Privacy Policy

Last updated: October 30, 2026

At SantoryuTCG, we value your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or purchase products from our store.

1. Who we are

Our website address is: https://santoryutcg.dk

SantoryuTCG is responsible for processing personal data collected through our website.

Business information:

For questions regarding your personal data, please contact us using the email address above.

2. Information We Collect

We collect personal information necessary to operate our online store, process orders and provide customer support.

Depending on how you interact with our website, this may include:

  • Name and contact information
  • Billing and shipping addresses
  • Email address and telephone number
  • Order details and purchase history
  • Payment and transaction information
  • Account information, if you create an account
  • Customer service correspondence
  • IP address and technical information

We only collect personal information where we have a lawful basis for doing so.

3. How We Use Your Data

We use your personal information to provide our services and ensure a smooth shopping experience.

This includes:

  • Processing and fulfilling orders
  • Managing payments and refunds
  • Arranging shipping and delivery
  • Providing customer support
  • Handling returns and complaints
  • Maintaining website security
  • Complying with legal and accounting obligations

We process personal data based on the following legal grounds under the GDPR:

  • Performance of a contract (Article 6(1)(b)): Processing orders, payments, deliveries and returns.
  • Legal obligations (Article 6(1)(c)): Maintaining accounting records and complying with applicable laws.
  • Legitimate interests (Article 6(1)(f)): Providing customer support, maintaining website security and preventing misuse, where appropriate.
  • Consent (Article 6(1)(a)): Processing activities that require your consent, such as optional cookies.

Where required, we obtain your consent before processing personal data for marketing or optional analytics.

4. Cookies

Our website uses cookies and similar technologies to support essential functions and improve the shopping experience.

These may include:

  • Shopping cart and checkout functionality
  • Customer login and account preferences
  • Website security and performance
  • Analytics and marketing, where applicable

Essential cookies are used where necessary for the operation of our website.

Non-essential cookies are only used with your consent where required by law.

For more information, please refer to our Cookie Policy.

5. Customer Accounts

If you create an account on our website, we store the information associated with your account.

This may include your name, email address, billing and shipping information, and order history.

You can access and update certain account information through your account dashboard.

You may contact us to request deletion of your account and associated personal information, subject to applicable legal retention requirements.

6. Sharing Your Information

We may share personal information with trusted service providers when necessary to operate our business.

These may include:

  • NordicWay: Website hosting and technical infrastructure.
  • Stripe: Payment processing.
  • WooPayments: Payment processing through WooCommerce.
  • MobilePay: Payment processing.
  • GLS, DAO and PostNord: Shipping and delivery services.
  • Other service providers: Technical, accounting or administrative services necessary to operate our business.

We only share the personal information necessary for each provider to perform its services.

We do not sell your personal data to third parties.

Depending on the service, providers may act as data processors on our behalf or as independent data controllers.

Where required, we use appropriate data processing agreements.

7. How long we retain your data

We retain personal information only for as long as necessary to fulfil the purposes described in this policy or to comply with applicable legal obligations.

  • Order and accounting records: Generally retained for five years from the end of the relevant financial year, where required under Danish accounting legislation.
  • Customer accounts: Retained while the account remains active, unless a longer retention period is legally required.
  • Customer support enquiries: Retained for as long as necessary to handle the enquiry and any related matters.
  • Product reviews: Retained while the review remains published or until deletion is appropriate.
  • Technical and security information: Retained for as long as necessary for operational and security purposes.

When personal information is no longer required, we delete or anonymise it in accordance with applicable law.

8. What rights you have over your data

Under the General Data Protection Regulation (GDPR), you have certain rights regarding your personal information.

Depending on the circumstances, these include:

  • The right to access your personal data
  • The right to correct inaccurate information
  • The right to request deletion of your data
  • The right to restrict certain processing activities
  • The right to object to certain processing activities
  • The right to data portability
  • The right to withdraw consent where processing is based on consent

Some requests may be subject to legal limitations, including requirements to retain accounting records.

To exercise your rights, please contact enma@santoryutcg.dk.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

9. Data Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures may include secure connections, access controls, software updates and other appropriate security practices.

While we take reasonable precautions, no method of electronic storage or transmission can be guaranteed to be completely secure.

10. Comments and Reviews

If you leave a product review or comment, we may collect the information submitted through the relevant form.

We may also collect your IP address and browser information for security and spam prevention purposes.

Approved reviews or comments may be publicly visible on our website.

11. International Data Transfers

Some of our service providers may process personal information outside the European Union or European Economic Area.

Where international transfers take place, they must comply with applicable data protection laws.

Depending on the provider and destination, appropriate transfer mechanisms may include adequacy decisions or approved contractual safeguards, such as the European Commission’s Standard Contractual Clauses.

For further information about how individual service providers process personal data, please refer to their respective privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, legal requirements or data processing practices.

Any updates will be published on this page with a revised date.

13. Contact information

If you have questions about this Privacy Policy or how we handle your personal information, please contact:

SantoryuTCG
CVR: 45795438
Email: enma@santoryutcg.dk
Website: santoryutcg.dk