We collect only what we need to take your order, make up your mounted medals and keep your account working. We never sell your data and we do not store credit card numbers. You can switch off optional cookies at any time using the panel below, though a small number of platform cookies described in the Cookies section are set regardless. Our customer records are stored in Australia. Some services we use to run the store and our systems operate overseas, and we list each of them below.
Who we are
Rogaloff Militaria (ABN 37 128 621 830) is an Australian supplier of replica medals, ribbons, insignia and mounting services, trading since 2006 from Brisbane, Queensland. In this policy, "we", "us" and "our" mean Rogaloff Militaria.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we deal with customers in the United Kingdom or the European Union, we also apply the standards of the UK GDPR and EU GDPR.
What we collect
We collect the information you give us and a limited amount of technical information generated when you use the site.
You give us
- Contact and delivery details — name, email, phone, billing and shipping address.
- Order details — items ordered, sizes, mounting instructions, engraving text and any notes you add.
- Account details — password (stored hashed), saved addresses, order history.
- Trade account details — where you apply for a wholesale account: business name, ABN, trading history and referee information.
- Orders from other channels — if you buy from us on eBay, by phone, by email or on invoice, we record the order and your contact details in our customer records system alongside any website orders, so we can see your full history with us.
- Contact history — notes of calls, emails and messages between us, so whoever helps you next knows the background.
- Mounting details — for mounted medals and ribbon bars, the medals in the group, their order and any instructions. Where you tell us about entitlement or service history, that information is used only to fulfil the order.
We collect automatically
- IP address, browser and device type, operating system.
- Pages visited, referring page, time on site and interaction events.
- Cookie identifiers, as described in the Cookies section.
We collect from public sources
- Business details for trade prospects — where a business such as a medal mounter, framer or militaria retailer may be interested in a trade account, we may record its business name, ABN, published address, phone, email, website and social media page from public sources such as the Australian Business Register, the business's own website and public directories. For sole traders, some of this may be personal information. When we first contact you we will tell you who we are and how to tell us not to contact you again, and we will remove your details if you ask.
We do not seek sensitive information as defined by the Privacy Act. If you volunteer it (for example in a message about a family member's service), we use it only to answer your enquiry.
How we use it
- To process, pack and deliver your order, and to handle returns.
- To quote, schedule and complete mounting and framing work.
- To operate your account, including wholesale pricing tiers where you hold a trade account.
- To keep a single customer record that brings together your orders across our website, eBay and direct sales, our contact history with you and any follow-ups we have scheduled.
- To let trade account holders know before their pricing tier is due to change.
- To contact businesses that may be interested in a trade account. Each message is written and sent individually by us, never automatically.
- To answer enquiries and provide customer support.
- To meet tax, consumer law and record-keeping obligations.
- To detect and prevent fraud and misuse of the site.
- With your consent, to send occasional news about new releases and trade offers. Every email carries an unsubscribe link.
- If you buy from us on eBay, we contact you only through eBay's own messaging and promotional tools, and we do not use your details from eBay for our own email marketing.
- With your consent, to measure how the site is used so we can improve it.
Automated decisions
Trade pricing tiers are calculated automatically from your purchasing over the qualifying period, and a change of tier changes the prices you see. We do not make any other decisions about you automatically. If you think your tier is wrong, email info@rogaloff.com and a person will review it.
Who we share it with
We do not sell or rent personal information. We disclose it only to the parties below, and only to the extent needed for them to do their job.
| Recipient | Purpose | Location |
|---|---|---|
| BigCommerce | Ecommerce platform hosting this store | United States / Australia |
| Stripe | Card authorisation, settlement and payment fraud prevention | United States / Australia |
| PayPal | Payment processing where you choose PayPal at checkout | United States / Australia |
| Afterpay | Buy-now-pay-later assessment and instalment processing where you choose Afterpay at checkout | Australia |
| Cloudflare | Content delivery, bot filtering and denial-of-service protection | Global edge network |
| Australia Post and courier partners | Delivery and tracking | Australia |
| Amazon Web Services | Application hosting and image storage | Sydney, Australia |
| Salestio / eBay | Order sync for eBay marketplace orders | European Union / United States |
| Amaka and Xero | Accounting and invoicing | Australia / New Zealand |
| Synder | Posting sales from the store and eBay into our accounts | United States |
| Supabase | Database hosting for our customer records system | Sydney, Australia |
| Vercel | Runs the application our staff use to view customer records; records are not stored there | Sydney, Australia |
| Render | Runs our trade pricing service and the scheduled tasks that sync orders and prepare internal reports; records are not stored there | Singapore |
| Resend | Email delivery for account notifications and internal reports | United States |
| Anthropic | AI tools that help us research businesses that may want a trade account and draft messages, which we review before sending | United States |
| Professional advisers and regulators | Where required or authorised by law | Australia |
This list reflects our current suppliers as at 13 October 2026 and is updated when they change.
Payments & security
Rogaloff Militaria does not store financial data and does not keep credit card numbers on file. Card details are captured and processed by our payment providers under PCI DSS, and all pages on this site are served over TLS encryption.
We restrict access to customer records to staff who need it, and we review our systems and access regularly. Signing in to our customer records system requires a password and a code from an authenticator app. No transmission over the internet can be guaranteed completely secure. If a data breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
Overseas recipients
Where your records are kept. Our customer records system, including order history, contact history and trade account details, is stored in Sydney, Australia.
Overseas processing. Some services we use operate outside Australia. Some keep their own copy of the information they need to do their job, such as our ecommerce platform, payment providers and eBay. Others handle your information outside Australia only while carrying out a task, such as running a scheduled sync or delivering an email; they may keep short-term technical logs as part of their service, but they are not where we keep your records. The countries involved are principally the United States, the European Union and Singapore, as shown in the table above.
Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through contractual terms and standard data protection clauses where applicable.
How long we keep it
- Order and tax records — at least seven years, as required by Australian tax law.
- Customer records (account details, contact history, notes, trade tier history and mounting details) — at least seven years after your last order or contact with us.
- Trade prospect records (business details collected from public sources) — at least seven years after our last contact.
- Marketing consent records — until you unsubscribe, plus a suppression record so we do not contact you again.
- Analytics data — up to 14 months in aggregate form.
We do not currently delete records automatically once these periods end, so some information may be kept longer. You can ask us at any time to delete information we are not legally required to keep, and we will delete or de-identify it. If eBay tells us you have closed your eBay account, we remove your name and contact details from our records and keep only the order and tax figures.
Access & correction
You can ask us to:
- give you a copy of the personal information we hold about you;
- correct anything that is wrong or out of date;
- delete information we no longer need to keep;
- stop sending you marketing;
- withdraw your cookie consent, using the panel above.
Email us at privacy@rogaloff.com. We will verify your identity and respond within 30 days. Access is free; if a request is complex we will tell you about any cost before we proceed. If we refuse a request, we will explain why in writing.
Complaints
If you believe we have mishandled your personal information, contact us first at privacy@rogaloff.com. We will acknowledge your complaint within five business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes to this policy
We update this policy when our practices or suppliers change. The version number and date at the top of the page tell you which version applies. If a change materially affects how we use your information, we will ask you to review your cookie choices again.
Contact us
ABN 37 128 621 830
Brisbane, Queensland, Australia