Privacy Policy

1. Overview

This Privacy Policy explains how UniBookTrader collects, uses, stores, and shares personal information when you use the website at unibooktrader.com.au, create an account, buy or sell textbooks, contact us, subscribe to updates, or otherwise use our services.

UniBookTrader is operated from Sydney, New South Wales. References to "UniBookTrader", "we", "us", or "our" mean the person or business operating the UniBookTrader website and service. Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply, we handle personal information in line with those requirements. Even where those requirements do not strictly apply, this policy is our operating standard.

2. Personal information we collect

• Account and profile details: email address, name, phone number, university or institution, location, saved delivery or collection addresses, and profile details you choose to provide.
• Authentication details: sign-in email link activity and Firebase authentication identifiers. We do not ask for a password.
• Seller details: textbook listing details, condition information, photos, notes, contact details, pickup address, payout workflow information, and seller declarations or consents.
• Buyer and order details: checkout/session details, delivery details, order status, buyer acceptance or problem reports, and support communications.
• Payment information: payment status, Stripe checkout/session identifiers, charge or refund metadata, and limited card/payment details returned by Stripe. We do not store full card numbers.
• Communications: contact form messages, support emails, admin notes, email preferences, newsletter subscription details, and email delivery logs.
• Technical and usage information: pages visited, actions performed, device and browser information, IP-derived logs, timestamps, error logs, and security/audit activity.

3. Sensitive information

We do not intentionally collect sensitive information such as health information, government identifiers, race or ethnic origin, political opinions, religious beliefs, or biometric information. Please do not include sensitive information in listings, photos, notes, contact forms, or support messages unless we specifically ask for it and it is necessary.

4. How we collect information

We collect information directly from you when you create an account, submit a listing, buy a book, complete checkout, provide delivery or pickup details, subscribe to updates, contact us, or use the site. We also receive information from service providers such as Firebase, Stripe, Mailgun, courier providers, and hosting or security services.

5. Why we use personal information

• To create and manage user accounts.
• To review, approve, reject, display, and manage textbook listings.
• To process checkout, order status, refunds, disputes, and payout workflows.
• To coordinate pickup, courier delivery, returns, and support.
• To send order emails, listing emails, buyer acceptance links, support responses, and service notices.
• To send newsletter or launch updates where you subscribe or opt in.
• To detect, prevent, investigate, and respond to misuse, inaccurate listings, security incidents, payment issues, or legal requests.
• To improve, maintain, test, debug, and secure the website and internal admin tools.
• To comply with legal, accounting, tax, record-keeping, and regulatory obligations.

6. When we share personal information

We share personal information only where needed to operate UniBookTrader, support users, comply with law, or protect the service.

• Between buyers and sellers: we share only what is needed for a transaction or support process. We do not publicly display private pickup or delivery addresses.
• Courier and delivery providers: we share pickup and delivery details needed to schedule and complete collection, delivery, or return.
• Payment providers: we use Stripe to process checkout, payments, refunds, and payment records.
• Technology providers: we use Firebase/Google Cloud for hosting, authentication, database, storage, functions, logs, and security; Mailgun for email delivery; and other operational tools where needed.
• Support, accounting, legal, and compliance: we may share information with professional advisers, regulators, law enforcement, or dispute bodies where reasonably necessary.

7. Overseas disclosure

Some service providers may store or process information outside Australia, including in the United States, Europe, or other locations where those providers operate. These providers include services such as Google/Firebase, Stripe, Mailgun, and related infrastructure or support providers. We take reasonable steps to use reputable providers and limit information shared to what is needed for the service.

8. Payments

Card payments are processed by Stripe. UniBookTrader does not store full card numbers or card security codes. Stripe may provide us with checkout status, customer details supplied during checkout, payment identifiers, limited payment method details, charge status, refund status, and fraud or dispute metadata.

9. Emails, notifications, and newsletters

We send operational emails about accounts, listings, orders, pickup, delivery, buyer acceptance, disputes, payouts, and support. You can manage some email preferences from your dashboard, but we may still send essential service, security, legal, or transaction emails.

If you subscribe to the newsletter, we store your email address, subscription status, consent text, source page, and subscription timestamps. You can unsubscribe from newsletter or marketing emails at any time by contacting contact@unibooktrader.com.au. Future newsletter emails may include an unsubscribe link.

10. Cookies, local storage, and analytics

We use browser storage, cookies, or similar technologies where needed for sign-in, account state, security, preferences, and site operation. Firebase authentication and Stripe checkout may use their own cookies or similar technologies. If analytics or diagnostic tools are enabled, they may collect usage and device information to help us understand and improve the site.

You can block cookies in your browser, but some features, including sign-in and checkout, may not work correctly.

11. Data retention

We keep personal information for as long as needed to provide the service, manage transactions, resolve disputes, maintain business records, comply with legal obligations, prevent misuse, and enforce our terms. We may keep order, payment, email, audit, and dispute records after an account is closed where reasonably needed for legal, accounting, security, or operational reasons.

12. Security

We use reasonable technical and organisational measures to protect personal information, including Firebase authentication, access controls, admin-only areas, service provider security controls, and logging. No website, database, email system, or internet transmission is completely secure, so please use strong email account security and protect your sign-in links.

13. Access, correction, and deletion

You can request access to personal information we hold about you, ask us to correct it, or ask us to delete information where deletion is lawful and practical. We may need to verify your identity before acting on a request. Some information may need to be retained for legal, tax, accounting, security, dispute, or transaction-record reasons.

14. Children

UniBookTrader is intended for users aged 18 and over. We do not knowingly collect personal information from people under 18. If you believe a person under 18 has provided personal information to us, contact us so we can review and remove it where appropriate.

15. Complaints

If you have a privacy question or complaint, contact us first at contact@unibooktrader.com.au. Please include enough detail for us to understand and investigate the issue. We will respond within a reasonable time. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner at oaic.gov.au.

16. Changes to this policy

We may update this Privacy Policy from time to time. If a change is material, we will take reasonable steps to notify users through the website, email, or account notices. The updated policy applies from the effective date shown on the page.

17. Contact

Privacy enquiries, access requests, correction requests, deletion requests, and newsletter unsubscribe requests can be sent to contact@unibooktrader.com.au.