OVERVIEW
This website is owned and operated by UCardsTM trading as “UCards”. Throughout this Privacy Policy, the terms “we”, “us”, “our” and “UCards” refer to 2 Wheels In Motion Pty Ltd.
We recognise the importance of protecting the privacy of information collected about visitors to our website, in particular information that is capable of identifying an individual (“personal information”). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, where it is stored, and how you can access, correct or delete it.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy forms part of, and should be read together with, our Terms & Conditions.
By using this website, or by placing an order with us, you agree to the collection and handling of your personal information as described in this Privacy Policy.
We reserve the right to modify this Privacy Policy at any time. The current version is always available on this page, and the date at the top shows when it was last updated. Where we make a material change, we will take reasonable steps to notify you. You should review this page periodically. We welcome your comments and feedback.
SECTION 1 — WHAT PERSONAL INFORMATION WE COLLECT
We collect personal information that is reasonably necessary for us to design, produce and deliver your custom card, to operate our website, and to support you as a customer. Depending on how you use our site, this may include:
Contact and identity information
• Your name
• Email address
• Phone number
• Billing address and delivery address
Order and account information
• Your order history, order numbers and order status
• Your saved card designs and shopping cart contents
• Your account login details, if you choose to create an account (your password is stored in an encrypted, non-reversible form)
• Any notes, requests or correspondence you send us about an order
Images and card content — please read this section carefully
• Photographs and images you upload to personalise your card
• The names, team or club names, positions, statistics, dates, signatures, messages and any other text you enter into a card design
Photographs frequently depict the person the card is for, who may be a child. Where you upload an image of a child, you must be that child’s parent or legal guardian, or have the consent of their parent or legal guardian, as required by our Terms & Conditions. We treat uploaded images as personal information and, where they identify an individual, handle them in accordance with this Privacy Policy.
Payment information
• We do not collect or store your full credit or debit card number, expiry date or security code. Card payments are processed directly by our payment provider, Stripe, and card details are entered into Stripe’s secure payment fields rather than being transmitted to or held on our systems.
• We do receive and retain limited payment metadata from Stripe, such as the last four digits of the card, the card brand, the payment status and the transaction reference, so that we can identify your payment, process refunds and meet our record-keeping obligations.
Technical and usage information
• Your IP address
• Browser type, device type and operating system
• Pages visited, referring pages and time spent on the site
• Cookie identifiers (see Section 6)
Marketing preferences
• Whether you have opted in to receive updates, offers and promotional material
• Whether you have consented to us using your card design or uploaded image in our marketing
SECTION 2 — HOW WE COLLECT PERSONAL INFORMATION
We collect personal information:
• Directly from you, when you create a card design, upload an image, add items to your cart, place an order, create an account, subscribe to our mailing list, complete a feedback form, or contact us by email;
• Automatically, through cookies and our web server logs, when you browse the site (see Section 6); and
• From third parties, in limited circumstances — for example, payment confirmation and fraud signals from Stripe, and delivery status updates from our carriers.
Where it is reasonable and practicable, we collect personal information directly from you. If you do not provide the information we ask for, we may be unable to produce or deliver your order.
SECTION 3 — HOW WE USE YOUR PERSONAL INFORMATION
We use your personal information to:
• design, review, print, pack and deliver your custom card;
• process your payment, issue receipts and manage refunds;
• create and manage your account and shopping cart;
• contact you about your order, including where we need a better quality image or need to clarify a personalisation detail;
• provide customer support and respond to your enquiries, feedback or complaints;
• send you marketing and promotional material, where you have opted in (you can opt out at any time — see Section 8);
• maintain, secure, troubleshoot and improve our website and services;
• detect, investigate and prevent fraud, misuse and breaches of our Terms & Conditions; and
• meet our legal, tax and record-keeping obligations.
We use your personal information only for the purpose for which it was provided, for related secondary purposes that you would reasonably expect, or as otherwise permitted or required by law.
We do not sell your personal information, and we do not disclose it to third parties for their own marketing purposes.
Use of your images in marketing. We will only use your uploaded photograph, or an image of your finished card, in our marketing, advertising, social media or promotional material with your prior consent. You may withdraw that consent at any time by emailing support@ucards.com.au. We will stop using it in new material, although we may be unable to remove it from material already printed or distributed.
SECTION 4 — WHO WE SHARE YOUR PERSONAL INFORMATION WITH
We disclose personal information to the following categories of recipients, in each case only to the extent necessary for them to perform their function:
Recipient
Purpose
Information disclosed
Our printing partner
Producing and packing your card
Your name, delivery and billing address, email address, phone number, order details, and the print-ready file containing your photograph and card text
Delivery carriers
Delivering your order
Your name, delivery address, phone number and email address
Stripe
Payment processing and fraud prevention
Your name, email address, billing address and payment details you enter
Vercel
Website hosting, database and file storage
All information stored on our website, including uploaded images
Resend
Sending transactional and marketing email
Your name, email address and order details
Professional advisers, insurers and regulators
Legal, accounting and compliance purposes
As required in the circumstances
We may also disclose personal information:
• where you have consented to the disclosure;
• where we reasonably believe disclosure is necessary to identify, contact or bring legal action against anyone damaging, injuring or interfering with our rights or property, our users, or anyone else who could be harmed by such activities;
• where we believe in good faith that the law requires disclosure, or to comply with a subpoena, court order or lawful request from a government or regulatory authority; and
• to a purchaser or prospective purchaser in connection with a sale or restructure of our business, subject to that party agreeing to handle the information consistently with this Privacy Policy.
