Privacy Policy

Last updated: 20 August 2026

Tartarus TCG respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it, and the rights available to you.

1. Who We Are

Tartarus TCG is the trading name of:

TARTARUS-TCG LTD
Company number: SC811410
Registered in: Scotland
Registered office: 8 Douglas Street, Hamilton, Lanarkshire, Scotland, ML3 0BP

Email: tartarustcg@gmail.com
Telephone: 07300 339770

For the purposes of applicable data protection law, TARTARUS-TCG LTD is the data controller for personal information processed in connection with the Tartarus TCG store, except where another organisation acts as an independent controller for its own purposes.

Our registered office is provided for statutory and privacy correspondence. Product returns are handled separately in accordance with our Refund & Returns Policy.

2. Personal Information We Collect

Depending on how you interact with Tartarus TCG, we may collect information including:

• your name;
• billing and delivery address;
• email address;
• telephone number;
• customer account information;
• order and transaction information;
• products viewed, purchased or added to your basket;
• communications you send to us;
• returns, refunds and customer-service information;
• payment-related information;
• device, browser and network information;
• IP address;
• website usage and interaction information;
• search activity within our store;
• cookie and consent preferences; and
• information required to prevent fraud or protect the security of our store.

Payment-card information is generally processed through the payment services made available through our Shopify store. Tartarus TCG does not need to store your full payment-card details itself in order to process normal online payments.

3. How We Collect Information

We may receive personal information:

• directly from you when you place an order, create an account, contact us, submit a form or otherwise provide information;
• automatically when you use our website, including through cookies and similar technologies where permitted;
• from Shopify and other service providers used to operate our store;
• from delivery and fulfilment providers;
• from payment and fraud-prevention services;
• from review, customer-service or pre-order services; and
• from other third parties where permitted by law.

4. How We Use Your Information

We may use personal information for the following purposes.

Processing and Fulfilling Orders

This includes:

• accepting and processing orders;
• processing payments;
• arranging delivery;
• providing tracking information;
• dealing with cancellations, returns and refunds; and
• communicating with you about an order.

Our lawful basis will normally be that the processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Operating Customer Accounts

Where customer accounts are available, we may process information to create and maintain your account and provide account functionality.

Our lawful basis will normally be performance of our contract with you and, where appropriate, our legitimate interests in providing and administering our services.

Providing Customer Service

We process information when you contact us with questions, complaints, return requests or other enquiries.

Depending on the circumstances, our lawful basis may be performance of a contract, compliance with a legal obligation, or our legitimate interests in providing effective customer support and managing our business.

Meeting Legal and Regulatory Obligations

We may process and retain information where necessary to:

• maintain appropriate accounting and transaction records;
• comply with tax obligations;
• comply with consumer-protection requirements;
• respond to lawful requests from authorities; or
• establish, exercise or defend legal claims.

Our lawful basis is compliance with a legal obligation and, where applicable, our legitimate interests in protecting our legal rights.

Preventing Fraud and Protecting Our Services

We may use information to help identify suspicious transactions, protect customer accounts and maintain the security of our website and business.

Our lawful basis is generally our legitimate interests in preventing fraud, protecting customers and securing our services, together with any applicable legal obligations.

Improving Our Website and Services

We may use appropriate website and transaction information to understand how our store is used, identify problems and improve our products, website and customer experience.

Where the processing requires consent, including certain cookies or similar technologies, we rely on your consent.

Where consent is not legally required, we may rely on our legitimate interests in operating and improving our business, provided those interests do not override your rights and interests.

5. Marketing

We may send marketing communications where you have requested them or where we are otherwise permitted to do so by law.

Where consent is required, we rely on your consent.

You may unsubscribe from marketing communications at any time using the unsubscribe option in the message or by contacting us.

Withdrawing consent does not affect processing that was lawful before consent was withdrawn.

We do not currently rely on confirmed Meta/Facebook, Google Analytics, Google Ads, TikTok, Klaviyo, Microsoft/Bing or Pinterest advertising pixels for the operation described in this Privacy Policy.

If we introduce additional advertising or marketing technologies in future, we will update our privacy information and consent controls where required.

6. Cookies, Analytics and Similar Technologies

Our website uses cookies and similar technologies.

Some technologies are necessary for the website to function, for example to maintain your basket, support checkout, provide security or remember essential settings.

We also use Shopify Analytics to understand website traffic, performance and how customers interact with the store.

Where UK or other applicable law requires consent for non-essential cookies or similar tracking technologies, these technologies are controlled through our cookie/privacy consent system.

Tartarus TCG currently uses Shopify's customer privacy tools, and a cookie-consent banner is enabled for relevant visitors, including visitors in the UK and EEA.

You can use the privacy or cookie settings provided on our website to manage applicable choices and withdraw consent.

Our store also uses EAS EU Compliance as part of its privacy and consent-management setup.

The types of cookies and technologies used by the store may change as Shopify, installed applications or store functionality are updated. We will review our privacy information when material changes occur.

7. Shopify

Our website and online store are hosted by Shopify.

Shopify provides the ecommerce infrastructure used to operate the store and may process information including:

• customer and account information;
• order information;
• transaction information;
• device and usage information;
• payment-related information; and
• information used for security and fraud prevention.

Shopify may act as our service provider for some processing and may act independently for certain processing it carries out for its own purposes.

