Privacy Policy

Who we are

TCG & Tabletop Printworks is operated by Josh Swanson, trading as "TCG & Tabletop Printworks", a sole trader based in the United Kingdom at 16 Cotherstone Court, Sunderland, SR3 1NJ. For any privacy question, contact us at customerservice@tcgprintworks.co.uk.

As a sole trader we are the "data controller" for the personal data described below - we decide what's collected and why, and we're legally responsible for it.

What we collect

Depending on how you use the site, we may collect:

• Name, email address, and delivery address, when you place an order or create an account
• Order history, and any cards/decklists you submit for playtest printing or selling to us
• Your IP address, kept briefly for fraud prevention and to stop abuse of forms and search tools
• Messages you send us via the contact form or WhatsApp
• Your email address, if you sign up for restock/sale alerts
• Custom artwork you upload for playtest printing

We never see or store your full card/payment details - checkout is handled entirely by Stripe (see "Who we share data with" below).

How we use it, and our legal basis

• Fulfilling your order (processing payment, printing, packing, shipping, and emailing you updates) - necessary to perform our contract with you.
• Customer accounts (order history, loyalty points, sign-in) - necessary to perform our contract with you.
• Responding to enquiries you send us - necessary to perform our contract with you, or our legitimate interest in answering questions from prospective customers.
• Fraud and abuse prevention (e.g. rate-limiting login attempts and form submissions) - our legitimate interest in keeping the site and your account secure.
• Marketing emails (restock/sale alerts) - only with your consent, given when you sign up. You can unsubscribe at any time via the link in any marketing email.

Who we share data with

We use a small number of trusted service providers to run the site, each acting as a data processor on our behalf:

• Stripe - payment processing. Stripe receives your payment and billing details directly; we never see your full card number.
• Resend - sends transactional emails (order confirmations, sign-in links, etc.) on our behalf.
• Cloudflare (R2) - stores product photos and uploaded custom artwork.
• Neon - hosts our database.
• Vercel - hosts the website itself.

Some of these providers may process data on servers outside the UK/EEA. Where that happens, they do so under their own standard contractual safeguards - we don't sell or otherwise share your data with anyone for marketing purposes, and we never share it with anyone beyond what's needed to run the site and fulfil your order.

How long we keep it

We keep order records for as long as needed for accounting and tax purposes (currently at least 6 years, per UK requirements). Sign-in links expire after 15 minutes whether used or not; account sessions expire automatically after 30 days of inactivity. If you ask us to delete your account, we'll remove what we can while still retaining anything we're legally required to keep (e.g. past order/payment records).

Cookies & local storage

We only use cookies and browser storage that are strictly necessary for the site to work - keeping you signed in, remembering what's in your cart, and remembering a referral code if you followed a friend's link. We don't use any third-party advertising or analytics cookies, so there's nothing here that needs a cookie consent banner under UK rules.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you, and get a copy of it
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to what we're legally required to retain)
• Object to, or ask us to restrict, certain processing
• Withdraw consent for marketing emails at any time
• Complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you're unhappy with how we've handled your data

To exercise any of these, email customerservice@tcgprintworks.co.uk.

Children

This site isn't directed at children, and we don't knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time - the "last updated" date at the top will always reflect the latest version. If you have any questions, get in touch at customerservice@tcgprintworks.co.uk.