Privacy policy

Last updated: 13 June 2026

RareTCG respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, place an order, contact us, collect an order from our trading location or otherwise interact with RareTCG.

1. Who We Are

RareTCG is operated by HAWANA LTD, a company registered in England and Wales.

Company number: 16751555

For the purposes of applicable data-protection law, HAWANA LTD trading as RareTCG is the data controller responsible for the personal information described in this policy.

Trading address:
RareTCG
Hughes House
101 London Road
Liverpool
L3 8JA
United Kingdom

RareTCG is located inside Aram Supermarket.

Email: support@raretcg.co.uk
Phone: +44 7474 808322

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

Identity and Contact Information

This may include:

  • your name;

  • billing address;

  • delivery address;

  • email address;

  • telephone number; and

  • account details where you choose to create an account.

Order and Transaction Information

This may include:

  • products purchased;

  • order number;

  • order value;

  • discount codes;

  • selected delivery method;

  • collection arrangements;

  • order status;

  • returns, refunds and exchanges; and

  • correspondence relating to your order.

Payment Information

Payments are processed through payment providers and ecommerce infrastructure made available through Shopify and any payment method selected at checkout.

RareTCG does not normally receive or store your complete payment-card details. We may receive limited payment-related information such as the payment method used, payment status and transaction reference.

Customer-Support Information

If you contact us, we may collect:

  • the content of your message;

  • your contact details;

  • photographs or evidence you provide;

  • details about an order or product issue; and

  • records of our correspondence with you.

Website and Device Information

When you browse our website, certain information may be collected automatically, depending on your privacy choices and the technologies enabled on the site.

This may include:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate location derived from technical information;

  • pages viewed;

  • products viewed;

  • referring website;

  • interactions with the website;

  • cookie identifiers; and

  • analytics or marketing identifiers where permitted.

Marketing Preferences

Where you subscribe to marketing communications or update your preferences, we may record:

  • your email address or telephone number;

  • your subscription status;

  • your marketing preferences; and

  • your consent or opt-out history.

3. How We Collect Personal Information

We may collect personal information:

  • directly from you when you place an order, create an account, contact us, sign up for marketing or visit our trading location;

  • automatically through cookies and similar technologies when you use our website;

  • through Shopify and services connected to our online store;

  • from payment providers;

  • from delivery and logistics providers;

  • from fraud-prevention and security services; and

  • from advertising, analytics and social-media services where enabled and permitted.

4. How We Use Personal Information

We may use personal information to:

  • process and fulfil orders;

  • arrange shipping, delivery and local collection;

  • take payment and issue refunds;

  • provide customer support;

  • communicate about orders;

  • investigate missing, damaged, incorrect or fraudulent orders;

  • maintain customer accounts;

  • manage returns and exchanges;

  • comply with legal, tax and accounting obligations;

  • protect our website, customers and business from misuse or fraud;

  • improve our website, products and services;

  • understand how customers use our website;

  • measure the effectiveness of marketing campaigns;

  • send marketing communications where permitted; and

  • manage our legal rights and obligations.

5. Our Lawful Bases for Processing

Under applicable data-protection law, we rely on one or more lawful bases when processing personal information.

Contract

We process personal information where necessary to:

  • process your order;

  • take payment;

  • deliver or prepare products for collection;

  • communicate with you about an order; and

  • manage returns, refunds and customer-service requests.

Legal Obligation

We process personal information where necessary to comply with legal obligations, such as tax, accounting, consumer-protection and regulatory requirements.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests may include:

  • operating and improving our business;

  • securing our website;

  • preventing fraud;

  • maintaining appropriate business records;

  • responding to enquiries;

  • understanding store performance; and

  • protecting our legal rights.

Consent

Where required, we rely on your consent for certain activities, such as:

  • optional marketing communications;

  • non-essential cookies; and

  • certain analytics or advertising technologies.

Where processing is based on consent, you may withdraw your consent at any time.