You should also review the privacy information provided by Shopify where relevant to understand its own processing activities.

8. Service Providers and Other Recipients

We use trusted third parties to help us operate Tartarus TCG and provide our services.

Depending on how you use our store, we may share or make personal information available to categories of providers including:

• ecommerce, website hosting and platform providers;
• payment and fraud-prevention providers;
• delivery, postage and fulfilment providers;
• customer-service and communication providers;
• review and feedback platforms;
• pre-order and order-management services;
• privacy and consent-management providers;
• analytics and website-performance services; and
• other technology providers necessary to operate, secure and improve our store.

Current providers may include Shopify, Royal Mail / Click & Drop, Trustpilot, and other applications integrated with our Shopify store where those services require customer information to perform their function.

We only provide information that is reasonably necessary for the relevant purpose.

Some providers act only on our instructions, while others may act as independent data controllers for some of their activities. Where a provider acts independently, its own privacy notice may also apply.

When we introduce a new service that materially changes how customer personal information is used or shared, we will update this Privacy Policy and our consent arrangements where required.

9. Reviews

Where review services are used, information relating to your purchase or contact details may be processed for purposes such as requesting, submitting, verifying or displaying customer reviews.

Where an independent review provider processes personal information for its own purposes, its own privacy policy will also apply.

10. Delivery Providers

Where you place an order requiring delivery, we provide the information necessary for the delivery provider to fulfil that shipment.

This may include:

• your name;
• delivery address;
• telephone number;
• email address where required for delivery notifications; and
• relevant shipment information.

We currently use Royal Mail / Click & Drop for applicable shipping activity.

11. Payments and Fraud Prevention

Payment and fraud-prevention providers may process information required to:

• authorise payments;
• verify transactions;
• prevent fraudulent activity;
• process refunds; and
• comply with financial or regulatory obligations.

The payment methods available to you are displayed at checkout and may change over time.

Payment providers may act as independent controllers for some of their processing and may have their own privacy notices.

12. International Transfers

Some of our service providers, including Shopify and other technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally and UK data-protection law requires safeguards, appropriate safeguards will be used.

Depending on the destination and circumstances, these may include UK adequacy regulations or recognised contractual safeguards such as the UK International Data Transfer Agreement or International Data Transfer Addendum.

13. How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, tax, security and dispute-resolution requirements.

Retention periods vary according to the type of information and why we hold it.

For example:

• order and transaction records may be retained for the period necessary to meet accounting and tax-record obligations;
• customer-account information may be retained while the account remains active and for an appropriate period afterwards;
• customer-service communications may be retained for as long as reasonably necessary to deal with enquiries, complaints or potential disputes;
• marketing information may be retained until you unsubscribe or your information is no longer required for the relevant marketing purpose;
• consent records may be retained where necessary to demonstrate compliance; and
• fraud and security records may be retained where reasonably necessary to protect our business and customers.

When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

14. Your Data Protection Rights

Depending on the circumstances, UK data-protection law may give you rights including:

• the right of access to personal information we hold about you;
• the right to rectification of inaccurate information;
• the right to erasure in certain circumstances;
• the right to restrict processing in certain circumstances;
• the right to data portability in certain circumstances;
• the right to object to certain processing, including processing based on legitimate interests;
• the right to object to direct marketing at any time; and
• the right to withdraw consent where processing is based on consent.

These rights are not absolute and may depend on the circumstances and lawful basis for processing.

To exercise your rights, contact us using the details at the bottom of this policy.

We may need to verify your identity before fulfilling certain requests.

15. Automated Processing and Fraud Screening

Shopify, payment providers or fraud-prevention services may use automated systems to assess transactions for signs of fraud or security risk.

We use these services to help protect Tartarus TCG and our customers.

Where applicable law gives you rights relating to solely automated decisions that produce legal or similarly significant effects, those rights will apply.

16. Children's Privacy

Our store is intended for customers capable of entering into purchases in accordance with applicable law.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe a child has provided personal information to us in circumstances where it should not have been collected, please contact us.

17. Security

We take reasonable organisational and technical measures to protect personal information.

However, no method of transmission or storage can guarantee absolute security.

Please do not send passwords, full payment-card information or other unnecessary sensitive information through normal email or website chat.

18. Your Privacy Choices

Where available, our website provides privacy controls that allow you to manage applicable cookie, tracking and data-sharing preferences.

You can also use the Your Privacy Choices page available through Tartarus TCG.

These controls operate alongside the rights available to you under UK data-protection law.

19. Complaints

If you have concerns about how Tartarus TCG handles your personal information, please contact us first so that we have an opportunity to address the issue.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data-protection supervisory authority.

Further information about your data-protection rights and how to make a complaint is available from the Information Commissioner's Office at ico.org.uk.

20. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, applications, service providers, legal obligations or data-processing practices.

When we make material changes, we will update the date shown at the top of this policy and provide any additional notice required by law.

21. Contact Us

For privacy questions or to exercise your data-protection rights, contact:

Tartarus TCG
Operated by TARTARUS-TCG LTD
Company number: SC811410
Registered in Scotland
Registered office: 8 Douglas Street, Hamilton, Lanarkshire, Scotland, ML3 0BP

Email: tartarustcg@gmail.com
Telephone: 07300 339770