This privacy policy explains how Magic TCG collects, uses and protects your personal information when you visit magictcg.co.uk, place an order, create an account or get in touch with us. We are committed to looking after your information and to being clear about what we do with it.
Last updated: 6 November 2026
Who we are
Magic TCG is a UK-based online shop selling trading cards and collectibles. For the purposes of UK data protection law, Magic TCG is the controller of the personal information described in this policy.
If you have any questions about this policy or your information, email us at sales@magictcg.co.uk or use our contact page.
The information we collect
When you place an order
To process and deliver your order we collect your name, billing and delivery address, email address, phone number and the details of what you have ordered. Payments are handled securely by our payment providers. We do not see or store your full card details.
When you create an account
If you create an account, we store your name, email address, password (in encrypted form), saved addresses and order history, so you can track orders and check out more quickly.
When you contact us
When you use our contact form, we collect your name, email address, your phone number if you choose to give it, and your message. We also use your IP address for a short time to stop spam and limit the number of messages that can be sent. If you email us, chat with us using the live chat on our website or message us on WhatsApp, we receive the details and messages you choose to send.
When you browse our website
Like most websites, our site uses cookies and collects basic technical information, such as your browser type and the pages you visit, to keep the site working properly and secure. See the cookies section below for more detail.
How we use your information
- To process your orders, including pre-orders, deliveries, cancellations, returns and refunds.
- To manage your account if you have one.
- To reply to your questions and provide customer support.
- To send you important messages about your orders, such as confirmations and delivery updates.
- To keep our website safe, prevent fraud and stop spam.
- To meet our legal obligations, such as keeping records for tax and accounting purposes.
- To send you news and offers, but only if you have agreed to receive them. You can unsubscribe at any time.
Our lawful bases for using your information
Under UK data protection law we must have a lawful basis for using your personal information. We rely on:
- Contract: when we need your information to fulfil an order or provide a service you have asked for.
- Legal obligation: when we must keep information by law, such as order and payment records.
- Legitimate interests: when we use information in ways you would reasonably expect, such as answering enquiries, preventing fraud and improving our website.
- Consent: when you have agreed to something, such as receiving marketing emails. You can withdraw your consent at any time.
Who we share your information with
We never sell your personal information. We only share it with trusted service providers who help us run our shop, and only as much as they need to do their job:
- Payment providers, to take payments and issue refunds securely.
- Delivery companies, to deliver your orders.
- Website hosting and email providers, to run our website and send order and contact emails.
- Live chat and messaging services, if you choose to chat with us through the live chat on our website or on WhatsApp.
We may also share information if the law requires it, for example with HM Revenue and Customs or the police, or to protect our rights and our customers.
International transfers
Some of our service providers may store or process information outside the UK. When this happens, we make sure appropriate safeguards are in place, such as UK-approved contract terms, so your information stays protected.
How long we keep your information
- Order records: six years after the end of the financial year in which you ordered, as required for tax and accounting purposes.
- Account details: for as long as your account is open. You can ask us to close your account at any time.
- Contact messages: for as long as we need them to deal with your enquiry, and for up to two years afterwards in case you get in touch again.
- Marketing preferences: until you unsubscribe or ask us to remove you.
When we no longer need your information, we delete it securely.
Cookies
Cookies are small text files stored on your device when you visit a website. We use cookies that are needed to make our shop work, such as remembering what is in your basket, keeping you signed in to your account and keeping the checkout secure. Our live chat service also uses cookies so it can keep your conversation open as you move between pages.
You can block or delete cookies in your browser settings. If you block essential cookies, some parts of our website, such as the basket and checkout, will not work properly.
Keeping your information safe
Our website uses a secure, encrypted connection, and we limit access to your information to the people and services who need it. While no website can be completely secure, we take reasonable steps to protect your information from loss, misuse or unauthorised access.
Your rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is wrong or incomplete.
- Ask us to delete your information, where we do not need to keep it.
- Ask us to limit how we use your information.
- Object to us using your information, including for marketing.
- Ask us to transfer your information to another organisation, where this applies.
- Withdraw your consent at any time, where we rely on consent.
To use any of these rights, email us at sales@magictcg.co.uk. We will reply within one month. There is usually no charge.
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.
Children
Our shop is not intended for children under 13, and we do not knowingly collect their personal information. Orders should be placed by an adult. If you think a child has given us their information, please contact us and we will delete it.
Links to other websites
Our website contains links to other websites, such as the official sites of card game publishers. We are not responsible for how those websites handle your information, so please read their privacy policies.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a new date at the top.
Contact us
If you have any questions about this privacy policy or how we use your information, email sales@magictcg.co.uk or get in touch through our contact page.