Privacy Policy
Who we are
BobsBeansTCG is a sole-trader online shop based in the United Kingdom, selling trading cards and related collectibles. This Privacy Policy explains how BobsBeansTCG ("we", "us", "our") collects and uses personal data when you visit this website or place an order through it. You can contact us at hello@bobsbeanstcg.com.
Data we collect
When you place an order we receive the information Stripe Checkout collects on our behalf: your name, email address, the shipping address you provide, and the details of the items you purchased (product titles, quantities, prices, and the Stripe session reference). We do not ever see or store your full card number or other payment credentials; those are handled directly by Stripe and are subject to their privacy policy. Browsing the site without placing an order does not require you to provide any personal data.
How we use your data
We use the data described above to: (a) fulfil the order you placed, including packing and dispatching it to the address you provided; (b) contact you about that specific order where necessary, for example to provide your Royal Mail tracking number or to notify you of a delay; and (c) keep the records we are legally required to keep as a UK business, including tax and accounting records. We do not use your personal data for marketing and we do not sell it to anyone.
Cookies and analytics
This site only loads analytics cookies if you have explicitly consented via the cookie notice shown on your first visit. If you decline, no analytics script is loaded and no analytics events are recorded for your session. Strictly necessary cookies, for example those Stripe Checkout uses to process your payment, are always active because the site cannot function without them. You can change your analytics choice at any time by clearing the site's storage in your browser, which will prompt the cookie notice to appear again.
Data retention
We keep order records (including the personal data attached to them) for the period required by UK tax and accounting law, which is currently at least six years from the end of the tax year in which the order was placed. After that period we delete or anonymise the records so they can no longer be linked to you. Email correspondence is kept only for as long as it is needed to resolve the matter it relates to.
Your rights
Under UK GDPR you have the right to ask us for a copy of the personal data we hold about you; to ask us to correct inaccurate data; to ask us to erase data we are no longer required to keep; to restrict or object to certain uses of your data; and to ask us to port your data to another service. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your personal data. Contacting us first will usually allow us to resolve the issue more quickly.
Contact
To exercise any of the rights above, to ask a question about this policy, or to raise a data-protection concern, please email us at hello@bobsbeanstcg.com. We aim to acknowledge data requests within five working days and to respond substantively within one calendar month, in line with UK GDPR requirements.