Privacy policy

Privacy Policy

Last updated: September 2026

At Tyneside TCG, we operate an online store specialising exclusively in individual Pokémon Trading Card Game singles.

Our website and online store are powered by Shopify, which provides the technology and services that allow us to operate our online store, process orders and provide customers with a secure shopping experience.

This Privacy Policy explains how Tyneside TCG collects, uses, stores and shares personal information when you visit our website, place an order, create an account, contact us, or otherwise interact with our Services.

If there is ever a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy will apply specifically to the processing of personal information.

Who We Are

For the purposes of applicable UK data protection legislation, Tyneside TCG is responsible for the personal information we process in connection with our website, online store and customer services.

Our registered office is:

Tyneside TCG
Collingwood Buildings
38 Collingwood Street
Newcastle Upon Tyne
NE1 1JF
United Kingdom

This is a non-customer-facing registered office and is not used as a customer returns address.

You can contact us about privacy or your personal information at:

contact@tynesidetcg.co.uk

Our Relationship with Aqua TCG

The Pokémon singles listed and sold through the Tyneside TCG website are owned by Aqua TCG.

Tyneside TCG operates the online store and manages the listing, sale, order processing, fulfilment and customer service associated with these products under its commercial arrangement with Aqua TCG.

Where personal information is processed as part of an order placed through the Tyneside TCG website, Tyneside TCG remains your point of contact for questions about your order and for exercising your data protection rights in relation to processing carried out by Tyneside TCG.

Where personal information needs to be shared with Aqua TCG for legitimate business, fulfilment, accounting, fraud prevention or other lawful purposes, this will be done in accordance with applicable data protection law.

Personal Information We Collect

When we refer to "personal information", we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with us, we may collect:

Contact Information

Name
Billing address
Delivery address
Email address
Telephone number
Other contact details you choose to provide

Order and Transaction Information

Products purchased
Order number
Order date and value
Delivery information
Returns, cancellations and refund information
Payment status
Transaction records

We do not normally receive or store your full payment card details. Payments are processed through Shopify Payments or other payment providers integrated with our store.

Customer Account Information

If you create an account, we may collect:

Account name
Email address
Login information
Saved preferences
Order history
Account settings

Communications

We may retain information contained in communications you send to us, including:

Emails
Shopify Inbox messages
Customer service enquiries
Information submitted through contact forms
Other communications relating to your orders or our Services

Technical and Usage Information

When you visit our website, information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Approximate location derived from technical information
Pages viewed
Products viewed
Referring website
Website interaction information
Cookies and similar technologies

How We Collect Personal Information

We may collect personal information:

Directly from you, when you place an order, create an account or contact us;
Automatically, when you browse or interact with our website;
Through Shopify and other service providers, when they process information on our behalf;
From payment, delivery and other service providers involved in fulfilling your order; and
From other sources where permitted by law, including where necessary for fraud prevention, security or legal compliance.

Why We Use Your Personal Information

We only process personal information where we have a lawful basis to do so under applicable data protection law.

The lawful basis will depend on what we are doing with your information.

Processing and Fulfilling Orders

We use your information to:

Process and fulfil orders;
Take and confirm payments;
Arrange delivery;
Provide order updates;
Handle cancellations and refunds;
Deal with customer service enquiries; and
Maintain accurate transaction records.

Our primary lawful basis for this processing is performance of a contract, because we need the information to fulfil your purchase.

We may also rely on a legal obligation where we are required to retain or disclose information under applicable law.

Customer Accounts

If you create an account, we use your information to maintain and administer your account and provide account-related features.

The lawful basis is generally performance of a contract or our legitimate interests in operating and managing our customer accounts.

Customer Service

We use information you provide to respond to questions, resolve problems and provide support relating to our Services and orders.

Depending on the circumstances, the lawful basis may be:

Performance of a contract;
Legitimate interests in providing customer support and managing our business; or
Legal obligation, where required to comply with applicable law.

Fraud Prevention and Security

We may use personal information to:

Detect and prevent fraudulent transactions;
Investigate suspicious activity;
Protect our website and systems;
Protect customers and our business; and
Prevent misuse of our Services.

The lawful basis for this processing is generally our legitimate interests in protecting our business, customers and Services, and where applicable, compliance with a legal obligation.

Legal and Accounting Requirements

We may process and retain personal information where necessary to:

Comply with tax and accounting requirements;
Comply with legal obligations;
Respond to lawful requests from authorities;
Establish, exercise or defend legal claims; or
Maintain appropriate business records.

The lawful basis may be legal obligation and/or legitimate interests, depending on the circumstances.

Marketing

Where permitted by law, we may use your contact information to send marketing communications about Pokémon singles, new stock, offers, promotions or Tyneside TCG updates.

Where consent is required, we will only send marketing communications where you have provided the necessary consent.

Where we rely on consent, you may withdraw it at any time.

You can unsubscribe from marketing communications using the unsubscribe option included in the communication or by contacting us.

Shopify and Our Online Store

Our website is hosted and powered by Shopify.

Shopify provides services that allow us to operate our online store, including functions relating to:

Website hosting;
Shopping carts;
Customer accounts;
Order processing;
Payments;
Security;
Analytics;
Customer communications; and
Other ecommerce functionality.

Information submitted through our website may therefore be processed by Shopify and its service providers in order to provide these services.

Shopify may process personal information in countries outside the UK. Where international transfers take place, appropriate safeguards are used where required by applicable data protection law.

