Privacy Policy.
How Phoenix TCG collects, uses, and protects your personal data, in line with the General Data Protection Regulation (EU 2016/679) and the Irish Data Protection Act 2018.
1. Who We Are
Phoenix TCG Limited ("Phoenix", "we", "us") is a private limited company incorporated in Ireland, Company Number 806529, registered at G1 Calmount Park, Ballymount, Dublin 12, D12 TH56. We are the Data Controller for personal data collected through www.phoenixtcg.eu.
2. What Personal Data We Collect
When you place an order:
- Name and billing/delivery address
- Email address and phone number
- Payment information (processed securely by our payment provider — we do not store card details)
- Order history and transaction records
When you browse our website:
- IP address and browser type (via cookies and analytics — see Cookie Policy)
- Pages visited, time spent, and interaction data
- Device and operating system information
When you contact us or sign up to communications:
- Name and email address
- Content of your message or enquiry
- Marketing preferences
3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 of the GDPR:
- Contract performance: to process and fulfil your orders
- Legal obligation: to comply with tax, accounting, and consumer law requirements
- Legitimate interests: to improve our website, prevent fraud, and manage our business
- Consent: for marketing communications and non-essential cookies (you may withdraw consent at any time)
4. How We Use Your Data
- To process and fulfil your orders and handle returns or complaints
- To communicate with you about your orders and enquiries
- To send marketing communications where you have opted in
- To comply with our legal and regulatory obligations (including tax and VAT records)
- To analyse website usage and improve our products and services
- To prevent fraud and ensure website security
5. Who We Share Your Data With
We do not sell your personal data. We may share data with trusted third-party service providers acting as Data Processors on our behalf, including:
- Payment processors (Shopify Payments and PayPal)
- Shipping and logistics providers (for delivery of your order)
- IT and platform providers (e.g. Shopify, Google Analytics)
- Professional advisors (accountants, solicitors) under confidentiality obligations
All third parties are required to process your data in accordance with GDPR and under appropriate data processing agreements.
6. International Transfers
Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
7. Data Retention
- Order and transaction records: 7 years (Irish tax and accounting law)
- Customer account data: for the duration of your account plus 2 years
- Marketing consent records: until you withdraw consent plus 1 year
- Website analytics data: 26 months (Google Analytics default, anonymised)
8. Your Rights
Under the GDPR and the Data Protection Acts 1988–2018, you have the following rights:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate data
- Right to erasure: to request deletion of your data (subject to legal obligations)
- Right to restriction: to request that we limit how we process your data
- Right to data portability: to receive your data in a structured, machine-readable format
- Right to object: to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at info@phoenixtcg.eu. We will respond within one month. You also have the right to lodge a complaint with the Data Protection Commission (www.dataprotection.ie).
9. Cookies
We use cookies and similar tracking technologies on our website. Please see our Cookie Policy for full details.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction, including SSL/TLS encryption for data in transit and access controls on systems holding personal data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on our website with the date of last update. Material changes will be communicated to registered customers by email.
12. Contact & Data Controller Details
Phoenix TCG Limited
G1 Calmount Park, Ballymount, Dublin 12, D12 TH56, Ireland
Email: info@phoenixtcg.eu
Data Protection Commission (supervisory authority): www.dataprotection.ie