SECTION 5 — OVERSEAS STORAGE AND DISCLOSURE
Your personal information, including any photographs you upload, is stored and processed on servers located outside Australia.
Our website, database and file storage are provided by Vercel Inc., and our email is delivered by Resend. Payment processing is provided by Stripe. These providers store and process data in the United States and may replicate or process it in other countries in which they or their sub-processors operate.
By providing your personal information to us and using our website, you consent to your personal information being disclosed to and stored by these overseas recipients.
We take reasonable steps to ensure that overseas recipients handle your personal information appropriately, including by selecting established providers with published security and privacy commitments and by entering into their standard data processing terms. However, you should be aware that:
• overseas recipients may be subject to laws that differ from Australian privacy law;
• we may not be able to require an overseas recipient to comply with the Australian Privacy Principles; and
• you may not be able to seek redress under the Privacy Act 1988 (Cth) in respect of an act or practice of an overseas recipient.
Our printing partner is located in Australia.
SECTION 6 — COOKIES, IP ADDRESSES AND WEB LOGS
Cookies. We use cookies to operate the site and improve your experience. The cookies we use include:
• a session cookie, which keeps you logged in to your account and secures your session; and
• a cart cookie (cartId), which remembers the contents of your shopping cart for up to 30 days so that your card designs are not lost between visits.
These cookies are necessary for the website to function. If you disable cookies in your browser, you may not be able to log in, build a card design or complete a purchase.
IP addresses and server logs. Our web servers record your IP address and related technical information to help diagnose problems, investigate support issues, and protect the site against abuse and fraud. This information is generally analysed in aggregate.
Analytics. Where we use analytics tools to understand how the site is used, the information is collected in aggregate and used to improve the site.
SECTION 7 — HOW LONG WE KEEP YOUR INFORMATION
We keep personal information only for as long as we reasonably need it:
• Uploaded images and card designs — retained while your design is active and after your order, so that we can reproduce your card if there is a fault, fulfil reprints and handle any dispute. Where you ask us to delete an uploaded image, we will do so unless we are required to retain it to complete an order in progress or to meet a legal obligation.
• Order, payment and tax records — retained for at least seven years, as required by Australian taxation and corporate record-keeping law.
• Account information — retained while your account remains open, and for a reasonable period afterwards.
• Marketing contact details — retained until you unsubscribe or ask us to delete them.
• Website logs — retained for a short period for security and troubleshooting purposes.
When personal information is no longer needed for any purpose for which it may lawfully be used, we take reasonable steps to destroy it or de-identify it.
SECTION 8 — MARKETING AND OPTING OUT
If you have opted in, we may send you emails about new card designs, offers and promotions. Every marketing email we send includes an unsubscribe link, and you can opt out at any time by using that link or by emailing support@ucards.com.au.
Opting out of marketing does not stop transactional messages that we need to send you about an order you have placed — for example, order confirmations, design queries and dispatch notifications.
SECTION 9 — SECURITY
We strive to ensure the security, integrity and privacy of the personal information submitted to our site, and we review and update our security measures in light of current technologies. The measures we take include encryption of data in transit, restricted administrative access, and using an established payment provider so that card details never reach our systems.
Our employees and the contractors who provide services related to our information systems are obliged to respect the confidentiality of any personal information held by us.
Unfortunately, no data transmission over the internet or method of electronic storage can be guaranteed to be totally secure. While we take reasonable steps to protect your personal information, we cannot guarantee its absolute security, and any transmission is at your own risk.
If we become aware of a data breach that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner where required.
SECTION 10 — ACCESSING, CORRECTING AND DELETING YOUR INFORMATION
You may request access to the personal information we hold about you, ask us to correct it if it is inaccurate, out of date or incomplete, or ask us to delete it. If you have an account, you can view and update much of this information yourself by logging in and going to your account.
To make a request, email support@ucards.com.au. We may need to verify your identity before acting on your request. We will respond within a reasonable period, and normally within 30 days.
We will generally action deletion requests, but we may need to retain some information where we are required or permitted by law to do so — for example, order and tax records — or where the information is needed to complete an order that is already in production. If we refuse a request, we will tell you why in writing.
We do not charge for making a request, though we may charge a reasonable fee for providing access in certain circumstances. We will tell you before any fee applies.
SECTION 11 — CHILDREN'S PRIVACY
Our website is not directed at children, and we do not knowingly collect personal information directly from children. Orders must be placed by a person aged 18 or over, or with the consent of a parent or legal guardian.
We recognise that cards are frequently created for children, and that the photographs and details supplied often relate to a child. Where you provide us with a child's personal information, you confirm that you are their parent or legal guardian, or that you have the consent of their parent or legal guardian. A parent or guardian may request access to, correction of, or deletion of a child's personal information by contacting us at support@ucards.com.au.
SECTION 12 — COMPLAINTS
If you have a concern or complaint about how we have handled your personal information, please contact us at support@ucards.com.au. We take these issues seriously and will investigate and respond to you, normally within 30 days.
If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC):
• Website: https://www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001
SECTION 13 — OVERSEAS VISITORS
Our website is directed at customers in Australia, though we accept orders from some other countries. If you access our site from outside Australia, you do so on your own initiative and are responsible for compliance with your local laws. Where the General Data Protection Regulation (EU/UK GDPR) applies to our handling of your personal information, we will handle it in accordance with that regulation to the extent it applies.
SECTION 14 — CONTACT US
For any question about this Privacy Policy, or to make a privacy request:
2 Wheels In Motion Pty Ltd trading as UCards
Email: support@ucards.com.au
For more information about privacy in Australia and protecting your privacy, visit the Office of the Australian Information Commissioner at https://www.oaic.gov.au.