Privacy policy

Last updated: 26 August 2026

The Cardboard Addicts is operated by Sasha Bello (ABN: 99 391 237 527 ("we", "us", "our"). We operate this online store and website, including the related information, content, features, tools, products and services that we provide to customers (the "Services") such as this website which can be accessed via the domains of thecardboardaddicts.com; thecardboardaddicts.au and misterecollectables.com. 

Our Services are hosted by Shopify, which provides the technology that enables us to operate our online store.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit or use our Services, purchase our products, create an account, contact us, or otherwise interact with us.

If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us using the details in the Contact us section below.

1. Personal information we collect

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not.

Depending on how you interact with us, we may collect and hold the following types of personal information:

• Identity and contact information, including your name, email address, telephone number and address.

• Billing and delivery information, including billing address, shipping address and delivery instructions.

• Payment and transaction information, including details of products purchased, returned, exchanged or cancelled, transaction details, payment method and payment confirmation. Payment card details may be collected and processed by Shopify and our payment providers on our behalf.

• Account information, including your username, password, account preferences and settings.

• Order and shopping information, including products you view, add to your cart, wishlist or purchase, and your purchase history.

• Communications, including information you provide when you contact us, submit an enquiry, make a complaint or communicate with our customer support team.

• Device and technical information, including your IP address, browser type, device information, operating system, network information and other technical identifiers.

• Usage information, including information about how and when you access or use our Services.

• Marketing information, including your marketing preferences and your interactions with our marketing communications.

• Cookie and similar technology information, including information collected through cookies, pixels, tags and similar technologies.

We do not generally seek to collect sensitive information. If we need to collect sensitive information in circumstances where the Privacy Act requires additional protections, we will handle that information in accordance with applicable law.

2. How we collect personal information

We may collect personal information:

• Directly from you, including when you create an account, place an order, provide your details at checkout, contact us, subscribe to marketing communications, submit a review or otherwise provide information to us.

• Automatically through our Services, including through cookies, pixels and similar technologies when you browse or use our website.

• From Shopify and our service providers, where they collect or process information on our behalf.

• From payment, delivery and fulfilment providers, where necessary to provide our Services.

• From advertising, analytics and technology providers, where applicable.

• From social media platforms or other third parties, where you interact with us through those services or otherwise provide permission for information to be shared with us.

• From publicly available sources, where applicable and permitted by law.

Where we collect personal information directly from you, we will take reasonable steps to ensure that you are made aware of the matters required by applicable privacy law at or before collection, or as soon as practicable afterwards.

3. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for purposes including:

Providing our Services

We use personal information to:

• process and fulfil orders;

• process payments;

• arrange delivery and fulfilment;

• manage returns, refunds and exchanges;

• create and administer customer accounts;

• provide customer support;

• remember preferences;

• maintain and improve our website and Services;

• provide product recommendations and a personalised shopping experience;

• allow customers to submit product reviews where applicable; and

• communicate with you about your orders, account or enquiries.

Marketing and advertising

Where permitted by law, we may use personal information to:

• send marketing and promotional communications;

• tell you about products, services, offers and promotions;

• measure the effectiveness of our marketing;

• understand customer interests and preferences;

• provide or facilitate relevant advertising; and

• create advertising or marketing audiences using information collected through our website or services.

Where required by law, we will obtain consent before sending commercial electronic messages such as marketing emails or SMS messages.

You can opt out of direct marketing communications at any time by using the unsubscribe facility included in the communication or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending you non-marketing communications that are necessary for your orders, account, transactions or other legitimate business purposes.

Security and fraud prevention

We may use personal information to:

• authenticate accounts;

• protect the security of our Services;

• detect, investigate and prevent fraud;

• detect and respond to illegal, unsafe or malicious activity;

• protect our business, customers and other users; and

• investigate suspected misuse of our Services.

Legal and regulatory purposes

We may collect, hold, use or disclose personal information where reasonably necessary to:

• comply with Australian law or a court or tribunal order;

• respond to lawful requests from government agencies or law enforcement;

• establish, exercise or defend legal claims;

• resolve disputes;

• enforce our terms and policies; or

• protect our legal rights or the rights of our customers and other persons.

4. How we disclose personal information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

Depending on how you interact with us, we may disclose personal information to:

• Shopify, which provides the ecommerce platform on which our store operates;

• payment providers, to process payments and transactions;

• delivery and fulfilment providers, to deliver products and process returns;

• IT, hosting, cloud storage and technology providers that provide services to us;

• customer support providers, where applicable;

• analytics and advertising providers, where applicable;

• marketing service providers, where applicable;

• professional advisers, such as accountants, lawyers and insurers;

• our related entities or business partners, where applicable;

• government agencies, regulators, courts or law enforcement, where required or authorised by law; and

• other persons where you direct or consent to the disclosure, or where disclosure is otherwise permitted or required by law.

We do not sell personal information in exchange for money.

Where we use third-party services for advertising, analytics or other purposes, those providers may collect or receive information about your interactions with our website in accordance with their own privacy policies and the arrangements we have with them.

5. Shopify

Our online store is hosted and operated using Shopify.

Shopify may collect, use, store and process personal information in connection with its provision of services to us. Shopify may also process information to provide and improve its own services and features.

Information submitted through our store may therefore be processed by Shopify and its service providers, including outside Australia.

For information about how Shopify handles personal information, please refer to Shopify's applicable privacy information.

