Your data, protected

Privacy Policy

Last updated: 24 August 2026

1. Introduction

TCG Wagon ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or make a purchase from us. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

TCG Wagon is a UK-based online retailer of trading card games and collectibles. For data protection purposes, we are the "data controller" of the personal information you provide to us.

3. What Data We Collect

We may collect and process the following personal data about you:

  • Identity and contact data: name, billing and delivery address, email address and telephone number.
  • Transaction data: details of products you have purchased and payment information (processed securely by our payment providers).
  • Technical data: IP address, browser type and version, time zone setting, operating system and platform.
  • Usage data: information about how you use our website, products and services.
  • Marketing and communications data: your preferences in receiving marketing from us.

4. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders, including payment, shipping and delivery.
  • To communicate with you about your order, account or enquiries.
  • To provide customer support and handle returns or complaints.
  • To send marketing communications (where you've consented or we have a legitimate interest).
  • To improve our website, products and services.
  • To comply with our legal obligations.
  • To detect and prevent fraud or other illegal activities.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

  • Contract: processing is necessary to fulfil our contract with you.
  • Legal obligation: processing is necessary to comply with the law.
  • Legitimate interests: processing is necessary for our legitimate business interests.
  • Consent: you have given us explicit consent (e.g. for marketing emails).

6. Data Sharing

We do not sell your personal data. We may share your data with trusted third parties who help us run our business, including:

  • Payment processors (e.g. Stripe, PayPal) to process your payments.
  • Delivery and courier services to dispatch your orders.
  • IT service providers and website hosts.
  • Marketing and email service providers (only with your consent).
  • Professional advisers such as lawyers, accountants and insurers.
  • Regulatory bodies or law enforcement if required by law.

All third parties are contractually bound to keep your data secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting or reporting requirements. Typically, we keep order records for six years in line with UK tax laws.

8. Your Rights

Under UK data protection law, you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request that we correct any inaccurate or incomplete data.
  • Erasure: request that we delete your personal data in certain circumstances.
  • Restriction: request that we restrict the processing of your data.
  • Data portability: request a copy of your data in a structured format.
  • Objection: object to our processing based on legitimate interests or direct marketing.
  • Withdraw consent: where we rely on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@tcgwagon.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Cookies

We use cookies and similar technologies to improve your browsing experience, analyse website traffic and personalise content. For more information, please see our Cookie Policy.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction. All payment transactions are encrypted using SSL technology.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@tcgwagon.com.