Privacy Policy

1. Introduction

TCG Wagon ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or make a purchase from us. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

TCG Wagon is a UK-based online retailer of trading card games and collectibles. For data protection purposes, we are the "data controller" of the personal information you provide to us.

3. What Data We Collect

We may collect and process the following personal data about you:

• Identity and contact data: name, billing and delivery address, email address and telephone number.
• Transaction data: details of products you have purchased from us and payment information (processed securely by our payment providers).
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access our website.
• Usage data: information about how you use our website, products and services.
• Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

4. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders, including payment processing, shipping and delivery.
• To communicate with you about your order, account or enquiries.
• To provide customer support and handle returns or complaints.
• To send you marketing communications (only where you have given your consent or where we have a legitimate interest and the law allows us to do so).
• To improve our website, products and services.
• To comply with our legal obligations, such as tax and accounting requirements.
• To detect and prevent fraud or other illegal activities.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract: processing is necessary to fulfil our contract with you (e.g. delivering your order).
• Legal obligation: processing is necessary to comply with the law (e.g. tax and accounting records).
• Legitimate interests: processing is necessary for our legitimate business interests, provided your rights do not override those interests (e.g. fraud prevention, website improvement).
• Consent: you have given us explicit consent (e.g. for marketing emails).

6. Data Sharing

We do not sell your personal data. We may share your data with trusted third parties who help us run our business, including:

• Payment processors (e.g. Stripe, PayPal) to process your payments.
• Delivery and courier services to dispatch your orders.
• IT service providers and website hosts.
• Marketing and email service providers (only with your consent).
• Professional advisers such as lawyers, accountants and insurers.
• Regulatory bodies, law enforcement or other authorities if required by law.

All third parties are contractually bound to keep your data secure and use it only for the purposes we specify.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements. Typically, we keep order and customer records for six years in line with UK tax laws.

8. Your Rights

Under UK data protection law, you have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: request that we correct any inaccurate or incomplete data.
• Erasure: request that we delete your personal data in certain circumstances.
• Restriction: request that we restrict the processing of your data.
• Data portability: request a copy of your data in a structured, machine-readable format.
• Objection: object to our processing of your data based on legitimate interests or direct marketing.
• Withdraw consent: where we rely on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@tcgwagon.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Cookies

We use cookies and similar technologies to improve your browsing experience, analyse website traffic and personalise content. For more information, please see our Cookie Policy.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction. All payment transactions are encrypted using SSL technology.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at info@tcgwagon.com.