Privacy policy
Last updated 21 September 2026
Goldionaire is in preview and nothing is on sale yet. This page is being finalised with our legal advisers and will be complete before the first sale.
1. Who is responsible
Goldionaire decides how your personal data is used on this site. Contact: the contact address published on this site before launch.
2. What we collect
Your email address when you sign in. The pieces you hold, claim and buy. When you place an order: your name, phone number, shipping and billing address. Basic technical data your browser sends, such as IP address and device type, which we use for security and to prevent abuse.
3. What we do not collect
We never see or store your full card number. Payments are handled by our payment provider. We do not run advertising trackers on this site at present. If that changes, this policy will be updated and you will be asked for consent where the law requires it.
4. Why we use it
To sign you in, take and deliver your orders, keep the authentication record for each piece, run the reward promotion under its official rules, prevent fraud and meet our legal obligations such as tax records. We send service emails about sign-in, orders and draws. Marketing emails are sent only if you ask for them and you can stop them at any time.
5. Draws and winners
Published draw records use entry codes, not names. A winner's identity is never published without that person's consent.
6. Who we share it with
Service providers who process data for us: our database and sign-in host (Supabase, servers in Singapore), our website host (Vercel), our email delivery provider (Resend), our payment provider, and couriers for delivery. They may process data outside your country under appropriate safeguards. We do not sell personal data.
7. Cookies
We use only the cookies needed to keep you signed in and keep the site secure. They cannot be switched off without breaking sign-in.
8. How long we keep it
Account data for as long as your account is open. Order, ownership and draw records for as long as needed to authenticate pieces and to meet legal and tax requirements. Expired holds are kept for a short period for fraud prevention.
9. Your rights
Depending on where you live, you can ask for a copy of your data, ask us to correct or delete it, object to some uses and complain to your data protection authority. Write to the contact address published on this site before launch. Some records, such as completed orders, must be kept by law even after an account is closed.
10. Children
This site is for adults. We do not knowingly collect data from anyone under 18.
11. Changes
We will post any changes here and update the date at the top.