Privacy at The Toy Cartel
The Toy Cartel is committed to protecting your privacy and handling your personal information with care. This policy explains what information we collect, how we use it, and your rights under Australian privacy law.
We operate under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We collect and use personal information only where it is necessary to provide our services or operate our website.
If you have questions about this policy, contact us at our contact form.
Who We Are
The Toy Cartel (ABN 70 657 841 677) is a design and product consultancy based in Sydney, Australia, on Gadigal Country. We provide services including accessible design, co-design facilitation, brand strategy, and AI advisory.
We also build free community tools. EPCheck (epcheck.thetoycartel.com.au) is a separate product with its own privacy policy.
What Information We Collect
We collect only the information we need. This includes:
- Contact form submissions — your name, email address, organisation name (if provided), and message content
- Direct email — your email address and any information you include in your message
- Website analytics — anonymised data about pages visited, time on site, and general geographic location. This does not identify you personally.
We do not collect sensitive information (such as health or financial information) through this website unless you specifically provide it in a message to us.
Why We Collect It
We use your personal information to:
- Respond to your enquiry and discuss how we might work together
- Provide services to you as a client
- Improve our website and understand how visitors use it
- Comply with legal or regulatory obligations
How We Store and Protect It
Your personal information is stored securely in our email and cloud systems. We use industry-standard security practices to protect it from unauthorised access, loss, alteration, or disclosure.
We retain personal information only for as long as it is needed for the purpose it was collected, or as required by law. Contact enquiry information is typically retained for up to two years. If you become a client, information related to our engagement is retained in accordance with our standard business records obligations.
When personal information is no longer needed, we take reasonable steps to destroy or de-identify it securely.
Who We Share It With
We do not sell, rent, or trade your personal information. We may share it with:
- Google (Google Analytics / GA4) — we use Google Analytics 4 to understand how visitors use our website. This tool collects anonymised usage data. Google may process this data on servers located outside Australia, including in the United States. Google’s privacy policy applies: policies.google.com/privacy. You can opt out at tools.google.com/dlpage/gaoptout.
- Our hosting provider — website contact form submissions are processed by our hosting provider, which stores data on servers in Australia or with appropriate protections in place.
- Legal requirements — if required by law, court order, or government authority, we may disclose personal information. We will notify you where permitted by law.
We take reasonable steps to ensure any overseas recipients of personal information comply with privacy standards consistent with the Australian Privacy Principles, in line with APP 8.
Cookies and Analytics
Our website uses cookies to help the site function and to understand how it is used. We use Google Analytics 4 (GA4) for website analytics. GA4 uses cookies to collect anonymised data about visitor behaviour.
You can control cookies through your browser settings. Disabling cookies will not prevent you from using this website. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
We do not use cookies for advertising or to track you across other websites.
Your Rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct information that is inaccurate, incomplete, or out of date
- Anonymity — where practicable, you may interact with us without identifying yourself
- Complaints — lodge a complaint if you believe we have not handled your personal information properly
To make a request or raise a concern, contact us at our contact form. We will respond within 5 business days.
Complaints
If you have a complaint about how we have handled your personal information, please contact us first at our contact form. We will investigate and respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
- GPO Box 5218, Sydney NSW 2001
External Links
Our website may link to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing personal information.
Changes to This Policy
We may update this Privacy Policy from time to time. The most recent version is always available at thetoycartel.com.au/privacy. The date at the bottom shows when it was last updated.
Contact Us
- Email: our contact form
- Mail: The Toy Cartel, Sydney NSW, Australia
This Privacy Policy was last updated on 24 March 2026. Requires legal review before publication.