Privacy Policy

Goldback Australia
Operated by No Bull Bullion Pty Ltd
ABN 66 664 095 658

Last updated: 24 October 2026

1. Introduction

No Bull Bullion Pty Ltd (ABN 66 664 095 658), trading as Goldback Australia (“Goldback Australia”, “we”, “us” and “our”), respects your privacy and is committed to the responsible handling of personal information.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit our website, purchase products, create a customer account, apply for a wholesale account, communicate with us or otherwise interact with our business.

We operate as an online retailer and wholesale supplier of Goldbacks, Silverbacks and related products.

We seek to handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) where applicable, and other relevant Australian laws.

2. Personal Information We Collect

Depending on your dealings with us, we may collect the following categories of information.

2.1 Personal and contact information

2.2 Business and wholesale information

Where you apply for or hold a wholesale account, we may collect:

2.3 Transaction and payment information

We may collect:

Our initial payment arrangements include direct bank transfer. We may introduce third-party payment services, including GoCardless and Stripe, in the future.

If additional payment services are introduced, the relevant provider may collect or process payment and account information in accordance with its own privacy arrangements and the services we use.

2.4 Identity verification and compliance information

Where required or reasonably necessary for legitimate verification or applicable legal obligations, we may request additional information concerning identity, business ownership, authorised representatives and transaction circumstances.

Depending on the legal requirements and verification service involved, this could include identification document details, identity images or other verification information.

We do not require every customer to provide identity documents solely because they browse our website or create an ordinary customer account.

If we introduce Stripe Identity or another identity-verification service, we will provide appropriate information about the specific collection, processing and handling of identity information before that service is used.

Any collection of biometric information or other sensitive information will be assessed separately against applicable legal requirements.

2.5 Website and technical information

When you use our website, we or our service providers may collect:

3. How We Collect Personal Information

We generally collect personal information directly from you when you:

We may also collect relevant information from lawful third-party sources, including public business registers, payment providers, service providers and authorised representatives.

Where applicable, we will provide additional privacy collection notices when information is requested for a particular purpose.

4. Purposes for Collecting and Using Personal Information

We may use personal information to:

  1. Operate, maintain and secure our website.
  2. Register and administer customer accounts.
  3. Process purchases, payments, refunds and deliveries.
  4. Assess and manage wholesale account applications.
  5. Verify business details, ABNs and the authority of business representatives.
  6. Conduct lawful identity, fraud-prevention and transaction checks.
  7. Meet applicable AML/CTF, taxation, record-keeping, reporting and other legal obligations.
  8. Respond to enquiries, complaints, disputes and customer service requests.
  9. Maintain business records and investigate security incidents.
  10. Improve our website, services and customer experience.
  11. Send newsletters, product announcements, offers and marketing communications where permitted by law.
  12. Measure advertising performance and provide relevant advertising where permitted by law and where those services have been enabled.
  13. Record and administer your preferences about an optional public distributor listing, where requested.

If you do not provide information reasonably required for an order, verification process or wholesale application, we may be unable to complete the transaction, establish an account or assess the application.

5. Wholesale Account Applications

Wholesale applications are reviewed to determine eligibility for wholesale purchasing.

We may verify information provided against publicly available business records and request further supporting information where reasonably necessary.

An application may be approved, declined or referred for additional information.

A declaration that a business is not registered with AUSTRAC, or does not currently have an AML/CTF policy, does not automatically result in rejection. We assess applications in their relevant commercial and regulatory context.

Submitting an application does not guarantee wholesale approval.

Wholesale application information will be accessible to authorised personnel responsible for reviewing applications and administering accounts.

Saved applications: Where the Save and Continue function is available, partially completed wholesale applications may be stored for the retention period disclosed when the draft is saved. The applicant may receive a unique resume link by email. That link should be kept private because possession of it may enable access to information entered in the draft. Certain fields, including passwords, security challenges, consent fields and file uploads, may need to be completed again when the application is resumed. A saved draft is not a submitted or approved wholesale application.

