Privacy & GDPR Policy
Effective Date: 1st June 2025
Direct Coins is dedicated to protecting your personal information. This Privacy Policy details our practices in compliance with relevant Australian privacy and internet laws, as well as the European Union's General Data Protection Regulation (GDPR). We want you to feel confident that your personal data is always secure. If you have any inquiries about this policy, please contact us.
Direct Coins Pty Ltd (ABN 31 642 204 733), PO Box 3053, Joondalup WA 6027, Australia, owns and operates this website. In this Privacy Policy, "Direct Coins," "we," "our," and "us" refer to this company. By using www.directcoins.com.au, you agree to the terms outlined in this Privacy Policy. This policy describes how we collect and use the personal information (also referred to as 'personal data') you may share with us through our website, telephone interactions, email correspondence, or online chat sessions. We recognise the critical importance of protecting information that can identify you ( referred to in this policy as"personal information" or "personal data"). This Privacy Policy sets forth how we will handle your personal data. We encourage you to review this policy periodically for any changes. Please feel free to share your comments and feedback with us.
Personal Information
- We collect personal data from visitors to our website only when you willingly and knowingly submit it. This may occur when you need us to provide you with services, respond to your questions or requests, or process your order. Our aim is to ensure that your personal information is handled in a way that complies with all applicable privacy laws in Australia and the GDPR. Under GDPR, we process your personal data based on the following lawful bases: where processing is necessary for the performance of a contract (e.g., processing your order), where we have your explicit consent (e.g., for marketing), where processing is necessary for compliance with a legal obligation, or where it is in our legitimate interests (e.g., improving our website security, preventing fraud), provided your rights and freedoms are not overridden.
Limited Disclosure of Your Personal Data:
- We only disclose your personal data to third parties under specific circumstances, always ensuring we have a lawful basis to do so (e.g., with your consent, to fulfill a contract with you, or where we have a legitimate interest that is balanced with your rights). These circumstances include:
- Legal Requirements: We may disclose your personal data when we have a good faith belief that the law requires us to do so
- Protection of Interests: We may disclose your personal data where we deem it necessary to identify, contact, or pursue legal action against individuals who may be violating our terms of service, causing damage or interference (intentionally or unintentionally) to our rights, our property, our users, or others. This processing is based on our legitimate interests in protecting our business and users. - To provide you with our services, we engage trusted third-party service providers (e.g., shipping companies, payment processors). In these cases, we share your personal data only as necessary for them to fulfill your requests for goods or services on our behalf. We ensure these providers are also committed to protecting your data through contractual agreements and due diligence.
Security And Data Storage
We are committed to protecting the security and privacy of your personal data.
- Our website is secured with Shopify's SSL certificate that uses industry standard 256-bit encryption technology. This is the same level of encryption used by large banks to keep your information secure. Shopify is certified Level 1 PCI DSS compliant.
- We ensure our website is kept up-to-date with the latest technology.
- All payments are processed securely through trusted providers such as Shopify Payments, PayPal, AfterPay, Klarna & Zip Pay.
- All data is transmitted using the latest HTTPS/SSL technology.
- Data is stored securely at our web host's world-class data centre, which includes Level 1 PCI compliance.
- We continuously review and update our security measures to align with current technologies.
While we strive to protect your personal information, no data transmission over the Internet can be guaranteed as completely secure. We will take all reasonable steps to protect the personal information you transmit to us and ensure its security on our systems upon receipt. By using our website and services, you acknowledge and agree to the storage and processing of your personal data at our web host's secure data centre located in the United States, accessed from Australia. Where required for international transfers, we implement appropriate safeguards as described in our 'International Users' section
Collecting Information from Users
- Personal data is collected and stored when: an order is placed through our website; a customer account is created; through our website contact forms; online chat is used; a website survey is completed; or by phone or email with consent. By providing this data using any of these methods, you consent to Direct Coins collecting and storing the data provided by you.
- We only collect and process data when absolutely necessary for a specified purpose, such as to complete our services, comply with legal obligations, or where we have a legitimate interest to enhance your experience on our website (balanced against your data protection rights).
- Registering a customer account is optional. You can purchase products using our 'Guest' checkout option, which only requires necessary contact and shipping information to fulfill your order.
- Our web servers gather your IP address to assist with the diagnosis of problems or support issues with our services. Again, information is gathered in aggregate only and cannot be traced to an individual user.
- We use cookies to provide you with a better experience. These cookies allow us to increase your security by storing your session ID and are a way of monitoring single user access. For more information, please visit "What Is A Cookie And How Do We Use Them" below
- Data Retention:
- Data relating to customer orders is retained for a minimum of five (5) years to comply with Australian Tax Law and may be retained longer unless you request its deletion.
