provides tracking events for your parcel.

4 Why we use it

We use your information to:

• process and ship your orders, and send you order confirmations and tracking details;
• run your account, including order history, wishlist, loyalty points and store credit;
• assess buylist and trade-in offers, arrange postage, and pay you;
• send restock alerts for cards you have asked to be notified about;
• send our newsletter — only if you have opted in, and you can unsubscribe from every email we send;
• answer your questions and resolve problems with an order;
• detect and prevent fraud, chargebacks and abuse of the site;
• meet our legal obligations, including keeping tax records;
• understand which products and pages are popular so we can stock and organise the store better.

We will not use your information for a purpose you would not reasonably expect without asking you first.

5 Marketing emails

We only send marketing email — new arrivals, restocks and offers — to people who have asked for it, in line with the Spam Act 2003 (Cth). Placing an order does not subscribe you to the newsletter.

Every marketing email includes an unsubscribe link, and unsubscribing takes effect straight away. Transactional emails about your orders, buylist submissions and account are not marketing and will still be sent.

6 Who we share it with

We never sell, rent or trade your personal information. We share it only with the service providers we need to run the store, and only as much as each of them needs:

Payment processors

WooPayments (Stripe), PayPal and Afterpay, to take your payment and handle refunds. Each has its own privacy policy for what they collect directly from you.

Shipping carriers

Your name, address and phone number, so your parcel can be delivered and tracked.

Email providers

To send order emails, restock alerts and, if you have opted in, the newsletter (delivered through Mailchimp).

Hosting and security

The servers and caching layer the site runs on.

Advertising platforms

If we run listings or ads through Google or TikTok, they may receive limited, pseudonymous data about site visits to measure whether the ads worked. See the cookies section to opt out.

Advisers and authorities

Our accountant, and law enforcement or regulators where the law requires it or where we need to protect our rights.

7 Overseas disclosure

We are based in Australia, but some of the providers above store data outside it. PayPal, Stripe and Mailchimp operate primarily from the United States, and our hosting provider may use data centres in other countries.

Where that happens, we only use providers that commit to protecting your information to a standard comparable with Australian privacy law, and we do not send them anything beyond what they need to provide their service.

8 Cookies and tracking

Cookies are small files your browser stores so the site can remember things between page loads. We use three kinds:

Essential

Keep you logged in, remember your cart, protect forms against forgery, and let our caching layer serve pages quickly. The site does not work without these.

Functional

Remember preferences such as your shop filters and sort order so you do not have to set them again.

Analytics and advertising

If we run ads, pixels from Google or TikTok may set cookies to measure them. The only third-party cookies we use; the site works fully without them.

You can block or delete cookies in your browser settings. Blocking essential cookies will stop the cart and checkout from working. You can opt out of ad measurement through Google's Ads Settings and TikTok's account privacy settings.

9 How we keep it safe

The whole site runs over HTTPS. Payments are tokenised by our processors so card details never touch our servers. Access to customer data is limited to the people who need it to fulfil orders and answer support, and accounts with that access use strong, unique passwords.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

10 How long we keep it

Order and payment records are kept for at least five years after the transaction, as Australian tax law requires. Buylist records are kept for the same period because they are purchases on our side.

Account details are kept while your account is open. If you ask us to close it, we delete or de-identify your account within 30 days, keeping only the transaction records the law requires us to hold.

Newsletter subscriptions are kept until you unsubscribe. Server logs are rotated automatically and are not kept for more than 90 days.

11 Your rights

You can:

• see and update most of what we hold about you directly from your account page;
• ask for a copy of all the personal information we hold about you;
• ask us to correct anything that is wrong or out of date;
• ask us to delete your account and personal information, subject to the records we must keep by law;
• unsubscribe from marketing at any time using the link in any newsletter;
• complain if you think we have mishandled your information.

To exercise any of these, email us. We will respond within 30 days and will not charge you for it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

12 Children

Magic is played by people of all ages, but our store is for adults. You must be 18 or older to create an account or place an order, or have a parent or guardian do it for you. We do not knowingly collect personal information from anyone under 18; if you believe we have, email us and we will delete it.

13 Changes to this policy

We will update this policy when our practices change. The date at the top tells you when it was last revised. If a change materially affects how we use your information, we will let account holders know by email before it takes effect.

This policy sits alongside our Terms & Conditions and Shipping & Returns policy.