Who looks after your information
TJs Cardhouse is responsible for your personal information. Questions about your data? Email support@tjscardhouse.co.uk.
What we collect
- When you order: your name, email address, delivery address and the cards you bought.
- Payment: handled entirely by Stripe. We see that a payment was made, but never your full card details.
- When you email us: your email address and whatever you tell us.
We don't use advertising or tracking cookies, and we don't sell or share your information for marketing.
Why we use it
- To take payment, pack and post your order, and send you emails about it (order confirmation and "posted" email). This is needed to carry out our contract with you.
- To keep business and tax records, which the law requires.
- To send you a sign-in link when you ask for one on the Account page.
- To reply when you contact us.
Who we share it with
Only the services we need to run the shop, each of which handles your data under its own data protection terms:
- Stripe: card payments
- Royal Mail (Click & Drop): your name, address and email for postage labels and delivery
- Supabase: our order database (stored in London)
- Resend: sending order and sign-in emails
- Cloudflare: hosting the website and protecting it from abuse, which involves your IP address
Some of these companies are based outside the UK. Where your data leaves the UK, it's protected by the safeguards UK law requires.
How long we keep it
Order records are kept for 6 years, because UK tax law requires it. After that they're deleted.
Cookies and your browser
- Your basket is saved in your own browser (local storage) so it's still there when you come back. It never leaves your device until you check out.
- If you sign in to your account, a cookie keeps you signed in on that device for 30 days. Signing out removes it.
- Stripe sets its own cookies on the payment step to prevent fraud.
- Card pictures and set logos are loaded from TCGdex (assets.tcgdex.net) and the Pokémon TCG API (images.pokemontcg.io), so your browser connects to them to show the images.
These are all needed for the shop to work, so we don't ask for cookie consent.
Your rights
You can ask us for a copy of the information we hold about you, or ask us to correct it or delete it (unless we have to keep it for tax records). Just email support@tjscardhouse.co.uk. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.