Privacy policy
Last updated: 7 October 2026
This policy explains what personal information we collect when you use Fantasy WZ Store, why we collect it, who we share it with and the choices and rights you have. We do not sell your personal information.
If there is any inconsistency between this policy and our Terms of Service in relation to personal information, this policy prevails.
1. Who we are
1.1 Fantasy WZ Store is operated by a business based in Australia (we, us). We are the controller of the personal information described in this policy.
1.2 You can contact us about privacy at privacy@fantasywzstore.com using the details in section 16.
2. Information we collect
2.1 Personal information means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised or de-identified so that it can no longer be linked to you.
2.2 Information you give us: your name, email address, In-game Username, Discord handle (optional), the Items you order, and the content of your messages to us.
2.3 Transaction information: order details, amounts, the payment method type, the last four digits of your card and the billing country. Full card details are collected and processed by our payment providers and are not received or stored by us.
2.4 Technical information: IP address, browser and device information, and information about how you use the Store, collected through cookies and similar technologies (see section 6).
2.5 Delivery records: timestamped screenshots or recordings of in-game trades showing the In-game Username and the Item Delivered.
2.6 We collect this information directly from you; automatically from your device when you use the Store, including through cookies; and from our service providers, such as Shopify and our payment providers, when they process information on our behalf.
2.7 Providing your email address and In-game Username is necessary for us to fulfil your Order. Without them we cannot deliver the Items.
3. How we use it and our legal bases
3.1 We use personal information for the purposes below. Where the EU or UK General Data Protection Regulation applies, we rely on the legal basis shown.
| Purpose | Legal basis |
|---|---|
| Processing and delivering your Order, and communicating with you about it | Performance of a contract |
| Responding to enquiries, refund requests and complaints | Performance of a contract; legitimate interests |
| Preventing fraud, verifying Orders and responding to payment disputes | Legitimate interests (protecting our business and customers from fraud) |
| Keeping business, tax and accounting records | Legal obligation |
| Sending marketing emails | Consent, or for existing customers our legitimate interests (you may opt out at any time) |
| Analytics and advertising cookies | Consent, where required by law |
3.2 We do not make decisions about you that produce legal or similarly significant effects solely by automated means. Our payment providers apply automated fraud screening to transactions; an Order flagged by that screening is reviewed by us before any cancellation.
4. Who we share it with
4.1 We share personal information only as needed to run the Store:
- Shopify, which hosts the Store and processes orders on our behalf. Shopify's handling of personal information is described in the Shopify Consumer Privacy Policy.
- Payment providers, card networks and card issuers, to process payments, screen for fraud and resolve disputes.
- Clerk, which runs Store accounts and sign-in (including sign-in with Google) on our behalf.
- Cloudflare, which hosts our order-message system and stores your order and question conversations, feedback and In-game Username on our behalf.
- Resend, which sends our order and message notification emails on our behalf.
- Discord: our staff receive order and message notifications (order reference, Items, In-game Username, your account name and the messages you send us) in a private Discord channel. Where you choose to contact us on Discord, Discord is an independent controller of information on its platform.
- Analytics and advertising providers, only where you have consented to the relevant cookies.
- Professional advisers and authorities, where required by law or to establish, exercise or defend legal claims.
4.2 If our business is sold, restructured or transferred, personal information may be transferred to the new owner, who will be bound by this policy in respect of it.
4.3 We do not sell or rent personal information and do not disclose it in exchange for any benefit.
5. Shopify
5.1 The Store is hosted by Shopify, which collects and processes personal information about your access to and use of the Store in order to provide its services to us. Information you submit through the Store is transmitted to and stored by Shopify and may be processed in countries other than the one in which you live.
5.2 We use certain Shopify features that draw on information about your interactions with our Store, with other merchants and with Shopify, to help protect and improve our business. Where Shopify processes personal information for those features, Shopify is responsible for that processing, including responding to requests to exercise your rights in relation to it. You can learn more in the Shopify Consumer Privacy Policy and exercise those rights through the Shopify Privacy Portal.
