Privacy policy

Privacy Policy

Last updated: 20 August 2026

Impact League TCG ("Impact League TCG", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you use our website, purchase from us online or in-store, contact us, attend our events, trade or sell products to us, use our grading or other services, or otherwise interact with Impact League TCG.

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who We Are

Impact League TCG is responsible for determining how and why your personal information is processed in connection with our business.

You can contact us regarding privacy or data protection matters at:

Impact League TCG
16 Waterborne Walk
Leighton Buzzard
LU7 1DH
United Kingdom

Email: sales@impactleaguetcg.co.uk

2. Personal Information We Collect

The personal information we collect depends on how you interact with us.

Information You Provide to Us

This may include:

  • your name;

  • billing and delivery address;

  • email address;

  • telephone number;

  • account or login information;

  • order and transaction information;

  • payment confirmation and payment-related information;

  • details relating to returns, refunds and customer service enquiries;

  • communications you send to us;

  • information provided when selling or trading products to us;

  • information relating to grading submissions or other services;

  • event registration or participation information;

  • marketing preferences; and

  • any other information you choose to provide to us.

Payment card information may be processed directly by our payment providers. We do not necessarily receive or retain complete payment card details ourselves.

Information Collected Automatically

When you use our website, we and our service providers may automatically collect certain technical information, including:

  • IP address;

  • browser type;

  • device information;

  • operating system;

  • pages viewed;

  • referring website;

  • interactions with our website;

  • approximate location derived from your IP address; and

  • cookie and similar technology information.

Further information is provided in the Cookies and Similar Technologies section below.

Information From Third Parties

We may receive personal information from third parties that help us operate our business, including:

  • Shopify;

  • payment processors;

  • delivery and fulfilment providers;

  • grading and other service providers;

  • fraud prevention and security providers;

  • analytics providers;

  • advertising and marketing platforms, where permitted; and

  • other technology providers used to operate our website and services.

3. How We Use Your Personal Information

We only process personal information where we have an appropriate lawful basis.

Depending on the circumstances, we may rely upon performance of a contract, compliance with a legal obligation, legitimate interests or consent.

Processing Orders and Providing Services

We use personal information to:

  • process online and in-store purchases;

  • take and verify payments;

  • fulfil and deliver orders;

  • manage customer accounts;

  • provide order updates;

  • process returns, exchanges and refunds;

  • administer trade-ins and purchases of products from customers;

  • administer grading submissions;

  • provide other products and services requested by you; and

  • communicate with you about your order or service.

Our lawful basis will normally be that processing is necessary to enter into or perform a contract with you.

Customer Service and Communications

We may use your information to:

  • respond to enquiries;

  • investigate complaints;

  • provide customer support;

  • resolve disputes; and

  • maintain appropriate records of communications.

Depending on the circumstances, we rely on performance of a contract and/or our legitimate interests in providing effective customer service and operating our business.

Legal, Tax and Accounting Requirements

We may retain and process information where necessary to:

  • maintain accounting and transaction records;

  • comply with tax requirements;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims; and

  • comply with other legal and regulatory obligations.

Our lawful basis is normally compliance with a legal obligation and, where appropriate, our legitimate interests in protecting and managing our business.

Security and Fraud Prevention

We may process personal information to:

  • prevent and detect fraud;

  • protect our customers and business;

  • maintain website and account security;

  • investigate suspicious activity;

  • prevent abuse of our services; and

  • establish, exercise or defend legal claims.

We generally rely on our legitimate interests in protecting our business, customers, systems and property, and where applicable compliance with our legal obligations.

Improving Our Business and Services

We may use information to understand how our website and services are used, troubleshoot problems and improve our products, website, systems and customer experience.

Where personal information is involved, we generally rely on our legitimate interests in operating and improving our business. Where consent is required for the technology used to collect information, we will seek that consent.

4. Marketing

We may send you information about Impact League TCG products, services, events, promotions and offers where permitted by law.

For electronic marketing such as email or text messages, we will obtain consent where required by PECR.

In certain circumstances, we may send marketing to existing customers about our own similar products or services where the law permits us to do so, including where the applicable requirements for the existing-customer or "soft opt-in" exception are satisfied.

You can unsubscribe from marketing communications at any time by:

Withdrawing from marketing will not prevent us from sending you non-marketing communications that are necessary in connection with an order, transaction, account or service.

We may retain limited information about your marketing preference after you unsubscribe so that we can respect your request and avoid sending you further marketing.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies may be used for purposes including:

  • enabling essential website functions;

  • maintaining your shopping basket;

  • remembering preferences;

  • security and fraud prevention;

  • understanding website usage and performance;

  • analytics; and

  • advertising and marketing.

Essential Cookies

Some cookies and similar technologies are necessary for our website and services to operate. Where the law permits these technologies to be used without consent, they may be placed automatically.

Non-Essential Cookies

Where consent is required by law, analytics, advertising and other non-essential cookies or similar technologies will only be used after you have provided the required consent.

You can manage your preferences through the cookie controls provided on our website.

You may withdraw or change your consent at any time using the available cookie settings.

Changing your browser settings may also allow you to block or delete cookies, although doing so may affect some website functionality.

