Privacy Policy

Effective date: 1 April 2026 · Last updated: 1 April 2026

The short version: We collect information you give us when you place an order, create an account, or browse our store. We use it to fulfil your orders and improve your shopping experience. We do not sell your personal information. Ever.

1. Who we are

Ghost42 Trading Cards (ghost42-trading-cards.myshopify.com) is a US-based online store specialising in Sorcery: Contested Realm and Magic: The Gathering singles. When this policy says "we", "us", or "Ghost42", it means us.

Questions about this policy? Email us at ghost42tcg@gmail.com.

2. What information we collect

We collect only the information we need to run our store and serve you well.

When you place an order:

Name, email address, shipping address, and phone number
Payment details — these are handled securely by our payment processor (Shopify Payments / Stripe) and are never stored on our servers
Order contents, value, and purchase history

When you create an account or contact us:

Your name and email address
Any messages or information you voluntarily share with us

Automatically when you browse our store:

IP address and approximate location
Browser type and device information
Pages visited, products viewed, and time spent on the store
Referring website (e.g. if you clicked a link from another site)
Cookies and similar tracking technologies (see Section 5)

3. How we use your information

To process and fulfil your orders — including sending order confirmations, shipping updates, and handling returns or disputes
To communicate with you — answering questions, resolving issues, and sending transactional emails related to your purchase
To improve our store — understanding how customers browse and shop so we can offer a better experience
To prevent fraud and ensure security — detecting and blocking suspicious activity to protect our customers
To comply with legal obligations — such as tax record-keeping and applicable US federal and state laws

We do not sell your personal information to third parties. We do not send marketing emails unless you have explicitly opted in, and you can unsubscribe at any time.

4. Sharing your information

Shopify Inc. — our e-commerce platform, which stores and processes order data on our behalf. Shopify's privacy policy →
Payment processors (Shopify Payments / Stripe) — to securely process transactions. They receive only what is needed to complete your payment
Shipping carriers (e.g. USPS, UPS, FedEx) — to deliver your order. We share only your name and shipping address
Analytics providers (e.g. Google Analytics, if enabled) — to understand store traffic. Data is anonymised where possible
Legal authorities — if required by applicable law, court order, or to protect the rights and safety of Ghost42 or its customers

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

5. Cookies

Essential cookies: Required for the shopping cart, checkout process, and account login to function correctly
Analytics cookies: Help us see which pages are visited and how customers move through the store
Preference cookies: Remember settings like currency or previously viewed items

You can manage or disable cookies in your browser settings at any time. Disabling essential cookies may prevent the checkout from working correctly.

6. Your privacy rights

California residents (CCPA / CPRA): You have the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, the right to opt out of the sale of your personal information (we do not sell it), and the right not to be discriminated against for exercising these rights. To submit a request, contact us at ghost42tcg@gmail.com.

Regardless of where you live, you can always:

Ask us what personal information we hold about you
Request that we correct inaccurate information
Request deletion of your account and associated data, subject to any legal retention requirements
Unsubscribe from marketing emails via the link in any email we send

To make any of these requests, email ghost42tcg@gmail.com. We will respond within 30 days.

7. Data retention

We keep your order and account data for as long as necessary to provide our services and comply with legal obligations — US tax law generally requires financial records to be kept for at least 3–7 years. Once data is no longer needed, we delete or anonymise it.

8. Data security

We take reasonable steps to protect your personal information from unauthorised access, loss, or misuse. Our store uses SSL/TLS encryption for all data transmitted between your browser and our site. Payment information is processed directly by our payment provider and is never stored on our systems.

No method of transmission over the internet is completely secure. If you believe your information has been compromised, please contact us right away.

9. Children's privacy

Our store is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly in accordance with the Children's Online Privacy Protection Act (COPPA).

10. Third-party links

Our store may contain links to third-party websites such as TCGplayer or card game publishers. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.

11. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or with a notice on the store.