6. Third-party sites and public spaces
6.1 The Store contains links to third-party services, including Discord and the Game. Those services are not operated by us and have their own privacy policies, which you should review.
6.2 Information you post in public or semi-public spaces, such as a Discord server or a product review, may be visible to other users and can be used by them without our control.
7. International transfers
7.1 We operate from Australia. Our service providers process information in Canada, the United States and other countries. Where personal information of customers in the EU or UK is transferred to a country without an adequacy decision, we rely on our providers' standard contractual clauses or other safeguards recognised by law. You may request further information about these safeguards.
8. Cookies
8.1 The Store uses cookies that are strictly necessary for it to function, such as those that maintain your cart and secure checkout. These cannot be switched off.
8.2 With your consent where the law requires it, we and our providers use analytics cookies to understand how the Store is used, and advertising cookies or pixels to measure the effectiveness of advertising. You can accept or decline these through the cookie banner and change your choice at any time through the "Cookie preferences" link in the footer.
8.3 Do Not Track. The Store honours the Global Privacy Control signal as a request to opt out of advertising cookies. We do not otherwise respond to browser "Do Not Track" signals, as there is no common standard for them. Third parties such as advertising providers may collect information about your activity across websites only where you have consented to their cookies.
9. Marketing
9.1 We send marketing emails only where you have agreed to receive them or, where the law permits, where you are an existing customer and have not opted out. Every marketing email identifies us and contains a working unsubscribe link. Unsubscribe requests are processed within five Business Days.
10. How long we keep it
| Information | Retention |
|---|---|
| Order, transaction and tax records | 5 years after the Order, as required by Australian tax law |
| Delivery records and fraud-prevention data (IP address, device information) | 24 months after the Order, to respond to payment disputes |
| Support correspondence | 2 years after the matter is closed |
| Marketing preferences | Until you unsubscribe, after which we retain a suppression record |
11. Security
11.1 We use reasonable technical and organisational measures to protect personal information, including Shopify's secure hosting, encrypted connections and restricted access. No method of transmission or storage is completely secure, and we recommend that you do not send sensitive information to us through insecure channels.
11.2 If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and, where required, the relevant regulator without undue delay.
12. Children
12.1 The Store is not directed to children under 13 and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13, we will delete it and cancel any undelivered Order with a full refund.
12.2 A parent or guardian who believes their child has provided us with personal information may contact us at privacy@fantasywzstore.com.
12.3 We do not send marketing to persons we know to be under 16 without the consent of a parent or guardian.
13. Your rights
13.1 Subject to the law that applies to you, you may ask us to:
- give you access to, or a copy of, your personal information;
- correct inaccurate personal information;
- delete your personal information;
- restrict or object to our processing, including processing based on legitimate interests;
- provide your personal information in a portable format; and
- stop sending you marketing, at any time.
13.2 Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
13.3 We will not treat you differently for exercising any of these rights. You may authorise an agent to make a request on your behalf; we will ask the agent for proof of authority and may need to verify your identity with you directly.
13.4 Some information must be retained despite a deletion request, such as records we are required to keep for tax purposes or to defend a payment dispute. We will tell you if that applies.
14. Making a request or complaint
14.1 Email privacy@fantasywzstore.com. We will acknowledge your request or complaint within 30 days, and normally respond in full within one month. We may need to verify your identity before acting on a request.
14.2 If we decline your request, you may ask us to reconsider by replying to our decision. If you are still not satisfied you may complain to the Office of the Australian Information Commissioner (oaic.gov.au), the UK Information Commissioner's Office (ico.org.uk), or the data protection authority in the EU member state where you live.
15. Changes to this policy
15.1 We may update this policy from time to time. The current version is always published on this page with its "last updated" date. Where a change is material, we will notify customers with an account by email before it takes effect.
16. Contact
| Controller | Fantasy WZ Store |
|---|---|
| Privacy enquiries | privacy@fantasywzstore.com |