Privacy Policy & GDPR

Data Controller

CardArchiveTCG, based in Corinth, Greece, is the controller of the personal data processed through this store. For any privacy question or request you can reach us at info@cardarchivetcg.com.

Data We Collect

Account data: your name, email address, username and password. Order data: the products you buy, order value, delivery and billing address, phone number and order notes. Payment data: payments are processed by our payment provider — we never store full card numbers on our servers. Technical data: IP address, browser type, device information and pages visited, collected through cookies and similar technologies.

Why We Use Your Data

To process and deliver your orders, to send order confirmations and shipping updates, to handle returns and warranty requests, to answer support requests, to keep the accounting records required by law, to prevent fraud, and — only with your consent — to send you news and offers.

Legal Basis

We rely on contract performance to process and deliver your orders, on legal obligation for tax and accounting records, on our legitimate interest for fraud prevention and site security, and on your consent for marketing emails and non-essential cookies. You may withdraw consent at any time.

Cookies

We use strictly necessary cookies to keep your cart and session working, and — with your consent — analytics cookies to understand how the store is used. You can block or delete cookies in your browser settings at any time.

Who We Share Data With

Only where needed to fulfil your order: courier companies (ACS, Γενική Ταχυδρομική, BoxNow) receive your name, address and phone number; our payment provider receives the data needed to process your payment; our email provider sends transactional emails; our hosting and IT providers process data on our behalf under written agreements. We never sell your personal data.

Transfers Outside the EEA

Some of our service providers may process data outside the European Economic Area. Where this happens we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision, so your data stays protected to EU standards.

How Long We Keep Data

Order and invoice records are kept for at least five years to comply with Greek tax and accounting law. Account data is kept while your account is active. Marketing data is kept until you unsubscribe. Support messages are kept for as long as needed to resolve your request.

How We Protect Data

We use encrypted connections (HTTPS), access controls and strict internal permissions, so only the people who need your data to do their job can access it. While no online service can be perfectly secure, we review our safeguards regularly.

Your Rights Under GDPR

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where we are not legally required to keep it.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests, or to direct marketing at any time.
• Withdraw consent — unsubscribe from marketing emails whenever you like.

To exercise any of these rights, email us at info@cardarchivetcg.com. We reply within one month.

Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, dpa.gr). We would appreciate the chance to resolve the issue first.