Our store is powered by Shopify, which also uses cookies and similar technologies in connection with providing its services.

6. How We Share Personal Information

We do not sell your personal information in the ordinary meaning of the term.

We may share personal information where reasonably necessary with organisations that help us operate our business and provide our services.

These may include:

Shopify

Our online store is powered by Shopify. Shopify processes information in connection with operating and supporting our ecommerce services.

Payment Providers

We share information with payment processors and payment service providers where necessary to process payments, refunds and transactions.

Delivery and Fulfilment Providers

We may provide your name, address and contact information to postal, courier and fulfilment providers where necessary to deliver your order.

Grading and Other Service Providers

Where you use services such as card grading, we may share information necessary to administer and fulfil the service with the relevant grading company or other service provider.

IT and Professional Service Providers

We may share information with organisations that provide services including:

  • website hosting;

  • IT systems;

  • cloud storage;

  • customer management;

  • analytics;

  • accounting;

  • professional advice;

  • fraud prevention; and

  • security.

Marketing and Advertising Providers

Where permitted by law and subject to any required consent, we may share or make information available to marketing, advertising or analytics providers.

Legal Requirements

We may disclose personal information where reasonably necessary to:

  • comply with a legal obligation;

  • respond to a lawful request from a court, regulator, law enforcement body or other competent authority;

  • protect our legal rights;

  • investigate fraud or criminal activity; or

  • establish, exercise or defend legal claims.

Business Transfers

If our business or assets are sold, reorganised, transferred or merged, personal information may be disclosed to relevant parties as part of that transaction, subject to applicable data protection requirements.

7. International Transfers

Some of our service providers, including technology and ecommerce providers, may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection law.

Depending on the destination and circumstances, this may include relying on:

  • UK adequacy regulations;

  • appropriate contractual safeguards recognised under UK data protection law; or

  • another lawful transfer mechanism.

Where required, you may contact us for further information about the safeguards applicable to transfers of your personal information.

8. How Long We Keep Your Information

We only retain personal information for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, tax, contractual and regulatory requirements.

The appropriate retention period depends on the type of information and why we hold it.

For example:

  • Order and transaction records may be retained for the period required to meet tax, accounting and legal obligations.

  • Customer account information may be retained while your account remains active and for an appropriate period afterwards.

  • Trade-in, grading and service records may be retained for as long as necessary to provide the service, maintain appropriate transaction records and resolve disputes.

  • Customer service communications may be retained for an appropriate period where necessary to maintain records, resolve complaints or establish or defend legal claims.

  • Marketing information will be retained while you remain subscribed or otherwise while we have a lawful reason to process it. We may retain suppression records after you unsubscribe to ensure your preference continues to be respected.

  • Cookie and analytics information is retained in accordance with the applicable cookie or service settings and our business requirements.

When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

9. Your Data Protection Rights

Depending on the circumstances and the lawful basis on which we process your information, UK data protection law may give you the right to:

  • Access the personal information we hold about you.

  • Rectify inaccurate or incomplete personal information.

  • Request erasure of your personal information in certain circumstances.

  • Restrict processing of your personal information in certain circumstances.

  • Object to processing based on legitimate interests in certain circumstances.

  • Data portability for certain information processed electronically on the basis of consent or contract.

  • Withdraw consent at any time where we rely upon consent.

These rights are not absolute and may be subject to exemptions or limitations under applicable law.

Your Right to Object to Direct Marketing

You have the right to object at any time to the use of your personal information for direct marketing purposes.

If you object to direct marketing, we will stop using your personal information for that purpose.

You can exercise your rights by contacting:

sales@impactleaguetcg.co.uk

We may need to request information from you to verify your identity before responding to certain requests.

We will respond to valid requests within the time required by applicable law.

There is normally no charge for exercising your data protection rights, although the law permits fees or refusal in certain limited circumstances.

10. Children's Privacy

Our online store and services are not intended to collect personal information directly from children where parental or guardian involvement would be required by law.

We do not knowingly use children's personal information for targeted marketing in circumstances where doing so would be unlawful.

We may operate events, clubs or activities that children attend. Where personal information relating to children is required for these activities, we will take appropriate steps having regard to the nature of the activity, the child's age and applicable data protection requirements.

Parents or guardians who believe that we hold personal information relating to their child inappropriately should contact us at:

sales@impactleaguetcg.co.uk

11. Security

We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping any account passwords and login information confidential.

If you believe your account or personal information may have been compromised, please contact us as soon as possible.

12. Third-Party Websites

Our website may contain links to websites, services or platforms operated by third parties.

We are not responsible for the privacy practices of independent third parties. We recommend reviewing the privacy information provided by those organisations before providing them with personal information.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us first so that we have an opportunity to investigate and resolve the matter.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information about making a complaint is available from the ICO.

Your right to complain to the ICO is not affected by whether you contact us first.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, legal requirements or data processing practices.

When we make changes, we will update the "Last updated" date at the top of this policy and take any other steps required by applicable law.

15. Contact Us

For questions about this Privacy Policy, how we use your personal information, or to exercise your data protection rights, please contact:

Impact League TCG
16 Waterborne Walk
Leighton Buzzard
LU7 1DH
United Kingdom

Email: sales@impactleaguetcg.co.uk