Privacy policy

Who we are

Elite TCG runs this website and is responsible for your personal information (the “controller” under UK data protection law).

You can contact us at [email protected].

What we collect

• When you order: your name, email address, delivery address, what you bought and how you paid. Card details go straight to our payment provider, Stripe: we never see or store your full card number, only its brand and last four digits.
• When you contact us: your name, email address, your message and any order number you give.
• When you sign up for restock alerts: your email address and where on the site you signed up.
• When you order or send a message: your IP address, to help us spot fraud and abuse.

Your basket is kept in your own browser, not on our servers, until you check out.

Why we use it

UK data protection law says we need a lawful reason for each way we use your information:

• To take, send and help with your order, because it’s needed for our contract with you.
• To keep accounting and tax records, because the law requires it.
• To reply to your messages, because it’s in our legitimate interest to answer you.
• To send restock alerts and news, only if you asked for them, with your consent. You can withdraw it at any time.
• To keep the shop and our customers safe, for example by spotting fraudulent orders, because it’s in our legitimate interest.

Who we share it with

We never sell your information. We share it only with the companies that help us run the shop, and only what they need: Stripe, our payment provider, to take payment and prevent fraud; Royal Mail or another carrier, to deliver your order; the company that hosts this website; and our email provider, when we write to you. They may only use it to provide their service to us. We may also share information when the law requires it.

Some of these companies may handle information outside the UK. When they do, it’s protected by safeguards the law recognises, such as UK adequacy regulations or the ICO’s international data transfer agreement.

How long we keep it

• Orders: six years after the end of the financial year you ordered in, because the law requires us to keep accounting records.
• Checkouts that weren’t paid for: 30 days.
• Messages: 24 months after you send them.
• Restock alert sign-ups: until you unsubscribe or ask us to remove you.
• Copies of the emails we send you: 12 months.
• The record of your cookie choices: 24 months.

Your rights

You can ask for a copy of the information we hold about you, and ask us to correct it, delete it, stop or limit using it, or give it to you in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. To do any of these, email [email protected]. We’ll reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We’ll update this page if anything changes, and change the date at the top.

Cookies

Cookies are small files a website keeps in your browser. We use the ones the shop needs to work, which don’t need your agreement, and any others only if you agree. Here’s each one, and you can change your choice at any time.

Essential

Needed for the shop to work: your basket, the checkout and remembering these choices. They can’t be switched off.

Analytics

Show us how people use the shop, such as which pages are visited, so we can improve it.

Marketing

Let us and advertising partners show you relevant ads on other sites, and see how well they work.

Change your cookie choices