6. Marketing Communications

We may send marketing communications where you have asked to receive them or where another lawful basis permits us to do so.

You can unsubscribe at any time by:

  • using the unsubscribe link in a marketing email;

  • updating your preferences where available; or

  • contacting us at support@raretcg.co.uk.

Unsubscribing from marketing does not prevent us from sending service messages relating to an order, account, delivery, return or customer-support request.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to function. These may support features such as:

  • shopping-cart functionality;

  • checkout;

  • account login;

  • security;

  • fraud prevention; and

  • remembering privacy preferences.

Other cookies may be used, where permitted, for:

  • analytics;

  • website improvement;

  • advertising;

  • campaign measurement; and

  • personalisation.

Where required, we ask for your permission before using non-essential cookies.

You can manage your preferences through the cookie banner or privacy-preferences tools shown on our website. You can also adjust cookie settings through your browser, although blocking some cookies may affect how the website works.

8. Shopify

Our online store is hosted on Shopify.

Shopify provides the ecommerce platform that allows us to display products, process orders, manage checkout and operate our online store.

When you visit our store or place an order, personal information may be processed through Shopify and its systems. Shopify may also process certain information in accordance with its own privacy notices.

9. Who We Share Personal Information With

We may share personal information where reasonably necessary with service providers and other recipients, including:

  • Shopify and ecommerce-platform providers;

  • payment processors;

  • banks and payment networks;

  • delivery, postal and logistics providers;

  • customer-support providers;

  • email and communication providers;

  • analytics providers;

  • advertising and marketing providers, where permitted;

  • fraud-prevention, security and IT-service providers;

  • professional advisers, such as accountants, insurers or legal advisers;

  • public authorities, regulators or law-enforcement bodies where required by law; and

  • a purchaser, investor or adviser where relevant to a genuine business sale, restructuring or similar transaction.

We only share personal information where there is a valid reason to do so.

10. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is handled in accordance with applicable data-protection law. Depending on the circumstances, this may include relying on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

11. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy.

The appropriate retention period depends on factors such as:

  • whether the information is needed to fulfil an order;

  • whether the information is needed for customer support;

  • legal, tax and accounting requirements;

  • fraud-prevention and security needs;

  • whether there is an ongoing dispute; and

  • whether you have asked to receive marketing communications.

When personal information is no longer needed, we will delete, anonymise or securely dispose of it where appropriate.

12. How We Protect Personal Information

We take reasonable technical and organisational steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no online system or method of transmission can be guaranteed to be completely secure.

13. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

  • request access to your personal information;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete your personal information;

  • ask us to restrict how we use your personal information;

  • object to certain types of processing;

  • receive certain personal information in a portable format;

  • withdraw consent where processing is based on consent; and

  • complain to a data-protection regulator.

These rights are subject to legal conditions and exemptions.

To exercise a right or ask a question about your personal information, contact:

support@raretcg.co.uk

We may need to verify your identity before completing a request.

14. Complaints

If you have a concern about how we handle personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK data-protection regulator:

Information Commissioner’s Office (ICO)

15. Children’s Privacy

Our website is intended for general retail customers.

We do not knowingly collect personal information from children where this would be inappropriate or unlawful. If you believe that a child has provided personal information inappropriately, contact us at:

support@raretcg.co.uk

16. Third-Party Websites

Our website may contain links to third-party websites, services or social-media platforms.

We are not responsible for the privacy practices of third parties. Please review their privacy notices before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal obligations.

The latest version will be published on this page with an updated revision date.

18. Contact Us

For questions about this Privacy Policy or your personal information, contact:

RareTCG
Operated by HAWANA LTD
Company number: 16751555

Email: support@raretcg.co.uk
Phone: +44 7474 808322

Trading address:
Hughes House
101 London Road
Liverpool
L3 8JA
United Kingdom

RareTCG is located inside Aram Supermarket.