For more information about Shopify's handling of personal information, please see Shopify's Privacy Policy.

Shopify Inbox and Online Chat

We use Shopify Inbox to communicate with customers through our website.

If you contact us through online chat, the information you provide may be processed by Shopify to deliver the chat service and help us respond to your enquiry.

Customers should avoid providing unnecessary sensitive personal information through online chat.

Chat information may be retained as part of our customer service records where necessary for legitimate business purposes, order support, fraud prevention or legal compliance.

Payment Information

Payments made through our website are processed using Shopify Payments and/or other payment providers made available through Shopify.

Payment providers may collect and process payment information such as card details, billing information and transaction information.

Tyneside TCG does not normally have access to your complete payment card number or security code.

Payment providers may process your information in accordance with their own privacy policies and applicable legal requirements.

Delivery Information

We share the information necessary to fulfil and deliver your order with the relevant delivery or postal service.

This may include:

Name;
Delivery address;
Contact details; and
Order or delivery reference information.

We only provide the information necessary to fulfil the delivery or resolve delivery-related issues.

Sharing Personal Information

We may share personal information where necessary and lawful with:

Shopify and its service providers;
Payment processors;
Postal and courier providers;
Aqua TCG, where necessary for the operation and administration of the commercial arrangement between Tyneside TCG and Aqua TCG;
Accounting, professional or business service providers;
Fraud prevention and security providers;
Marketing or analytics providers, where applicable and permitted;
Government authorities, regulators or law enforcement agencies, where legally required; and
Other organisations where you have directed us to share your information or where we have another lawful basis for doing so.

We do not sell your personal information to third parties.

International Transfers

Some of our service providers, including Shopify and other technology providers, may process personal information outside the UK.

Where personal information is transferred internationally, we will take steps to ensure that the transfer is carried out in accordance with applicable UK data protection law.

Depending on the circumstances, this may include relying on:

An adequacy decision;
Appropriate contractual safeguards; or
Another lawful transfer mechanism permitted by applicable law.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the website, remember preferences, provide ecommerce functionality, understand how visitors use our website and, where applicable, support marketing and advertising.

Some cookies are necessary for the website to function and cannot be disabled through our systems.

Where consent is legally required for non-essential cookies or similar technologies, we will request consent before using them.

You can manage certain cookie preferences through your browser and any cookie controls made available on our website.

Data Security

We take reasonable technical and organisational measures to protect personal information against:

Unauthorised access;
Accidental loss;
Destruction;
Misuse;
Alteration; and
Unauthorised disclosure.

However, no website, online service or electronic transmission can be guaranteed to be completely secure.

How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

The exact retention period depends on the type of information and why we need it.

For example:

Order and transaction records may be retained for the period necessary to comply with tax, accounting and legal obligations;
Customer service communications may be retained for as long as necessary to resolve the enquiry and maintain appropriate business records;
Customer account information may be retained while your account remains active and for a reasonable period afterwards where necessary;
Marketing information is retained until you unsubscribe or withdraw consent, unless we have another lawful reason to retain it;
Fraud and security information may be retained for as long as reasonably necessary to protect our business and customers; and
Other information will be securely deleted or anonymised when it is no longer required.

Where we are required by law to retain information for a specific period, we will retain it for that period.

Your Data Protection Rights

Depending on the circumstances and the lawful basis on which we process your information, you may have rights including:

The right to be informed about how your information is used;
The right of access to the personal information we hold about you;
The right to rectification of inaccurate or incomplete information;
The right to erasure in certain circumstances;
The right to restrict processing in certain circumstances;
The right to object to certain types of processing, including certain processing based on legitimate interests or direct marketing;
The right to data portability in certain circumstances; and
The right to withdraw consent where processing is based on your consent.

Not all rights apply in every situation, and some rights are subject to legal exemptions.

We may need to verify your identity before responding to a request.

How to Exercise Your Rights

To exercise your data protection rights, please contact:

Tyneside TCG
Email: contact@tynesidetcg.co.uk

Please provide enough information for us to identify you and understand your request.

We will normally respond to valid requests within the period required by applicable data protection law.

Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's independent data protection regulator.

You can find information about the ICO and how to make a complaint at the Information Commissioner's Office.

Children's Privacy

Our Services are not specifically directed towards children.

We do not knowingly collect personal information from children where we are legally required to obtain parental or guardian consent.

If you believe that a child has provided us with personal information in circumstances where this should not have occurred, please contact us.

Third-Party Websites

Our website may contain links to third-party websites, services or platforms.

Those third parties operate independently from Tyneside TCG and may have their own privacy policies and terms.

We are not responsible for the privacy or security practices of third-party websites that we do not control.

We recommend reviewing the privacy policy of any third-party service before providing personal information.

Automated Decision-Making and Profiling

We do not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects.

Some third-party services, including Shopify, payment providers, fraud-prevention services, analytics services or advertising platforms, may use automated processes as part of their services.

Where relevant, those providers are responsible for their own processing activities and should be consulted through their respective privacy information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to our business;
Changes to our website or services;
Changes to our use of personal information;
Changes to our service providers; or
Changes to applicable law or regulatory requirements.

When we make changes, we will update the "Last updated" date at the top of this policy.

We recommend checking this page periodically to ensure that you are aware of any changes.

Contact Us

If you have questions about this Privacy Policy, how we process personal information, or wish to exercise your data protection rights, please contact us: