Privacy policy

Privacy Policy
Last Updated: June 9, 2026
True TCG ("we", "us", or "our") operates this online store and website. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use our services, make a purchase, or otherwise communicate with us.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, True TCG is the Data Controller of your personal information.
Section 1 - Legal Basis for Processing Your Information
Under UK GDPR, we must have a valid legal basis to process your personal data. We rely on the following lawful bases depending on how you interact with our store:
  • Performance of a Contract: To process your payments, fulfill and ship your orders, and handle returns or customer service requests.
  • Legitimate Interests: To protect our business against fraud, secure our website, and optimize your shopping experience.
  • Consent: To send you promotional marketing emails or text messages (which you can withdraw at any time).
  • Legal Obligation: To comply with statutory accounting, tax reporting, and corporate record-keeping laws in the United Kingdom.
Section 2 - Personal Information We Collect
We collect information that identifies or can reasonably be linked to you. This includes:
  • Contact Details: Your full name, billing address, shipping address, telephone number, and email address.
  • Financial Information: Payment card details, transaction records, forms of payment, and payment confirmation tokens (processed securely via our payment gateway).
  • Account Information: Your username, password, account preferences, and settings.
  • Transaction History: Details of items you view, add to your cart, place on a wishlist, purchase, or return.
  • Communication Logs: Any information you include when contacting our customer support team.
  • Technical & Usage Data: Your IP address, device type, browser settings, and information about how you navigate our website, collected automatically via cookies.
Section 3 - How We Share Your Information
We do not sell your personal data. We only disclose your information to trusted third parties in the following circumstances:
  • Shopify: Our store is hosted on Shopify, which acts as our primary data processor to support core e-commerce functions.
  • Service Providers: With couriers, fulfillment centers, data analytics providers, and secure payment processors necessary to fulfill your orders.
  • Legal Compliance: When required by UK law enforcement, government bodies, or tax authorities (HMRC), or to protect the safety and legal rights of our business and customers.
Section 4 - International Data Transfers
Because our store is powered by Shopify, your personal information may be transferred to, stored, and processed outside of the United Kingdom (including in Canada and the United States). We ensure that any international transfers are protected by standard contractual clauses or adequacy decisions recognized under UK law to safeguard your data security.
Section 5 - Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy. For tax, accounting, and corporate audit purposes required by UK law, order transaction histories are securely archived for 6 years from the date of the transaction.
Section 6 - Your Rights Under UK GDPR
If you are located in the UK, you hold powerful statutory rights regarding your personal data. You have the right to:
  • Access: Request a copy of the personal data we hold about you (Subject Access Request).
  • Rectification: Request that we correct any inaccurate or incomplete data.
  • Erasure: Request that we delete your personal data (the "right to be forgotten"), subject to our legal retention requirements.
  • Restriction: Request that we restrict the processing of your data under specific conditions.
  • Data Portability: Request a transfer of your data to another service provider.
  • Object: Object to your data being processed for direct marketing at any time.
To exercise any of these rights, please contact our team directly at truetcguk@gmail.com.
Section 7 - Complaints
If you believe we have handled your data unlawfully, you have the right to lodge a formal complaint with the UK data regulator, the Information Commissioner's Office (ICO). However, we would appreciate the opportunity to resolve any concerns with you directly first.
Section 8 - Contact Us
For any questions regarding this Privacy Policy or our data practices, please contact us at:
True TCG
Email: truetcguk@gmail.com
Address: [Insert your Registered Business Address / Trading Address here]