- Other data, such as customer accounts and newsletter subscriptions, is retained unless you specifically request its deletion and/or unsubscribe. - Data Access and Confidentiality:
- Our employees and contractors who provide services related to our information systems are obliged to respect the confidentiality of all personal information held by us. - Limitation of Liability:
- While we take extensive measures to protect your data, we cannot be held responsible for events arising from unauthorized access to your personal information.
What Personal Data Do We Collect
We may collect the following personal data for business-related purposes.
- Contact details including your name, address, phone number, and email
- Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number
- Account information including your username, password, security questions and other information used for account security purposes
- Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services
- Shopping information including the items you view, put in your cart, saved into your account like loyalty points, reviews, referrals or gift cards, or purchases. Loyalty points/product reviews/referrals/gift cards saved
- Online chat history (if used)
We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.
Our Commitment to Using Your Data Responsibly
We are committed to using your personal information responsibly and only for the purposes for which it was provided, or for closely connected reasons. We will never use your data in a way that is unexpected without informing you and seeking your explicit consent where legally required (including under GDPR). We use this information to:
- Confirm your identity when you make a purchase (Contractual necessity)
- Handle all aspects of your order, from processing to delivery (Contractual necessity)
- Ensure your payments are processed securely (Contractual necessity, Legal obligation)
- Maintain accurate internal records for our business operations (Legitimate interest, Legal obligation)
- Continuously work to improve our website and the products and services we offer (Legitimate interest)
- From time to time, contact you for market research to gain valuable insights (Legitimate interest, or Consent if distinct from marketing consent)
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.
When and Why We Might Share Your Data
We only share your personal data with trusted third parties when it's necessary for specific business reasons, and we always ensure we have a lawful reason to do so under Australian and European (GDPR) data protection rules. Here's when and why we might share your information:
- If the Law Requires It: To comply with legal obligations, court orders, or government requests.
- To Protect Our Business: To safeguard our property, services, and legal rights, ensuring this is balanced with your privacy rights
- For Essential Business Functions: To support our audits, ensure we're compliant with regulations, and manage our business effectively
- If You Give Us Permission: We will share your data if you explicitly consent or ask us to, such as connecting your account with another service.
We choose our partners carefully and ensure they respect your privacy and protect your information
Information We Obtain from Third Parties
- Companies who support our Site and Services, such as Shopify
- Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) directly from you to process your payment and fulfill your orders, as necessary to perform our contract with you. We do not directly store your full payment card details
- When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.
User Generated Content
Our Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone.
We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.
Stay Connected with Direct Coins: Our Marketing Updates
- When you provide your consent to receive our marketing communications, you are explicitly agreeing to receive promotional and marketing emails. These emails will keep you informed about Direct Coins, our products, services, and occasionally, relevant third-party services like Afterpay or Zip Pay that may enhance your shopping experience with us. We want you to be in control. You can withdraw your consent at any time by clicking the "unsubscribe" link found in all our marketing emails or by contacting us directly.
Diverse Payment Options for Your Convenience
- In addition to credit cards, we offer a variety of convenient payment options through trusted third-party providers. To understand how each provider collects, stores, uses, and shares your personal data, please review their individual privacy policies before using their services on our website. Please note that Direct Coins is not responsible for the privacy practices of these external payment processors.
Third Party Websites and Links
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
A Note for Younger Visitors and Their Parents
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.
As of the Effective Date of this Privacy Policy, we do not intentionally 'share' or 'sell' (as those terms may be defined in applicable privacy laws) personal information of individuals under 16 years of age.
Your Rights, Privacy Concerns and Questions
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
- Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information
- Right to Delete: You may have a right to request that we delete personal information we maintain about you
- Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you
- Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions
- Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information
- Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent
- Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial
- Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made
- For further information about privacy rights and protections in Australia, you can also visit the website of the Australian Information Commissioner.
You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.
We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.
Our Use of Cookies: Providing a Better Service
Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see .https://www.shopify.com/legal/cookies We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.
Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.
International Users
Please note that we may transfer, store and process your personal information outside the country you live in. Your personal information is also processed by staff and third party service providers and partners in these countries.
If we transfer your personal information outside of Europe or the UK, we will rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses (SCCs), or any equivalent contracts issued by the relevant competent authority of the UK, unless the data transfer is to a country that has been deemed to provide an adequate level of data protection by the relevant authority.
Updates
We may update this Privacy & GDPR Policy from time to time, and the most recent version will always be indicated by the "Effective Date" at the beginning of the document. These updates may occur due to legal changes or to improve our transparency based on your feedback.
This Privacy Policy supplements our website's