Privacy policy

Privacy Policy

Last updated: July 9, 2026

Card Republic operates this website and online store, including all related information, content, features, tools, products and services offered through it (collectively, the "Services").

Our store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and Services to you.

This Privacy Policy explains how Card Republic collects, uses, stores and discloses your personal information when you visit or use our website, make a purchase or other transaction, create an account, communicate with us or otherwise interact with our Services.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect

When we use the term "personal information", we mean information or an opinion about an identified individual or an individual who is reasonably identifiable.

The personal information we collect depends on how you interact with Card Republic and our Services. This may include:

Contact Information

This may include:

  • Your name;

  • Billing address;

  • Shipping address;

  • Phone number; and

  • Email address.

Payment and Financial Information

When you make a purchase, payment information may be collected and processed to complete your transaction. This may include:

  • Payment card details;

  • Payment method;

  • Payment confirmation;

  • Transaction information; and

  • Other payment-related information.

Payment information may be processed directly by Shopify, Shopify Payments, PayPal or other third-party payment providers. Card Republic may not directly receive or store complete payment card numbers.

Account Information

If you create a customer account, we may collect information including:

  • Your username or login credentials;

  • Account preferences;

  • Saved addresses;

  • Wishlist information; and

  • Other account settings.

Order and Transaction Information

We may collect information about:

  • Products you view;

  • Products added to your cart;

  • Products added to a wishlist;

  • Orders and purchases;

  • Returns and refunds;

  • Cancelled orders;

  • Discount codes used;

  • Shipping and delivery information; and

  • Your transaction history with Card Republic.

Communications With Us

When you communicate with Card Republic, we may collect the information you provide to us, including information submitted through our support page, forms, reviews, chatbot or other communication channels.

Device and Technical Information

We may automatically collect certain technical information when you access or use our Services, including:

  • Your IP address;

  • Browser type;

  • Device type;

  • Operating system;

  • Network information;

  • Unique device or browser identifiers; and

  • Other technical information associated with your use of the Services.

Usage Information

We may collect information about how you interact with our website and Services, including:

  • Pages viewed;

  • Products viewed;

  • Searches performed;

  • Links clicked;

  • Time spent on pages;

  • Referring websites;

  • Shopping activity; and

  • How and when you navigate or interact with the Services.

AI Chatbot and Automated Assistance

Card Republic may provide an artificial intelligence-powered chatbot, virtual assistant or other automated tool through our Services.

When you interact with our chatbot or another automated assistance feature, we may collect and process information including:

  • Messages, questions and prompts you submit;

  • Responses generated during your conversation;

  • Information you voluntarily provide through the chatbot;

  • Information about the products, orders, policies or Services you ask about;

  • Technical and device information associated with your interaction;

  • Usage information relating to how you interact with the chatbot; and

  • Other information reasonably necessary to operate, secure, monitor or improve the chatbot.

Depending on how our chatbot is configured, information you submit may be processed by Card Republic and by third-party artificial intelligence, technology, cloud hosting or service providers that assist us in providing the chatbot.

We may use chatbot interactions to:

  • Respond to customer questions;

  • Provide general assistance relating to our products, orders, policies and Services;

  • Improve our Services and customer experience;

  • Monitor the quality, safety and accuracy of chatbot responses;

  • Identify and correct inaccurate or inappropriate responses;

  • Analyse and improve the performance of automated systems;

  • Detect misuse, fraud or security threats; and

  • Escalate matters for human assistance where appropriate.

You should avoid submitting highly sensitive personal information, complete payment card details, passwords, authentication codes or other confidential information through the chatbot unless expressly requested through an appropriate and secure process.

The chatbot may generate responses that are inaccurate, incomplete, outdated or otherwise incorrect. Information provided by the chatbot should not be treated as a substitute for official product listings, prices displayed at checkout, order confirmations, published Card Republic policies or human support where accuracy is particularly important.

Where appropriate, chatbot interactions may be reviewed by authorised personnel or service providers for purposes including customer support, quality assurance, security, troubleshooting and improvement of our Services.

