This policy explains what personal information Mail Your Gold collects when you use mailyourgold.com.au or sell to us, why we collect it, where it is stored, how long we keep it and how to access or correct it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Who we are. Mail Your Gold, ABN 89 955 776 983, a Victorian registered second-hand dealer (SHD-0018514). Postal address PO Box 5165, Mordialloc VIC 3195. Privacy contact: enquiries@mailyourgold.com.au.
Last updated 18 October 2026.
1. What we collect
- Enquiries and the seller guide: your name, email address and any message you send us through the website, the "Ask a question" popup or by email.
- My Gold Account: your name, email address, phone number, postal address and a password (stored only as a one-way hash).
- Selling to us: your return address, the tracking number of your parcel, photographs and descriptions of the items you send, our test results and the offer we make, your acceptance or decline, and the BSB and account number you nominate for payment.
- Identity verification: the type, number, expiry date and name on your photo ID, and the images of it you upload or enclose. Victorian second-hand dealer law requires us to record these details before buying second-hand goods.
- Website use: standard server logs (IP address, browser, pages viewed) and analytics and advertising cookies described in section 5.
We do not collect tax file numbers, Medicare numbers or card details. Bank details are used only to pay you; we never ask for online-banking logins.
2. Why we collect it
To answer your enquiry; to run your My Gold Account; to receive, assess, hold and return or pay for your items; to verify your identity and ownership as the Second-Hand Dealers and Pawnbrokers Act 1989 (Vic) requires; to keep the transaction and tax records the law requires; to respond to lawful requests from Victoria Police or other authorities; to send you service messages about your enquiry, parcel, offer or payment; and, only if you opt in, to send occasional gold-price and selling updates.
3. Where it is stored
- Website and enquiry forms: hosted by Shopify. Shopify's own privacy policy applies to the data it processes as our host.
- My Gold Account, transaction records and ID images: our seller portal at mail-your-gold-account.floot.app, built on the Floot platform. ID images are stored in private, access-controlled object storage, never in a public location, and are viewable only by authorised staff for identity checks.
- Email: sent and received through our own domain mailboxes.
Some of these providers store data on servers outside Australia (including the United States). We only use providers that commit to protecting personal information to a standard comparable to Australian law.
4. Who we share it with
We do not sell or rent personal information. We disclose it only to: the service providers above, to the extent needed to run the service; Victoria Police or another authority where the law requires or permits it (for example a request under the Second-Hand Dealers and Pawnbrokers Act about specific goods); our accountant, bank and payment provider for making payments and keeping tax records; and professional advisers or insurers if a dispute or claim arises. Refiners and other buyers of recovered metal never receive your personal information.
5. Cookies, analytics and advertising
Our website uses Shopify's essential cookies and the Meta (Facebook) Pixel. The Pixel records that a browser visited certain pages or downloaded the seller guide so we can measure our advertising and show relevant ads on Facebook and Instagram; it does not receive your ID, bank details or anything you type into forms. You can opt out of personalised advertising in your Facebook settings and limit cookies in your browser. Australian residents can also use our privacy choices page.
6. How long we keep it
- Transaction records (item descriptions, photographs, test results, offer, payment, and the recorded ID type, number and expiry) are kept for 7 years from the transaction, which covers our second-hand dealer and tax record-keeping obligations.
- ID images are deleted from storage within 90 days of your sale being paid or your items being returned. Each deletion is confirmed by our staff and logged. Only the recorded ID details remain in the transaction record. If you ask us to, we will delete the images sooner once the transaction is complete.
- Enquiries that do not lead to a sale are deleted after 24 months.
- Bank details are kept only on the transaction record and are not reused without your confirmation.
- My Gold Account data is kept while your account is open; you can ask us to close it at any time and we will delete it, subject to the transaction records above.
7. Security
Data is encrypted in transit (HTTPS) and at rest with our providers. Access to transaction and ID records is limited to authorised staff with individual logins, and ID images are only ever opened for an identity check. Please do not email ID images or bank details; use the secure upload in your My Gold Account or the sealed envelope method described in the seller guide.
8. Access, correction and complaints
You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete ID images or close your account by emailing enquiries@mailyourgold.com.au. We will respond within 30 days and may need to verify your identity first. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
9. Marketing emails
You only receive marketing email if you ticked the optional marketing box. Every marketing email has an unsubscribe link, and unsubscribing never stops the service messages you need about a live transaction.
10. Changes
We will post any change to this policy on this page and update the date above. Significant changes to how we handle ID documents will also be emailed to open My Gold Account holders.