Privacy Policy

Current as at 16 July 2026

1. About this Privacy Policy

HOBBYSHOP COM AU (“HobbyShop”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains the kinds of personal information we may collect and hold, how we collect, use and disclose it, how we protect it, and how you may contact us about your personal information.

This policy applies when you:

visit or use HobbyShop.com.au and associated HobbyShop websites or online services;
create an account or place an order with us;
contact us, make an enquiry, request support or submit a complaint;
interact with us through email, telephone, social media or another communication channel; or
otherwise provide personal information to us.

We aim to follow the principles of the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to our activities.

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Depending on how you interact with us, personal information may include your name, billing or delivery address, email address, telephone number, account details, order history, correspondence and other information reasonably connected with your dealings with us.

3. What personal information do we collect?

We may collect and hold the following kinds of personal information:

your name, postal address, delivery address, email address and telephone number;
account details, login information and communication preferences;
details of Products ordered, order status, transaction history, returns and refunds;
payment-related information supplied through our payment providers, although we do not normally receive or store your complete card number;
information contained in enquiries, emails, reviews, complaints and other communications;
technical information such as IP address, browser type, device information, approximate location, referring pages and activity on our Site;
information needed to investigate suspected fraud, unauthorised transactions, misuse of the Site or security incidents; and
any other information you voluntarily provide to us.

Please do not send complete credit or debit card details to us by email or through a general contact form.

4. How do we collect personal information?

We usually collect personal information directly from you, including when you:

create or update an account;
place or pay for an order;
contact us about an order, Product, return, refund, warranty or complaint;
subscribe to communications or provide feedback;
interact with us through social media; or
use our Site.

We may also receive information from payment providers, delivery carriers, fraud-prevention services, website service providers, social media platforms or other third parties involved in providing services connected with your transaction or interaction with us.

5. Why do we collect, hold and use personal information?

We may collect, hold and use personal information to:

create and administer customer accounts;
process payments, orders, cancellations, returns and refunds;
produce, package and deliver Products;
communicate with you about your order or enquiry;
provide customer support and resolve complaints or disputes;
verify information and help prevent fraud, unauthorised transactions and misuse of the Site;
operate, maintain, secure and improve our websites, systems, Products and services;
measure website performance and understand how visitors use our Site;
send marketing communications where you have consented or where otherwise permitted by law;
keep business, taxation, accounting and transaction records;
comply with legal obligations and respond to lawful requests; and
protect our rights, property, customers and business.

You are not required to provide personal information to us. However, if you do not provide information that is reasonably required, we may be unable to create an account, process an order, deliver Products, respond to an enquiry or provide another requested service.

6. Cookies, analytics and online technologies

6.1 Cookies

Our Site may use cookies and similar technologies. Cookies are small files stored by your browser or device. They may be used to:

keep the Site and shopping cart functioning;
remember account, language or display preferences;
maintain login sessions;
help protect the Site against spam, fraud and malicious activity;
measure website traffic and performance; and
support advertising and understand whether advertising is effective.

You may be able to block or delete cookies through your browser settings. Some Site functions, including login, shopping cart and checkout functions, may not operate correctly if required cookies are blocked.

6.2 Analytics and advertising services

We may use third-party analytics, advertising and social media services, including services provided by Google and Meta. These providers may use cookies, pixels or similar technologies to collect information about visits to our Site and interactions with advertisements.

The information collected may include IP address, device and browser information, pages viewed, actions taken and referring websites. The providers handle that information according to their own privacy policies and settings.

6.3 Security and anti-spam services

We may use services such as Cloudflare Turnstile or similar technology to distinguish genuine users from automated or abusive activity and to help protect forms, accounts and the Site.

7. Direct marketing

We may send you marketing communications if you have asked to receive them, consented to receive them, or where otherwise permitted by law.

You may opt out at any time by using the unsubscribe facility included in the communication or by contacting us. Transactional communications about an existing order, payment, delivery, account, safety notice or customer-service matter are not marketing communications and may still be sent when required.

We do not sell or rent customer mailing lists or personal information for third-party marketing.

8. When do we disclose personal information?

We may disclose personal information where reasonably necessary to operate our business or provide services to you, including to:

payment processors, financial institutions and fraud-prevention providers;
postal services, couriers and delivery providers;
website hosting, database, backup, security, email and information-technology providers;
analytics, advertising and social media providers;
professional advisers such as accountants, insurers or legal advisers;
government agencies, courts, regulators or law-enforcement bodies where required or authorised by law; and
another party where you have authorised or requested the disclosure.

We disclose only the information reasonably required for the relevant purpose. For example, a delivery provider may receive your name, delivery address, contact details and information necessary to deliver and track an order.

9. Overseas processing and disclosure

Some service providers we use may store, process or access information outside Australia. This may occur through payment services, analytics, advertising, social media, email, cloud storage, software support or other online services.

The countries involved may vary according to the provider, its infrastructure and your location. Where privacy law requires it, we will take reasonable steps in the circumstances regarding the handling of personal information by overseas recipients.

You should also review the privacy policies of third-party providers whose services you choose to use, particularly payment, social media and online-platform providers.

10. Payment information

Online payments may be processed by third-party payment providers such as PayPal or another payment gateway made available at checkout. Payment providers collect and process payment information under their own terms and privacy policies.

We generally receive confirmation of payment, transaction identifiers, payer details and limited payment information rather than your complete card number or security code.

Bank-transfer payments may require us to receive and retain information contained in the transfer record, such as the payer name, reference and transaction details.

11. How do we protect personal information?

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include:

passwords, access controls and account security measures;
encrypted website connections;
firewalls, monitoring, backups, anti-spam and security software;
limiting access to information to circumstances where it is reasonably required;
using reputable service providers; and
reviewing and updating systems and security practices where appropriate.

No transmission or storage system can be guaranteed to be completely secure. You should protect your account password, avoid reusing passwords and notify us promptly if you believe your account or personal information has been compromised.

12. How long do we keep personal information?

We retain personal information for as long as reasonably required for the purposes described in this policy, including providing services, maintaining order and transaction records, resolving disputes, preventing fraud, meeting taxation and accounting requirements, and complying with legal obligations.

When information is no longer reasonably required, we may securely destroy it or remove identifying details, subject to backup, archival and legal-retention requirements.

13. Accessing and correcting your personal information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To protect your privacy, we may need to verify your identity before responding. We will respond within a reasonable period and may refuse access where permitted by law. If we refuse a request, we will explain the reason where required.

You may also be able to review or update some account information by signing in to your customer account.

14. Remaining anonymous or using a pseudonym

You may deal with us anonymously or using a pseudonym where it is lawful and practicable. However, we generally need accurate identifying and contact information to process payment, produce an order, arrange delivery, investigate a transaction, provide account access or respond to certain requests.

15. External websites and services

Our Site may contain links to third-party websites, platforms or services. We do not control the privacy or security practices of those third parties. Their handling of personal information is governed by their own policies and terms.

16. Privacy enquiries and complaints

If you have a question, request or complaint about how we handle personal information, please contact us:

Email	privacy_1@hobbyshop.com.au
Post	Privacy Officer HOBBYSHOP COM AU PO Box 23 Wallan VIC 3756 Australia

Please provide enough information for us to understand and investigate your request. We aim to respond to privacy enquiries and complaints within 30 days, although complex matters may require additional time.

If the Privacy Act applies to the matter and you are dissatisfied with our response, you may be able to contact the Office of the Australian Information Commissioner through oaic.gov.au.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, systems, service providers or legal obligations. The current version will be published on our Site and will show the date of the latest update.