Privacy Policy
Last updated: 18 September 2026
1. Overview
This policy explains how Vintari Pty Ltd (ABN 48 657 836 729), trading as Vintari Gold Brokers (“Vintari”, “we”, “us”), collects, uses, holds and discloses personal information. It applies to our store at 889 South Road, Clarence Gardens SA 5039, to this website, and to our mail-in and telephone services.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We are also a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), which requires us to collect and keep certain information about our customers. Where those two things pull in different directions, the law we are bound by prevails, and we explain below what that means for you.
2. What we collect
The information we collect depends on what you are doing with us.
- Buying bullion online or in store: your name, delivery and billing address, email address, telephone number, and the details of your order.
- Selling metal to us, including by mail-in: your name, address, contact details, bank account details so we can pay you, and a description of the items you are selling.
- Identification: your date of birth and identity documents, such as a driver licence or passport, including images of them. For some transactions this is not optional, as explained in section 4.
- A photograph of your face, where identity is verified electronically. The check asks you to take a selfie, which is compared against the photograph on your identity document to confirm you are the person it belongs to.
- Payments: records of payments made to or by us. We do not store full card numbers.
- Using this website: your IP address, browser and device information, the pages you visit and, if you create an account, your account details.
- Taking out a loan with us: your identification and date of birth, details of the item you are using as security, and the record of the loan and any repayments. A date of birth is required for a loan and we cannot proceed without one.
- Visiting our store: our premises are under video surveillance for the security of customers, staff and stock. Recordings are kept for a short period and then overwritten, unless we need to retain one for an incident.
- Contacting us: the content of your enquiry and our correspondence with you.
We collect information directly from you wherever we can. If we collect it from someone else, such as an identity verification provider, we will tell you unless we are not permitted to.
3. Why we collect it, and what we do with it
- To supply, deliver and account for what you have bought.
- To value, purchase and pay for metal you sell to us.
- To provide and administer a loan, where you take one out with us in store.
- To verify who you are, and to meet our obligations under the AML/CTF Act.
- To administer your account and provide customer service.
- To detect and prevent fraud and misuse.
- To keep the records that tax, consumer and anti-money-laundering law require us to keep.
- To send you marketing about our products and prices, where you have asked for it. You can opt out at any time and every marketing email carries an unsubscribe link. Opting out of marketing does not affect the messages we must send you about an order.
4. Identity verification and our AML/CTF obligations
Precious metals dealing is a regulated activity. We are enrolled with AUSTRAC as a reporting entity, and the law requires us to verify the identity of customers in defined circumstances, to keep those records, and in some cases to report transactions to AUSTRAC.
A second obligation sits alongside it. Vintari is registered with South Australia Police as a second-hand dealer and pawnbroker, and must record the identity of every person it buys second-hand goods from.
In practice this means:
- Bullion, bought or sold: identification is required for transactions of $5,000 or more, whatever the payment method and whichever way the metal is going, and related transactions may be counted together. Below that value we do not normally collect it for bullion, though we will where the law requires us to.
- Online orders of $5,000 or more: identity verification is carried out electronically before dispatch.
- Jewellery, scrap and other second-hand goods you sell us: identification is required every time, regardless of value, in store or by mail-in. This one comes primarily from our second-hand dealer registration rather than the AML/CTF Act.
- We are required to report certain transactions to AUSTRAC. We may be prohibited by law from telling you when we have done so.
- We must keep identification records for seven years after our relationship with you ends, and transaction records for seven years from the transaction, even if you ask us to delete them.
The selfie check, and your consent
Where identity is verified electronically, the check includes a selfie compared against the photograph on your identity document. That comparison uses biometric information, which the Privacy Act treats as sensitive information and which we may only collect with your consent.
You are asked for that consent by our verification provider at the time, before the check begins, and you may decline. If you decline, we cannot verify you electronically, which means we cannot complete a transaction that requires identification; you are welcome to come into the store instead.
The selfie is held by our verification provider, iDenfy, not by us. We receive the outcome of the check and the details read from your document. We do not store the facial image or any biometric template.
5. Who we share it with
We do not sell your personal information. We disclose it only where we need to, and only to:
- Identity verification providers. We use iDenfy, based in Lithuania, to verify identity documents electronically. Information you submit for verification is processed by them on our behalf.
- Document processing. Images of identity documents are processed by Anthropic, in the United States, to read the details from them accurately. They are processed for that purpose only.
- Address lookup. When you type an address on this website, what you type is sent to Google to return suggestions. We send only the address text, never your name or order.
- Error monitoring. Our systems report technical faults to Sentry so we can fix them. These reports can incidentally contain personal information.
- Banks and payment providers, to take payment from you or to pay you.
- Delivery and logistics providers, including Australia Post and insured couriers, so your order can reach you.
- Technology suppliers who host this website and our systems, under agreements that require them to protect your information.
- Professional advisers such as our accountants, auditors and lawyers.
- Regulators and law enforcement, including AUSTRAC and the police, where the law requires or permits it.
6. Information sent overseas
Some of the providers above are located outside Australia, or store information outside Australia. In particular, our identity verification provider is in Lithuania, document processing and error monitoring are in the United States, and address lookup is provided by Google. Our own systems and website are hosted in Australia.
Where we disclose information overseas we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
7. How we keep it, and for how long
We hold personal information in secure electronic systems with access limited to staff who need it, and in secure physical storage at our premises where it is held on paper. Identity and transaction records are retained for seven years as described in section 4, then destroyed or de-identified. Where we are not required to keep information, we destroy it when it is no longer needed.
No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
8. Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Email contact@vintari.com.au or call 0468 464 808.
We will usually respond within 30 days. There is no fee for asking. We may refuse access in the limited circumstances the Privacy Act allows, and if we do we will tell you why.
You can ask us to delete your information, and we will where we can. We cannot delete records we are legally required to keep, including identification and transaction records within the seven-year retention period.
9. Cookies and website analytics
This website uses cookies to keep you signed in, remember the contents of your cart, and understand how the site is used so we can improve it. You can block or delete cookies in your browser settings, but parts of the site, including checkout, may not work properly without them.
10. Complaints
If you think we have mishandled your personal information, please tell us first at contact@vintari.com.au so we can try to put it right. We will acknowledge your complaint and respond within a reasonable time.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
11. Changes to this policy
We may update this policy from time to time. The current version is always on this page, with the date it was last updated at the top. Material changes will be brought to your attention where it is reasonable to do so.
12. Contact us
Vintari Pty Ltd (ABN 48 657 836 729), trading as Vintari Gold Brokers
889 South Road, Clarence Gardens SA 5039
Email: contact@vintari.com.au
Phone: 0468 464 808
