Privacy Policy

Who we are

Olympus TCG ("we", "us") is a UK-based trading card retailer. This policy explains how we handle your personal data in line with UK GDPR and the Data Protection Act 2018.

What we collect

• Account data — name, email, password (stored as a secure hash)
• Order data — delivery/billing addresses, phone number, order history
• Payment data — processed entirely by Stripe; we never see or store your card number
• Marketing preferences — only with your explicit consent
• Usage data — anonymous analytics events (with consent) to improve the shop

How we use it

• Fulfilling and delivering your orders (contract)
• Order updates and service emails (contract)
• Marketing emails — only if you opt in, unsubscribe any time (consent)
• Fraud prevention and site security (legitimate interest)
• Tax and accounting records (legal obligation)

Who we share it with

Only what's needed to serve you: Stripe (payments), our email provider (transactional/marketing emails), Royal Mail/DPD (delivery), and our hosting providers. We never sell your data.

How long we keep it

Order records are kept for 6 years (HMRC requirement). Account data is kept until you delete your account. Marketing consent records are kept until you withdraw consent.

Your rights

You can request access, correction, deletion, portability, or restriction of your data, and object to processing. Request account deletion from your account settings or contact us. You may also complain to the ICO (ico.org.uk).

Cookies

See our cookie policy. Optional cookies never load before you consent.