Our handling of personal information submitted through the chatbot is subject to this Privacy Policy and applicable law.

How We Collect Personal Information

We may collect personal information from the following sources:

Directly From You

We collect information directly from you when you:

  • Place an order;

  • Create an account;

  • Submit a support request;

  • Interact with our chatbot or other automated assistance tools;

  • Sign up for marketing communications;

  • Participate in a promotion;

  • Submit a review;

  • Complete a form; or

  • Otherwise provide information to us.

Automatically Through Our Services

We may automatically collect certain information through:

  • Cookies;

  • Pixels;

  • Web beacons;

  • Analytics technologies;

  • Device information; and

  • Similar technologies.

From Service Providers

We may receive personal information from service providers that help us operate our business, including providers of:

  • Ecommerce technology;

  • Payment processing;

  • Shipping and fulfilment;

  • Analytics;

  • Advertising;

  • Fraud prevention;

  • Customer support;

  • Artificial intelligence and automated assistance tools;

  • Cloud hosting; and

  • Information technology services.

From Business Partners and Other Third Parties

Where permitted by law, we may receive personal information from business partners, advertising platforms, social media platforms and other third parties.

How We Use Your Personal Information

We may use your personal information for the following purposes:

Providing and Fulfilling Our Services

We may use your personal information to:

  • Process payments;

  • Process and fulfil orders;

  • Arrange shipping and delivery;

  • Provide order confirmations and updates;

  • Manage customer accounts;

  • Process returns and refunds;

  • Respond to customer support requests;

  • Provide chatbot and automated assistance features;

  • Maintain transaction records;

  • Remember preferences and products you may be interested in; and

  • Provide and improve our Services.

Personalisation and Improvement

We may use information about your interactions with our Services to:

  • Improve our website;

  • Improve our product offerings;

  • Understand how customers use our Services;

  • Personalise your shopping experience;

  • Recommend products that may be relevant to you;

  • Improve chatbot and automated assistance features; and

  • Improve the performance and functionality of our Services.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to:

  • Send promotional communications;

  • Send information about products, offers, promotions or events;

  • Measure the effectiveness of advertising;

  • Display advertisements that may be relevant to you; and

  • Personalise marketing based on products you have viewed, added to your cart or purchased.

You may unsubscribe from promotional electronic communications at any time by using the unsubscribe option included in those communications.

Even after opting out of promotional communications, we may still send non-promotional messages relating to your orders, transactions, account, customer support enquiries or other service-related matters.

Security and Fraud Prevention

We may use personal information to:

  • Authenticate customer accounts;

  • Detect and prevent fraud;

  • Identify suspicious transactions;

  • Investigate potentially illegal, fraudulent, unsafe or malicious activity;

  • Protect our customers, business and Services;

  • Maintain the security of our website and systems; and

  • Enforce our terms, policies and legal rights.

Communicating With You

We may use your personal information to:

  • Respond to support requests;

  • Provide order and shipping updates;

  • Address complaints;

  • Resolve disputes;

  • Respond to questions; and

  • Maintain our customer relationship with you.

Legal and Regulatory Purposes

We may use personal information where reasonably necessary to:

  • Comply with applicable laws and regulations;

  • Respond to lawful requests from courts, regulators, law enforcement agencies or government authorities;

  • Establish, exercise or defend legal claims;

  • Investigate potential violations of our terms or policies; and

  • Protect our legal rights or those of our customers or others.

Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies when you visit or interact with our Services.

Cookies are small data files stored on your device or browser that may help websites remember information about your visit.

Cookies and similar technologies may be used to:

  • Keep our website functioning correctly;

  • Remember your preferences;

  • Maintain your shopping cart;

  • Enable customer account features;

  • Understand how customers use our website;

  • Measure website performance;

  • Prevent fraud and improve security;

  • Measure advertising effectiveness; and

  • Personalise content and advertising.

Some cookies are necessary for the website and checkout to function correctly. Other cookies may be used for analytics, personalisation or advertising, subject to applicable laws and your available privacy choices.

You may be able to manage cookies through your browser settings or privacy controls made available through our website. Disabling certain cookies may affect the availability or functionality of parts of our Services.

