Privacy Policy

Privacy Policy

This Privacy Policy explains how we collect, use and protect your personal data when you visit our website or place an order with us. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

TCG Hits is a trading name of HiveCore Ltd, a company registered in England and Wales (company number [COMPANY NUMBER]), with its registered address at [BUSINESS ADDRESS]. For the purposes of data protection law, HiveCore Ltd is the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your information, you can contact us at [CONTACT EMAIL] or by telephone on [CONTACT PHONE].

The data we collect

When you place an order or contact us, we may collect and process the following personal data:

  • Your name
  • Your delivery and billing address
  • Your email address
  • Your telephone number
  • Your order history and details of the products you have purchased
  • Correspondence you send to us

Card payments are handled securely by our payment processor, Stripe. We do not collect, see or store your full card details on our systems.

Why we use your data and our lawful bases

We only use your personal data where the law allows us to. The lawful bases we rely on are:

  • Performance of a contract — to process and fulfil your order, take payment, arrange delivery and provide customer service.
  • Legal obligation — to meet our accounting, tax and other regulatory responsibilities, and to handle returns and cancellations under consumer law.
  • Legitimate interests — to run and secure our website, prevent fraud, keep proper business records and respond to your enquiries. We only rely on this basis where your rights and interests do not override ours.

Who we share your data with

We do not sell your personal data. We share it only with trusted third parties who help us operate our business, and only to the extent necessary. These processors include:

  • Stripe — to process your card payment securely.
  • Our web host — to store our website and order data securely.
  • Delivery couriers, including Royal Mail — to deliver your order to you.

We may also disclose your data where we are required to do so by law, or to establish, exercise or defend our legal rights.

Cookies

Our website uses cookies and similar technologies to make the site work, keep your basket functioning and help us understand how the site is used. You can control or delete cookies through your browser settings, although disabling some cookies may affect how the site operates.

How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy. Order and transaction records are generally retained for at least six years to meet our legal, accounting and tax obligations. Where data is no longer required, we securely delete or anonymise it.

Your rights

Under the UK GDPR, you have the following rights in relation to your personal data:

  • The right to access the personal data we hold about you
  • The right to rectification of inaccurate or incomplete data
  • The right to erasure of your data in certain circumstances
  • The right to restrict our processing of your data
  • The right to data portability
  • The right to object to our processing of your data

To exercise any of these rights, please contact us at [CONTACT EMAIL]. We will respond within the timeframes required by law.

Complaining to the ICO

If you have a concern about how we handle your personal data, we would ask that you contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, so please review it periodically.