Privacy at The Toy Cartel
The Toy Cartel is committed to protecting your privacy and handling your personal information with care. This policy explains what we collect, how we use it, and your rights under Australian privacy law.
We operate under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We only collect and use personal information when we need it to provide our services or run our website.
If you have questions about this policy, use our contact form.
Who we are
The Toy Cartel (ABN 70 657 841 677) is a design and product consultancy based in Sydney, Australia, on Gadigal Country. Our services include accessible design, co-design facilitation, brand strategy and AI advisory.
We also build free community tools. EPCheck (epcheck.thetoycartel.com) is a separate product with its own privacy policy.
What information we collect
We only collect the information we need. This includes:
- Contact form submissions: your name, email address, organisation name (if you give it) and your message.
- Direct messages: your contact details and anything you include when you contact us outside the website form.
- Website analytics: we use Google Analytics to see which pages people visit, how long they stay and roughly where they are. We don't use it to identify you.
We do not collect sensitive information, such as health or financial information, through this website unless you choose to include it in a message to us.
Why we collect it
We use your personal information to:
- Respond to your enquiry and discuss how we might work together.
- Provide services to you as a client.
- Improve our website and understand how visitors use it.
- Comply with legal or regulatory obligations.
How we store and protect it
We store your personal information securely in our email and cloud systems. We use industry-standard security practices to protect it from unauthorised access, loss, alteration or disclosure.
We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires. We usually keep contact enquiry information for up to two years. If you become a client, we keep information about our work together in line with our standard business records obligations.
When we no longer need personal information, we take reasonable steps to destroy or de-identify it securely.
Who we share it with
We do not sell, rent, or trade your personal information. We may share it with:
- Google (Google Analytics / GA4): we use Google Analytics 4 to understand how visitors use our website. It uses cookies to collect usage data. We work to keep this data anonymous, and we only use it to understand and improve our website. Google may process this data on servers outside Australia, including in the United States. Google's privacy policy applies. You can opt out at tools.google.com/dlpage/gaoptout.
- Our hosting provider: our hosting provider processes contact form submissions from the website. It stores data on servers in Australia or with appropriate protections in place.
- Legal requirements: we may disclose personal information if the law, a court order or a government authority requires it. We will tell you where the law allows us to.
In line with APP 8, we take reasonable steps to make sure any overseas recipients of personal information meet privacy standards consistent with the Australian Privacy Principles.
Cookies and analytics
Our website uses cookies to help the site work and to understand how people use it. We use Google Analytics 4 (GA4) for website analytics, and GA4 uses cookies to collect information about how visitors use the site. We don't use it to identify you, or for any purpose other than improving our website.
You can control cookies in your browser settings. You can still use this website with cookies turned off. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
We do not use cookies for advertising or to track you across other websites.
Your rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to correct information that is inaccurate, incomplete, or out of date.
- Anonymity: where practicable, interact with us without identifying yourself.
- Complaints: lodge a complaint if you believe we have not handled your personal information properly.
To make a request or raise a concern, use our contact form. We will respond within 5 business days.
Complaints
If you have a complaint about how we have handled your personal information, please contact us first through our contact form. We will investigate and respond within 30 days.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
- Mail: GPO Box 5218, Sydney NSW 2001
External links
Our website may link to other sites. We are not responsible for their privacy practices. We encourage you to read their privacy policies before you give them personal information.
Changes to this policy
We may update this privacy policy from time to time. This page always shows the current version of our website privacy policy.
Contact us
Contact form
The Toy Cartel, Sydney NSW, Australia