Privacy Policy

Last updated: May 25, 2026

This privacy policy describes how Dojo TCG collects, uses, stores and protects the personal data of users of the website dojotcg.com, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act of 6 January 1978, as amended.

1. Data controller

2. Personal data collected

Dojo TCG collects the following categories of data:

2.1 Data provided directly by the user

• Identity: last name, first name
• Contact details: postal address (shipping and billing), email address, phone number
• Customer account: login credentials, purchase history
• Communications: content of exchanges with customer service

2.2 Data collected automatically

• Technical data: IP address, browser type, operating system, pages visited, visit duration, approximate IP-based geolocation data
• Cookies and trackers: see our Cookie Policy

2.3 Payment data

Banking data (card number, security code) is collected and processed directly by the payment provider integrated into the Shopify platform. Dojo TCG neither accesses nor stores this data.

3. Purposes and legal bases of processing

Purpose	Legal basis	Retention period
Order processing and deliveries	Performance of the contract	5 years after the last order
Invoicing and accounting obligations	Legal obligation	10 years (French Commercial Code)
Customer account management	Performance of the contract	Account lifetime + 3 years of inactivity
Customer service / complaints	Legitimate interest	3 years after the last interaction
Newsletter (if subscribed)	Consent	Until unsubscription
Audience statistics	Consent or legitimate interest	13 months maximum
Fraud prevention	Legitimate interest	5 years

4. Data recipients

The data collected is intended exclusively for:

• Dojo TCG and its technical processors (hosting provider, payment providers, carriers)
• Administrative or judicial authorities upon legal request

No data is resold to third parties for commercial purposes.

5. Main processors

• Shopify International Limited (hosting, site and order management) — Ireland / EU
• Payment providers integrated into Shopify (Stripe, PayPal, etc., depending on the payment methods available)
• Carriers: La Poste / Colissimo, Mondial Relay, or any other carrier selected at checkout

6. Transfers outside the European Union

Some processors may process data outside the European Union. In such cases, Dojo TCG ensures that these transfers are governed by appropriate safeguards (European Commission standard contractual clauses, adequacy decisions, or binding corporate rules).

7. Data security

Dojo TCG implements appropriate technical and organisational measures to protect personal data against any destruction, loss, alteration, disclosure or unauthorised access: encryption of connections (HTTPS / TLS), strong authentication for administrative access, regular backups, and strict control of internal access.

8. Your rights

In accordance with the GDPR, every user has the following rights regarding their personal data:

• Right of access — obtain confirmation that their data is being processed and receive a copy of it
• Right to rectification — have inaccurate or incomplete data corrected
• Right to erasure ("right to be forgotten") — under certain conditions
• Right to restriction of processing
• Right to portability — receive their data in a structured, machine-readable format
• Right to object to processing, in particular for commercial prospecting
• Right to withdraw consent at any time where processing is based on consent
• Right to define directives regarding the fate of their data after their death

To exercise these rights, the user may send their request by email to contact@dojotcg.com, together with proof of identity. A response will be provided within one (1) month.

9. Right to lodge a complaint

If the user considers that their rights are not being respected, they may lodge a complaint with the French Data Protection Authority (CNIL):

10. Changes

This policy may be amended at any time to reflect legal, regulatory or technical developments. The date of the last update appears at the top of the document.