This Privacy Policy explains how Rare Candy Collectibles collects, uses, shares and protects personal information when you visit rarecandycollect.shop, place an online order, contact us, use local collection or otherwise interact with our business.

Rare Candy Collectibles respects your privacy and handles personal information in accordance with applicable United Kingdom data-protection law.

1. Who we are

Rare Candy Collectibles is an independent gaming, card and hobby retailer operating a physical shop in Dunfermline and an online store serving customers in the United Kingdom.

2. Personal information we may collect

The information we collect depends on how you interact with Rare Candy Collectibles.

3. How we collect personal information

We may collect personal information:

• When you place an online order
• When you use the checkout
• When you choose local collection
• When you contact us by email or telephone
• When you request a cancellation, return or refund
• When you browse or interact with our website
• Through service providers that support the operation and security of our online store

4. Why we use personal information

We may use personal information to:

• Process and fulfil online orders
• Take and verify payments
• Prepare products for delivery or local collection
• Send order, dispatch and collection communications
• Provide Royal Mail tracking information where applicable
• Handle cancellations, returns and refunds
• Respond to customer-service enquiries and complaints
• Protect our customers, website and business against fraud, misuse or unauthorised transactions
• Maintain and improve the performance of our online store
• Meet accounting, tax, legal and regulatory obligations
• Establish, exercise or defend legal claims where necessary

5. Legal bases for processing

Depending on the circumstances, we may process personal information on one or more of the following legal bases:

6. Shopify

Our online store is hosted and operated using Shopify. Shopify provides the ecommerce platform that allows us to display products, operate our checkout, receive orders and manage our online store.

Information submitted through the website may therefore be processed through Shopify systems as necessary to provide ecommerce, checkout, security, fraud-prevention and store-management services.

More information about Shopify's privacy practices is available through Shopify's own privacy documentation.

7. Payment providers

When you complete an online purchase, your selected payment provider processes the information necessary to authorise and complete the transaction.

Payment providers may also perform fraud-prevention, authentication and security checks.

The payment provider available to you may process personal information under its own privacy documentation. Only payment methods displayed during checkout are available for a particular order.

8. Delivery providers

Where you choose delivery, we may provide information required to deliver your parcel to the relevant delivery provider.

This may include:

• Your name
• Delivery address
• Contact details where required for delivery
• Information required to identify and track the parcel

This information is shared only where reasonably necessary to arrange and support delivery of the order.

9. Other service providers

We may use trusted service providers to help operate our business and website.

These providers may support services such as:

• Website hosting and ecommerce functionality
• Payment processing
• Order fulfilment and delivery
• Website security and fraud prevention
• Analytics and performance measurement
• Technical and customer-service functions

Service providers may process personal information only to the extent required to provide the relevant service or where otherwise permitted by law.

10. We do not sell personal information

11. Cookies and analytics

Our website uses cookies and similar technologies to provide important ecommerce functions, maintain secure sessions, remember certain preferences and understand website performance.

Rare Candy Collectibles uses Shopify Analytics to understand general website and store performance.

For more information about the categories of cookies and technologies used, please read our Cookie Policy.

12. Marketing and advertising

Where optional marketing or advertising technologies are enabled, they are used in accordance with applicable privacy requirements.

Where consent is legally required, optional marketing technologies will be used only after the relevant consent has been provided. Privacy and cookie choices may be changed through the controls made available on the website.

13. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, fraud-prevention and record-keeping requirements.

Different types of information may be retained for different periods depending on the nature of the information, the transaction and any applicable legal obligations.

14. International processing and transfers

Some technology or service providers used to operate our online store may process information in countries outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards or another lawful transfer mechanism should be used where required by applicable data-protection law.

15. Protecting personal information

We take reasonable organisational and technical measures to protect personal information against accidental loss, misuse, unauthorised access, disclosure or alteration.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

16. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights relating to your personal information.

These may include the right to:

• Request access to personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to erase personal information in certain circumstances
• Ask us to restrict processing in certain circumstances
• Object to certain processing based on legitimate interests
• Request transfer of certain information where the right to data portability applies
• Withdraw consent where processing is based on consent
• Make a complaint to the relevant data-protection authority

These rights are subject to applicable legal conditions and exemptions.

17. How to make a privacy request

To make a request concerning your personal information, email:

Please provide enough information for us to understand your request and identify the relevant records. We may ask for reasonable information to confirm your identity before disclosing or changing personal information.

18. Complaints about personal information

If you are concerned about how Rare Candy Collectibles has handled your personal information, please contact us first so that we can review the matter.

You may also have the right to raise a concern with the Information Commissioner's Office (ICO), the United Kingdom's data-protection regulator.

19. External websites

Our website or customer communications may contain links to external websites or services, including delivery tracking, payment providers, Google Maps and other third-party services.

External websites operate under their own privacy practices. Please review the relevant provider's privacy information when using an external service.

20. Children's privacy

Our online store is intended for customers who are legally able to enter into purchases or who use the store with appropriate permission or supervision. We do not knowingly use our online store for the purpose of collecting personal information from children for unrelated purposes.

21. Changes to this Privacy Policy

We may update this Privacy Policy when our services, website features, providers, business practices or legal requirements change.

The current version of this Privacy Policy will be published on our website.

22. Contact Rare Candy Collectibles