How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business, provide our Services or comply with legal obligations.

These third parties may include:

Shopify

Our online store is hosted and powered by Shopify. Shopify may collect and process personal information in connection with your access to and use of our Services.

Information submitted through our Services may be transmitted to and processed by Shopify and its service providers.

Payment Providers

We may disclose or transmit information to payment processors and financial service providers for purposes including:

  • Processing payments;

  • Confirming transactions;

  • Preventing fraud;

  • Managing refunds; and

  • Resolving payment disputes.

Shipping and Fulfilment Providers

We may provide information such as your name, shipping address, phone number and order details to postal services, couriers, fulfilment providers and other delivery partners as necessary to fulfil and deliver your order.

Technology, AI and Service Providers

We may disclose information to vendors and service providers that assist us with:

  • Website hosting;

  • Information technology;

  • Cloud storage;

  • Artificial intelligence and chatbot services;

  • Analytics;

  • Customer service;

  • Fraud prevention;

  • Security;

  • Marketing;

  • Advertising;

  • Order management; and

  • Other business operations.

Where an artificial intelligence or chatbot provider processes information on our behalf, information submitted through the chatbot may be transmitted to and processed by that provider in accordance with the services it provides to us and applicable contractual arrangements.

Advertising and Marketing Partners

Where permitted by law, we may share certain information with advertising and marketing partners to:

  • Deliver advertisements;

  • Measure advertising effectiveness;

  • Understand customer interactions; and

  • Personalise marketing.

Depending on where you reside, you may have rights to limit certain uses or disclosures of personal information for targeted or personalised advertising.

When You Direct or Consent to Disclosure

We may disclose personal information where you direct us to do so, request the disclosure or otherwise provide consent.

Legal Requirements and Business Transactions

We may disclose personal information where reasonably necessary:

  • To comply with applicable law;

  • In response to valid legal processes;

  • In response to requests from law enforcement agencies, courts, regulators or government authorities;

  • To protect or defend our legal rights;

  • To enforce our terms and policies;

  • To protect the rights or safety of our customers or others; or

  • In connection with a merger, acquisition, financing, sale of assets, restructuring, insolvency or other business transaction.

Our Relationship With Shopify

Card Republic uses Shopify to provide and operate our ecommerce Services.

Shopify may collect and process personal information about your access to and use of our store to provide, maintain, secure and improve its services.

Information you submit through our Services may be transmitted to Shopify and other third parties, including parties located outside Australia or outside the country in which you reside.

Shopify may also process information collected through your interactions with our store, other Shopify merchants and Shopify services where permitted by applicable law and in accordance with Shopify's own privacy practices.

For further information about how Shopify processes personal information, you may review Shopify's Consumer Privacy Policy and privacy resources.

Third-Party Websites and Services

Our Services may contain links to websites, applications, social media platforms or other online services operated by third parties.

Card Republic does not control these third parties and is not responsible for their privacy, security or data-handling practices.

We recommend reviewing the privacy policies and terms of any third-party website or service before providing personal information.

The inclusion of a link to a third-party website or service does not necessarily constitute an endorsement of that third party or its content.

Children's Privacy

Our Services are intended for a general audience and are not specifically directed at children.

We do not knowingly collect personal information from children where doing so would be prohibited by applicable law.

Where a parent or legal guardian believes that a child has provided personal information to us inappropriately, they may submit a request through:

https://cardrepublic.com.au/pages/support

We may take reasonable steps to verify the request before deleting or otherwise acting on the information.

Security of Your Personal Information

We take reasonable administrative, technical and organisational measures designed to protect personal information against loss, misuse, interference, unauthorised access, modification or disclosure.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

You should avoid sending highly sensitive or confidential information through insecure communication channels.

If you create a customer account, you are responsible for maintaining the confidentiality and security of your account credentials. You should not share your password or login credentials with other people.

Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected or as otherwise permitted or required by applicable law.

