Privacy policy

Privacy Policy — The Collection Goblins

Last updated: 26/08/2026

The Collection Goblins ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why, and how we handle it, in line with UK GDPR and the Data Protection Act 2018.

1. Who we are

Data controller: The Collection Goblins

Contact: help@thecollectiongoblins.co.uk

Address: 14 School View, Oundle, PE8 4FJ

2. What we collect

When you place an order, browse our site, or contact us, we may collect:

Name, delivery and billing address, email address, phone number
Order history and payment confirmation (we do not store your full card details — payments are processed securely by Shopify Payments)
Card request details you submit via our contact form (e.g. cards you're looking for)
Technical data such as IP address, browser type, and site usage, via cookies and analytics tools

3. Why we use your data

We use your personal data to:

Process and deliver your orders
Respond to card requests and customer service queries
Send order updates (e.g. dispatch confirmation)
Send marketing emails, but only if you've opted in — you can unsubscribe at any time
Improve our website and product range
Meet our legal and tax obligations

4. Legal basis for processing

We process your data under one or more of the following bases: performance of a contract (fulfilling your order), legal obligation (e.g. tax records), consent (e.g. marketing emails), and legitimate interests (e.g. preventing fraud, improving our service).

5. Who we share it with

We share data only where necessary, with:

Shopify (our website and e-commerce platform)
Couriers (e.g. Royal Mail, Evri) to deliver your order
Payment processors to handle transactions securely
Email/marketing tools, if you've opted into marketing We do not sell your personal data to third parties.

6. How long we keep your data

We keep order and transaction records for as long as required by UK tax law (currently 6 years). Marketing data is kept until you unsubscribe or ask us to delete it.

7. Cookies

Our website uses cookies to run properly (e.g. keeping items in your basket) and, where you consent, to understand site usage via analytics. You can control cookies through your browser settings.

8. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data ("right to be forgotten"), subject to legal record-keeping requirements
Object to or restrict certain processing
Withdraw consent to marketing at any time
Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data

To exercise any of these rights, contact us at help@thecollectiongoblins.co.uk.

9. Data security

We take reasonable technical and organisational steps to protect your data, including using a secure, PCI-compliant platform (Shopify) for payment processing.