Privacy Policy
This policy explains what personal data we collect, why we use it, and how we keep it safe when you browse or buy from The Tarot Store.
Who We Are
The Tarot Store is the controller of the personal data you provide when you place an order, contact us, or sign up for updates. If you have any privacy questions or would like to exercise your data rights, email sales@theguildedveil.co.uk or use our contact page.
What We Collect
Depending on how you use the site, we may collect your name, email address, phone number, delivery address, order details, and any messages you send us. We also keep basic technical and security logs that help us operate the website and investigate problems.
How We Use Your Data
We use your information to process and deliver orders, provide customer support, issue refunds, prevent fraud, meet legal and tax obligations, and improve the service we offer. Our main lawful bases under UK GDPR are contract, legal obligation, and legitimate interests. If we ever send optional marketing, we will only do so with the consent required by law.
Payments and Stripe
Card and wallet payments are processed securely by Stripe. We do not store full card numbers on our own systems. Stripe acts as a payment processor for payment-related data and may process personal data needed to prevent fraud, complete payments, and comply with financial regulations. You can read more in Stripe’s privacy policy.
Sharing Data
We share data only where needed to run the shop, such as with payment providers, hosting providers, delivery partners, and professional advisers. We require service providers to protect personal data and use it only for appropriate business purposes.
Retention
We keep order and accounting records for as long as needed for tax, accounting, and legal compliance. Customer support messages and routine operational records are kept only for as long as necessary for the purpose they were collected for.
Your Rights
Subject to applicable law, you may ask for access to your personal data, correction of inaccurate information, deletion, restriction, objection, or data portability. You also have the right to complain to the Information Commissioner’s Office if you believe your personal data has been handled unlawfully.
Cookies and Site Security
We use essential technologies required to run the storefront and keep it secure. If we introduce non-essential analytics or marketing cookies, we will update this policy and add any consent tools required under UK PECR and UK GDPR.