Optional distributor map: Applicants may separately choose whether they wish to be considered for a public distributor-map listing. Agreeing to a listing does not guarantee publication or wholesale approval, and declining does not prevent consideration of an application. If a listing is approved, we will publish only the business information covered by the relevant permission. We will not publish a private residential or billing street address without separate appropriate authorisation. A business may contact us to change or withdraw its listing permission. Removal requests will be handled within a reasonable period.

6. Payment Processing

Goldback Australia initially accepts direct bank transfer payments.

Information relating to bank transfer transactions may be received from our financial institution and recorded for order processing, reconciliation, accounting, fraud prevention and legal compliance.

We may introduce GoCardless, Stripe Payments or other payment providers.

When such services are enabled, relevant customer and transaction information may be shared with those providers for payment processing, verification, security and related purposes.

Customers should review any applicable payment provider privacy information presented when selecting a payment method.

We will update our privacy disclosures as necessary before introducing materially different payment arrangements.

7. Website Cookies, Analytics and Advertising

Our website uses or may use cookies and similar technologies to support:

Our current website functionality includes WordPress and WooCommerce, Forminator wholesale forms, Cloudflare Turnstile security checks and relevant hosting and security services. These services may process technical information needed to operate, protect and troubleshoot the website. We may also use an address-lookup provider to help enter and validate delivery addresses.

We intend to use services such as Google Analytics, Google Ads and Meta Pixel, but references to these services do not mean they are currently enabled.

When these services are activated, they may collect or receive technical information about visits and interactions with our website, depending on their configuration and applicable privacy settings.

This information may be used to measure advertising performance, understand website traffic and provide relevant advertising.

Where required or appropriate, we will provide choices concerning non-essential cookies and advertising tracking.

You may also manage cookies through your browser settings and use relevant advertising preference controls offered by Google and Meta.

Disabling certain essential cookies may affect account, shopping cart or checkout functionality.

We will not intentionally transmit identification documents, AML/CTF verification materials or other sensitive verification information to advertising platforms through marketing pixels or conversion-tracking features.

8. Email Communications and Marketing

We send operational communications where necessary to provide our services, including:

We also intend to offer optional marketing communications, including newsletters, new product releases, promotions and wholesale offers.

Marketing communications will be sent in accordance with applicable Australian laws, including the Spam Act 2003 (Cth).

Where required, we will obtain consent before sending electronic marketing messages.

Marketing emails will identify Goldback Australia and provide a functioning unsubscribe mechanism.

You may unsubscribe from promotional emails without losing access to ordinary customer account services or necessary transactional communications.

We use WordPress-based transactional email functionality and an authenticated Google email-sending connection for website and account notifications. MailPoet is installed for newsletter functionality; promotional emails will be sent only where permitted by law and subject to applicable consent and unsubscribe requirements.

A decision to receive promotional emails is separate from acceptance of purchase terms or a wholesale application. Where express consent is sought, we intend to keep an appropriate record of that choice, including its time and method. We will action marketing opt-out requests within the time required by law.

Our website also uses email logging functionality for operational and troubleshooting purposes. Logs may contain email addresses, message details and, depending on configuration, message content.

Access to these records should be restricted to authorised personnel, and records will be retained only as reasonably necessary or required by law.

9. Disclosure of Personal Information

We may disclose personal information where reasonably necessary to:

We may also disclose information in connection with a genuine business sale or restructure, subject to applicable legal requirements.

We do not sell customer identity-verification information or AML/CTF records to advertisers.

Public distributor information: Only where a business has given suitable permission and we have approved its listing, we may disclose the agreed business name, website and location on a publicly accessible distributor map or directory. Information displayed publicly may be viewed, copied or indexed by others, so permission can be withdrawn for future publication but we cannot guarantee removal of copies already made by third parties.

10. Overseas Disclosure and Storage

Goldback Australia uses or may use technology providers whose systems, subcontractors or personnel operate outside Australia.

Accordingly, some personal information may be disclosed to or accessed by overseas recipients, depending on the services in use.