The period for which we retain information may depend on factors including:

  • Whether the information is required to provide our Services;

  • Whether you maintain a customer account;

  • Our legal and regulatory obligations;

  • Accounting and tax requirements;

  • Fraud prevention and security requirements;

  • The need to resolve disputes;

  • The need to process warranties, returns or refunds;

  • The need to monitor and improve customer support or chatbot interactions; and

  • The need to establish, exercise or defend legal claims.

When personal information is no longer reasonably required, we may delete, destroy or de-identify it, subject to applicable legal obligations.

Your Privacy Rights and Choices

Depending on where you live and the laws that apply, you may have certain rights regarding your personal information.

These rights may include:

Access

You may have the right to request access to personal information we hold about you.

Correction

You may have the right to request correction of personal information that is inaccurate, incomplete, outdated or otherwise incorrect.

Deletion

In certain circumstances and where provided by applicable law, you may have the right to request deletion of personal information.

Portability

Depending on applicable law, you may have the right in certain circumstances to obtain a copy of your personal information in a portable format or request its transfer to another service provider.

Objection or Restriction

Depending on where you reside, you may have the right to object to or restrict certain uses of your personal information.

These rights are not absolute and may be limited by applicable law. We may need to verify your identity before processing certain requests and may request information reasonably necessary to do so.

To submit a privacy request, please use:

https://cardrepublic.com.au/pages/support

Marketing Preferences

You may unsubscribe from promotional electronic communications by using the unsubscribe option provided within those communications.

Opting out of promotional communications does not prevent us from sending transactional, administrative or service-related communications, including communications relating to:

  • Orders;

  • Payments;

  • Shipping;

  • Returns;

  • Refunds;

  • Account security; and

  • Customer support requests.

Privacy Complaints

If you have a concern or complaint about how Card Republic has handled your personal information, please submit it through:

https://cardrepublic.com.au/pages/support

Please provide sufficient information for us to understand and investigate your concern.

We will assess privacy complaints and respond within a reasonable timeframe, subject to applicable law.

Depending on where you live, you may also have the right to lodge a complaint with an applicable privacy regulator or data protection authority.

International Data Transfers

Some of our service providers, including Shopify, artificial intelligence providers and other technology providers, may store or process personal information in countries outside Australia or outside the country in which you reside.

As a result, your personal information may be subject to the laws of jurisdictions other than your own.

Where required by applicable law, appropriate measures may be used in connection with international transfers of personal information.

If you are located in the European Economic Area or United Kingdom and applicable law requires it, international transfers may be made using recognised legal transfer mechanisms, such as applicable standard contractual clauses or other legally recognised safeguards.

European Economic Area and United Kingdom Residents

Where the General Data Protection Regulation, UK GDPR or other applicable European privacy laws apply, you may have additional rights regarding your personal information.

Depending on the circumstances, these rights may include the right to:

  • Access your personal information;

  • Correct inaccurate personal information;

  • Request deletion of personal information;

  • Restrict certain processing;

  • Object to certain processing;

  • Receive certain personal information in a portable format; and

  • Withdraw consent where processing is based on consent.

These rights are subject to applicable conditions, limitations and exceptions.

To submit a privacy request, please use:

https://cardrepublic.com.au/pages/support

You may also have the right to lodge a complaint with your local data protection authority.

Australian Privacy

Where applicable, Card Republic handles personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable Australian privacy laws.

Depending on the circumstances and applicable law, you may have rights to access personal information held about you and request correction of inaccurate, incomplete, outdated or misleading information.

To make a privacy-related request or complaint, please use:

https://cardrepublic.com.au/pages/support

Nothing in this Privacy Policy is intended to exclude, restrict or modify any rights that cannot lawfully be excluded, restricted or modified.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our business practices;

  • Our Services;

  • Our technology;

  • Our service providers;

  • Applicable laws or regulations; or

  • Other operational, legal or regulatory requirements.

When we update this Privacy Policy, we will publish the revised version on our website and update the "Last updated" date.

Where required by law, we may provide additional notice of material changes.

Contact and Privacy Requests

For questions about this Privacy Policy, concerns about how we handle personal information, privacy complaints or requests to exercise privacy rights, please use our support page:

https://cardrepublic.com.au/pages/support