Privacy Policy

1Information we collect

We only collect the information we need to operate as a regulated bullion dealer and to fulfil your orders. This includes:

• Account details – your name, email address, phone number and password when you register.
• Identity verification data – a copy or scan of your government-issued ID (passport or driver's licence) and a face check, which we are legally required to collect under Australian AML/CTF law.
• Order and delivery details – billing and shipping addresses, the products you buy, and your order history.
• Payment references – we accept payment by bank transfer. We record that a payment was made and its reference, but we do not store your full banking credentials.
• Technical data – your IP address, browser type and basic usage information collected automatically to keep the site secure and working.

2How we use your information

• To create and manage your account and give you access to wholesale pricing.
• To verify your identity as required by law before you can purchase.
• To process, prepare and deliver your orders, and to keep you updated on their status.
• To provide customer support and respond to your enquiries.
• To meet our legal, tax, record-keeping and regulatory obligations.
• To detect, prevent and address fraud, security issues and misuse of the site.

3Identity verification and AML/CTF

As a dealer in precious metals, MX Bullion operates under Australia's Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) obligations. We are required to verify the identity of our customers before they trade.

Identity checks are carried out through Didit, a secure independent verification provider. Your ID and face check are transmitted directly to Didit over an encrypted connection. We receive the verification result, and only collect and retain what we are required to under the law.

4Who we share your information with

We do not sell your personal information. We only share it where necessary to run our business or to meet our legal obligations, including with:

• Didit, our identity-verification provider, for KYC and fraud prevention.
• Delivery and logistics partners, to ship your insured orders (using only what is needed to deliver).
• Our bank and payment processors, to confirm and reconcile payments.
• Professional advisers and regulators, where required by law, court order, or to comply with our AML/CTF obligations.

5Cookies

We use cookies to keep you logged in, remember your preferences (such as currency), keep your cart working, and understand how the site is used so we can improve it. You can control or delete cookies through your browser settings, though some features of the site may not work correctly without them.

6How long we keep your data

We retain your personal and identity information only for as long as needed to provide our services and to satisfy our legal, tax and AML/CTF record-keeping obligations, which in some cases require us to keep records for a number of years after your last transaction. When information is no longer required, we securely delete or de-identify it.

7Data security

We take reasonable steps to protect your information from loss, misuse and unauthorised access, including encrypted connections, restricted access to sensitive data, and handling identity checks through a secure specialist provider. No method of transmission or storage is completely secure, but we work to keep your information protected.

8Your rights

You have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is inaccurate or out of date.
• Request deletion of your information, except where we are legally required to keep it.
• Raise a concern about how your data has been handled.

To exercise any of these rights, please contact us and we will respond promptly.

9Third-party links

Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies.

10Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the site after changes are posted means you accept the updated policy.