Where the Australian Privacy Principles apply, we will take reasonable steps required by law in relation to overseas disclosures and the handling of personal information by relevant overseas recipients.

11. Information Security

We take reasonable steps appropriate to the information we hold to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Our security measures may include access restrictions, appropriate authentication, secure communications, CAPTCHA and abuse prevention, software maintenance, backups, logging and the use of suitable technology providers.

We aim to limit access to personal information to authorised personnel and service providers who require it for legitimate business purposes.

No website, electronic communication or data-storage system can be guaranteed to be completely secure.

Please contact us promptly if you suspect that your customer account or personal information has been compromised.

12. Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected or lawfully used, and to satisfy applicable legal, regulatory, taxation, accounting, security and dispute-resolution obligations.

Certain information collected in connection with AML/CTF obligations may be subject to statutory record-retention periods.

Partially completed wholesale applications saved using the Save and Continue feature are subject to the draft retention period disclosed at the time of saving. Submitted applications, account records and associated communications may be retained for longer where reasonably necessary for administration, legal compliance, dispute handling or legitimate business record keeping.

Where information is no longer reasonably required and no applicable law or order requires its retention, we will take reasonable steps to securely destroy or de-identify it.

Requests to close accounts or delete information may be subject to legal requirements to retain transaction, taxation or compliance records.

13. Access to and Correction of Personal Information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

We may request information reasonably necessary to verify your identity before responding.

We will consider access and correction requests in accordance with applicable law and respond within a reasonable period.

Where access or correction cannot be provided, we will explain the reasons to the extent required by law.

Requests may be sent to info@goldback.au.

14. Privacy Complaints

If you believe we have mishandled your personal information, you may submit a complaint to:

Privacy Officer
Goldback Australia
No Bull Bullion Pty Ltd
Email: info@goldback.au
Phone: 1300 427 866

Please provide details of your concern and sufficient information for us to investigate it.

We will acknowledge and investigate complaints and aim to respond substantively within 30 days.

If further time is required, we will seek to keep you informed.

If you remain dissatisfied, you may be entitled to contact the Office of the Australian Information Commissioner (OAIC).

Website: https://www.oaic.gov.au

15. Data Breaches

We take suspected data breaches seriously and will assess and respond to security incidents in accordance with applicable law.

Where the Notifiable Data Breaches scheme applies and a breach meets the relevant legal threshold, we will notify affected individuals and the OAIC as required.

16. Automated Decision-Making

We use software to administer online orders, customer accounts and wholesale applications.

Wholesale account decisions are subject to administrator review rather than being made solely through an automated approval or rejection system. Automated rules may still assist with registration, fraud prevention, CAPTCHA verification, order processing, pricing display and account eligibility checks.

Where we arrange for automated processing that makes or is substantially and directly related to a decision reasonably expected to significantly affect an individual’s rights or interests, we will assess and provide the disclosures required by applicable privacy law.

This section will be reviewed before the automated-decision transparency amendments commencing on 10 December 2026 take effect and whenever relevant systems materially change.

17. Third-Party Websites and Services

Our website may contain links to independent third-party websites and services.

Those third parties may have their own privacy policies and terms governing their services.

We encourage you to review their privacy information before providing personal information directly to them.

18. Changes to This Policy

We may amend this Privacy Policy from time to time to reflect changes to our activities, technology providers, legal obligations or privacy practices.

The current version will be available on our website, together with its latest update date.

Where required by law, we will provide additional notice or obtain consent before introducing materially different personal information handling activities.

19. Contact Information

Goldback Australia
Operated by No Bull Bullion Pty Ltd
ABN: 66 664 095 658

Email: info@goldback.au
Phone: 1300 427 866
Postal Address: PO Box 2225, Noosa Heads QLD 4567, Australia
Online store: https://shop.goldback.au
Main website: https://goldback.au

Goldback Australia operates as an online-only business and does not maintain a public retail storefront.

For privacy enquiries, access or correction requests, or privacy complaints, please contact us using the details above.