Privacy Policy

Personal Information

We are TrustSite security certified. Our site is regularly checked for malware, viruses, phishing attacks, and other malicious activities. Your personal details are safe.

Under the Privacy Act 1988 (Privacy Act), The Book Merchant Bookstore is considered a small business and does not technically have to comply with the Act. That doesn't matter to us because we embrace the Australian Privacy Principles and will take every care with your personal information:

1. We will not disclose or sell your contact details to a third party, such as a marketing company.
2. The only information we keep for regulatory purposes are your name, address, email and phone number. We don't keep physical records. Our computers and devices are all protected by Nortons security.
3. We may use your contact details to update you on new book titles. If you tell us to stop contacting you, we will.
4. We do not collect your credit card details. We no longer take phone credit card orders, as most consumer protection advocates advise against them. Your credit card details go directly to a payment processing company, in our case, we use Squareup and PayPal. Data is not held on our servers, nor is data transferred, it is added directly to Squares and PayPal's servers.

Our online payment providers, PayPal and Squareup, are legally required to comply with the Privacy Act. More information is available on PayPal and Square's websites.

Payment Information

We are TrustSite certified. Our site is regularly checked for malware, viruses, phishing attacks, and other malicious activities.

Firstly our site runs via HTTPS. This is a secure version of the HTTP protocol that uses the SSL/TLS protocol for encryption and authentication. This is so your contact details on orders are communicated to us securely. We do not see or hold your credit card details.

Payment safety is really important to both your and our peace of mind. That's why we chose two of the biggest players in the online payment industry - Squareup and PayPal. Both meet Payment Card Industry Data Security Standards.

If you want more information on their security, please visit PayPal's and Square's Australian security policy statements.

Our e-commerce solution is Ecwid. Ecwid is a PCI DSS-validated Level 1 Service Provider. This is the highest international standard for secure data exchanges for online stores and payment systems.

We do not collect your credit card details. We no longer take phone credit card orders, as most consumer protection advocates advise against them. Your credit card details go directly to a payment processing company; in our case, we use Squareup and PayPal. Data is not held on our servers, nor is data transferred. It is added directly to Squares and PayPal's servers.

We are happy to invoice you and provide our bank details for a bank transfer. We will send your order when we see the payment in our bank account.