Privacy & Cookies | Shonen Collectables

Who we are

Shonen Collectables is an online trading card retailer based in the United Kingdom. We are the "controller" of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). We're registered with the Information Commissioner's Office (ICO), and our registration number is being issued and will be shown here shortly.

For anything about your data, email hello@shonencollectables.co.uk.

What we collect

When	What
You place an order	Your name, email, phone number, delivery and billing address, what you bought and what you paid.
You pay	Your card or wallet details go straight to our payment provider, Stripe. We never see or store your full card number.
You ask for a restock alert	Your email address and the product you're waiting for.
You join the drop list	Your email address.
You contact us	Your name, email, message and anything else you include, such as an order number, whether you email us or use the contact form.
You visit the site	Our hosting provider records basic technical information (such as your IP address and browser) in server logs to keep the site secure and working. We don't use analytics or tracking tools.

Why we use it, and our legal basis

To take and deliver your order, handle returns and answer your questions: because it's needed for our contract with you.
To keep records that tax law requires: because we have a legal obligation to.
To prevent fraud and keep the shop secure: because it's in our legitimate interests (and yours).
To send restock alerts and drop-list emails: because you asked us to (consent). You can withdraw consent at any time. Every drop-list email has an unsubscribe link, and restock alerts are one-off.

We don't use your data for automated decision-making or profiling, and we never sell it.

Who we share it with

We only share what each service needs to do its job for us:

Service	What it does
Stripe	Takes payments securely and helps prevent fraud.
Netlify	Hosts the website, stores orders and stock, and collects drop-list sign-ups and contact form messages.
Resend	Sends order confirmations, dispatch emails with your tracking number, and restock alerts.
Royal Mail or our courier	Delivers your parcel, so it gets your name and delivery address.
Google Fonts	Supplies the typefaces the site uses. Your browser connects to Google's servers to load them, which shares your IP address with Google.

We may also share information if the law requires it, for example with HMRC.

International transfers

Some of these services process data outside the UK, mainly in the United States. Where they do, the transfer is protected by the UK government's approved safeguards, such as the UK–US Data Bridge or the UK International Data Transfer Agreement.

How long we keep it

Orders: 6 years, because tax law requires it.
Restock alerts: until we email you that the item is back, then deleted (or after 12 months if it never comes back).
Drop list: until you unsubscribe.
Emails and messages you send us: up to 2 years, unless they're part of an order record.

Your rights

You can ask us to:

give you a copy of the data we hold about you;
correct anything that's wrong;
delete your data (unless we have to keep it, such as order records for tax);
restrict or object to how we use it;
send your data to you or another organisation in a portable format;
stop sending you emails you agreed to.

Email hello@shonencollectables.co.uk and we'll respond within one month. It's free.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.

Cookies & storage

We don't use any advertising, analytics or tracking cookies. The site stores a few small items in your browser that it needs to work. Because they're essential, they don't need your consent:

Name	What it's for	How long
`shonen-cart`	Remembers what's in your cart.	Until you check out or clear it
`shonen-notify`	Remembers which products you asked to be alerted about, so the buttons show "On the list".	Until you clear your browser data
`shonen-cookie-ok`	Remembers that you've closed the cookie notice.	Until you clear your browser data
`shonen-intro`	Plays the opening animation only once per visit.	Until you close the tab

When you pay, Stripe sets its own cookies on its secure checkout page to prevent fraud. They're covered by Stripe's privacy policy.

You can clear or block storage in your browser settings at any time, but your cart won't be remembered if you do.

Children

To buy from us you need to be 18 or have a parent or guardian's permission. We don't knowingly collect personal data from children under 13.

Changes to this policy

If we change how we use your data, we'll update this page and the date at the top. Significant changes will be highlighted on the site.