Privacy Policy

This Privacy Policy explains how SCCollectables by KieranTCG ("we", "us") collects, uses, and protects your personal data when you use our website or buy from us. We are a data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

Order data: your name, email, delivery address, and order details, so we can fulfil your purchase.

Account data: our storefront does not require an account to shop. If you choose to create a checkout account, that facility is operated by our e-commerce platform (Wix), and your login email and password are collected and stored by Wix, not by us.

Payment data: handled by our payment provider; we do not store your full card number.

Contact data: information you give us through the contact or sourcing-request forms.

Technical data: IP address, browser type, and usage data collected via cookies and similar technologies.

We use your personal data to: process and deliver your orders; respond to enquiries and sourcing requests; send you order confirmations and updates; prevent fraud; and meet our legal and tax obligations (such as keeping VAT records).

Under the UK GDPR we rely on the following lawful bases: performance of a contract to fulfil your orders; legal obligation to meet tax and record-keeping duties; legitimate interests to operate and secure our business and prevent fraud; and consent for any optional marketing communications, which you can withdraw at any time.

We share your data only with trusted processors who help us run the store: our storefront platform (Base44), our e-commerce and checkout platform (Wix), our payment processor, and delivery couriers. Each processor acts on our instructions and is bound by appropriate confidentiality and security obligations. We do not sell your personal data to third parties.

Some processors may transfer or store data outside the UK. Where this happens, we rely on recognised safeguards such as the UK International Data Transfer Agreement or standard contractual clauses to ensure your data is protected to UK standards.

We keep your personal data only for as long as we need it to fulfil the purpose for which it was collected, including to meet legal, accounting, or tax requirements. Order records are typically retained for the period required by UK tax law (generally six years); other data is deleted or anonymised when no longer needed.

Under the UK GDPR you have the right to: access your personal data; rectify inaccurate data; erase your data in certain circumstances; restrict processing; data portability; object to processing; and withdraw consent at any time. To exercise any of these rights, email contactsccollectables@gmail.com.

If you have a concern about how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use cookies and similar technologies to operate the site, remember your cart, and understand how the site is used. You can control or delete cookies through your browser settings. Disabling some cookies may affect site functionality.

Our website is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

We take appropriate technical and organisational measures to protect your personal data, including encryption in transit and access controls. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent version.