Privacy Policy

Tcg-PokeShop operates from 30 N Gould St, Ste R, Sheridan, Wyoming 82801, United States. This policy explains what personal information we collect and how it is used. Contact for any privacy request: support@tcg-pokeshop.site.

1. Personal Information We Collect

• Order information: name, email address, shipping address, products ordered.
• Payment information: collected and processed by Stripe — we never store your full card details. We only receive a payment confirmation.
• Support communications: messages you send us via the contact form, phone, or email.

2. Customer Accounts

Tcg-PokeShop does not currently offer customer accounts. Orders are placed without registration; no account passwords are stored.

3. How We Use Your Information

• Process and fulfill your orders.
• Send order confirmations and shipping updates.
• Provide customer support and handle returns/refunds.
• Meet legal, accounting, and tax obligations.

We do not sell your personal information.

4. Payment Processing — Stripe

Payments are processed externally by Stripe, an independent payment service provider. Your payment data (card number, CVV, billing details) is transmitted directly to Stripe over an encrypted connection under PCI-DSS compliant procedures. Stripe acts as an independent data controller for the payment transaction; we receive only a payment confirmation and reference. See Stripe's own privacy policy for how Stripe handles payment data.

5. Cookies & Analytics

Tcg-PokeShop uses a single, strictly necessary session cookie (PHPSESSID) that stores only your cart contents while you browse.

We also use Google Analytics to measure how visitors use the site (pages viewed, traffic sources) so we can improve it. Google Analytics sets additional cookies and may transfer data to Google servers. You can opt out at any time via the cookie banner or by blocking analytics cookies in your browser.

6. Third-Party Services

• Stripe: payment processing (your payment data goes directly to Stripe, never to us).
• Fedex: receives the shipping address needed to deliver your order.

7. Data Retention

Order records are retained as long as required for legal, accounting, and tax purposes, then deleted or anonymized.

8. Website Security

The site is served over encrypted connections (HTTPS), uses prepared database statements, validates all inputs, and restricts access to the order database. Payment security is delegated to Stripe's PCI-DSS compliant platform.

9. Your Privacy Rights

Depending on your state of residence (including California under the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, and to opt out of its sale or sharing (we do not sell personal information). To exercise any right, contact support@tcg-pokeshop.site. We respond within the timeframe required by applicable law.

10. Changes to This Policy

We may update this policy to reflect legal or functional changes. The "Last updated" date above indicates the current version.