Rare Find Cards and Games (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or interact with us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Rare Find Cards and Games is a UK-based retailer selling trading cards, games, and related products.

For the purposes of data protection law, we are the “data controller” of the personal data you provide.

Personal Data We Collect

We may collect and process the following personal data:

• Identity information (such as name and title)
• Contact information (such as email address, billing address, and delivery address)
• Account information (username, password, order history)
• Transaction information (payment details, purchases made)
• Technical data (IP address, browser type, device information)
• Usage data (pages visited, interactions with the website)
• Communication data (emails or messages you send to us)

We do not knowingly collect data from children under the age of 16.

How We Collect Your Data

We collect personal data in the following ways:

• When you place an order or create an account
• When you contact us via forms, email, or social media
• When you subscribe to marketing communications
• Through cookies and similar technologies
• Automatically via website analytics and server logs

Lawful Bases for Processing

We process personal data only where we have a lawful basis to do so, including:

• Contract – to fulfil your order and provide services
• Legal obligation – to comply with accounting and legal requirements
• Legitimate interests – to improve our website and services
• Consent – for marketing communications and optional cookies

How We Use Your Personal Data

We use your personal data to:

• Process and deliver orders
• Manage customer accounts
• Communicate with you regarding orders or enquiries
• Provide customer support
• Improve website functionality and user experience
• Detect and prevent fraud
• Comply with legal and regulatory obligations

Marketing Communications

We may send marketing emails only where you have given explicit consent or where permitted under UK law.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in emails
• Contacting us directly
• We will never sell your personal data to third parties.

Cookies & Tracking Technologies

We use cookies and similar technologies to improve website performance and user experience.

Details of how cookies are used can be found in our Cookie Policy. You can manage your cookie preferences via our cookie banner or your browser settings.

Sharing Your Personal Data

We may share your personal data with trusted third parties where necessary, including:

• Payment processors
• Delivery and courier services
• Website hosting providers
• Analytics and performance tools
• Professional advisers (such as accountants or legal advisers)

All third parties are required to respect the security of your data and process it in accordance with the law.

International Data Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure servers and encryption
• Restricted access to personal data
• Regular security reviews

Despite our efforts, no method of transmission over the internet is completely secure.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

Order and transaction records may be retained for up to six years to comply with UK tax and accounting obligations.

Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Object to processing
• Restrict processing
• Request data portability
• Withdraw consent at any time

To exercise these rights, please contact us via the details on our website.

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes.

Any updates will be posted on this page and will take effect immediately upon publication.

Contact Us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us using the details provided on our website.