1. Who We Are
TCG Tavern is a UK-based Pokémon trading card shop operating at tcgtavern.shop. When we refer to "we", "us" or "TCG Tavern" in this policy, we mean the operator of this website.
Contact: Admin@tcgtavern.shop
2. What Data We Collect
When you place an order:
- Name and email address
- Billing and shipping address
- Phone number (optional)
- Payment information (processed securely by our payment provider, we do not store card details)
- Order history
When you create an account:
- Username and password (encrypted)
- Email address
When you browse our site:
- IP address and browser information
- Pages visited and time spent on site (via cookies, see Section 6)
When you contact us or sign up to our newsletter:
- Name and email address
- Message content
3. How We Use Your Data
- To process and fulfil your orders
- To send order confirmations and shipping updates
- To respond to your enquiries
- To send marketing emails (only if you've opted in)
- To improve our website and services
- To comply with legal obligations
4. Legal Basis for Processing
We process your data under the following legal bases (UK GDPR):
- Contract: to fulfil your order
- Legitimate interests: to improve our services and prevent fraud
- Consent: for marketing emails (you can unsubscribe at any time)
- Legal obligation: for accounting and tax records
5. Data Sharing
We do not sell your data. We share it only where necessary:
- Payment processors (e.g. Stripe, PayPal) to process transactions
- Postal carriers (Royal Mail) to deliver your order
- Email service providers to send transactional and marketing emails
- Legal authorities if required by law
6. Cookies
We use cookies to keep your shopping cart working, remember your preferences, and understand how visitors use our site. You can control cookies via your browser settings.
7. Data Retention
We retain order data for 7 years for tax/accounting purposes. Account data is retained as long as your account is active. You can request deletion at any time.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing
- Data portability
- Lodge a complaint with the ICO (ico.org.uk)
To exercise any of these rights, email us at Admin@tcgtavern.shop.
9. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of our site after changes constitutes acceptance.