Shopify Privacy Policy: https://www.shopify.com/legal/privacy

Where Shopify provides us with privacy-related features or tools, we may use those features to assist us in responding to privacy requests or managing customer information.

6. Cookies and similar technologies

We may use cookies, pixels, tags, web beacons and similar technologies to operate and improve our website and Services.

These technologies may be used to:

• remember your preferences;

• keep items in your shopping cart;

• maintain your session;

• understand how visitors use our website;

• analyse website performance;

• improve our Services;

• measure advertising effectiveness; and

• provide or facilitate relevant advertising.

Some cookies are necessary for the operation of our website, while others may be used for analytics or advertising.

You may be able to control or block cookies through your browser settings. Blocking certain cookies may affect the functionality of our website.

Where required by applicable law, we will provide additional information or obtain consent for particular cookies or similar technologies.

7. Direct marketing

We may use your personal information for direct marketing where permitted by Australian law.

If you provide consent to receive marketing communications, we will keep a record of that consent where appropriate.

Commercial electronic messages we send, such as marketing emails or SMS messages, will comply with applicable requirements, including requirements concerning consent, identification of the sender and unsubscribe facilities.

You can unsubscribe from marketing communications at any time using the unsubscribe facility provided in the message or by contacting us.

We will process valid unsubscribe requests within the timeframe required by applicable law.

8. Holding and security of personal information

We take reasonable steps to protect personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure.

Depending on the circumstances, security measures may include access controls, authentication measures, security procedures, contractual controls with service providers and other technical and organisational safeguards.

However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

If we become aware of an eligible data breach, we will respond in accordance with applicable Australian law, including the Notifiable Data Breaches scheme where applicable.

9. How long we retain personal information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide our Services;

• maintain customer accounts;

• complete transactions;

• comply with legal and regulatory obligations;

• resolve disputes;

• establish, exercise or defend legal claims; and

• enforce our agreements and policies.

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it, unless we are required or authorised by law to retain it.

10. Accessing and correcting your personal information

You may request access to personal information we hold about you.

You may also ask us to correct personal information if you believe it is inaccurate, out-of-date, incomplete, irrelevant or misleading.

To make a request, contact us using the details in the Contact us section.

We may need to verify your identity before processing a request.

We will respond to access and correction requests within the timeframe required by applicable law.

In some circumstances, we may be permitted or required by law to refuse access or refuse to make a requested correction. If this occurs, we will explain the reason where we are permitted to do so.

11. Privacy complaints

If you believe we have handled your personal information in a way that breaches the Australian Privacy Principles or other applicable privacy law, you may make a complaint to us.

How to make a complaint

Please contact us:

Email: sales@thecardboardaddicts.com

Postal address: PO BOX: 777 Manunda QLD 4870, Australia

Please provide as much information as possible about your complaint, including what happened and the outcome you are seeking.

We will acknowledge and investigate your complaint and will endeavour to respond within a reasonable period and within any timeframe required by applicable law.

We may contact you to obtain further information or to verify your identity.

If you are not satisfied with our response, or if we do not resolve your complaint within the applicable timeframe, you may be able to complain to the Office of the Australian Information Commissioner (OAIC).

Information about making a privacy complaint to the OAIC is available at:

https://www.oaic.gov.au/privacy/privacy-complaints

12. Overseas disclosures

Some of our service providers and technology providers may be located outside Australia. As a result, personal information may be disclosed to overseas recipients.

The countries in which recipients are likely to be located include include, but are not limited to:

United States, Canada, Singapore, New Zealand, Countries of which are a member of the European Union and/or other countries used by Shopify.

The countries listed above should be kept up to date based on the providers and services actually used by our business.

Where required by the Privacy Act, we will take reasonable steps before disclosing personal information to an overseas recipient to ensure that the recipient handles the information consistently with applicable Australian Privacy Principles, subject to applicable exceptions.

You should not rely on this section as a guarantee that personal information will never be processed in another country. The countries in which particular service providers operate may change from time to time.

13. Third-party websites and services

Our Services may contain links to websites, applications or services operated by third parties.

If you follow a link to a third-party website or use a third-party service, that provider's privacy policy will apply to its handling of your personal information.

We are not responsible for the privacy practices of third-party websites or services that we do not control.

14. Children's privacy

Our Services are not specifically directed to children.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe a child has provided personal information to us and you would like that information reviewed or deleted, please contact us using the details below.

15. Anonymity and pseudonymity

Where it is lawful and practicable to do so, you may interact with us anonymously or using a pseudonym.

However, anonymity or pseudonymity may not be practicable for certain activities, including placing an order, making a payment, arranging delivery, creating certain accounts or dealing with a matter where we are required by law to identify you.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, Services, technology, privacy practices or applicable law.

When we update this Privacy Policy, we will publish the updated version on our website and update the "Last updated" date.

Where required by law, we will provide additional notice of material changes.

17. Contact us

If you have questions about this Privacy Policy, want to access or correct your personal information, or wish to make a privacy complaint, contact us:

Cardboard Addicts

Legal entity: Sasha Bello trading as Cardboard Addicts

ABN: 99 391 237 527

Email: sales@thecardboardaddicts.com

Postal address: PO BOX: 777 Manunda QLD 4870, Australia

We will use reasonable steps to respond to privacy enquiries and requests within the timeframe required by applicable law.