Holiday Notice: Orders placed between 2 July and 17 August 2026 will be dispatched from 18 August 2026.

Privacy policy

Effective Date: 06 February 2026

At MythicDeck TCG Limited ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information, and the choices and rights you may have under applicable privacy laws, including the New Zealand Privacy Act 2020 and the Australian Privacy Principles (APPs). Where we sell to customers in other countries (including the United States), we also aim to follow relevant privacy requirements to the extent they apply.

By accessing or using our website and associated subdomains (collectively, our "Service"), you agree to the collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

  1. Definitions and Key Terms

Personal Information: Information that identifies you or could reasonably identify you, such as your name, contact details, addresses, and order information.
Cookies: Small data files stored on your device that help websites function and remember your preferences.
Third-Party Services: External companies that help us operate our Service (e.g., e-commerce platform, payments, analytics, marketing tools, and shipping carriers).
Service Providers: Third parties that process personal information on our behalf to deliver our services.

  1. Who We Are and How to Contact Us

Company Name: MythicDeck TCG Limited
Email: support@mythicdecktcg.co.nz
Phone: (021) 230 6513

  1. What Information Do We Collect?

We collect personal information to provide and improve our Service, including:

Personal Details: Name, email, phone number, shipping address, and billing address.
Order Information: Items purchased, quantities, order value, currency, and order history.
Payment Information: Payment status and payment-related details (processed securely by our payment providers). We do not store full card details on our servers.
Technical Data: IP address, device identifiers, browser type, pages viewed, and usage data.
Preferences & Communications: Communication preferences, customer service messages, and any feedback or survey responses you provide.

  1. How Do We Collect Your Information?

We collect information through:

Direct interactions: when you place an order, create an account, contact support, subscribe to marketing, or participate in surveys/promotions.
Automated technologies: cookies, pixels, and similar tracking technologies used for site functionality, analytics, and marketing where permitted.
Third parties: payment providers, shipping partners, analytics/marketing tools, and social platforms (where you have consented or where permitted by law).

  1. How Do We Use Your Information?

We may use your personal information to:

Provide the Service: process orders, take payment, fulfil and deliver purchases, and provide customer support.
Communicate with you: send transactional updates (order confirmations, shipping notifications) and respond to enquiries.
Improve and secure our Service: troubleshoot issues, improve the website, manage fraud prevention, and protect our users and business.
Marketing (where permitted): send promotional communications, run campaigns, and measure marketing performance. You can opt out at any time (see Section 8).
Comply with legal obligations: meet tax, accounting, consumer law, and regulatory requirements.

  1. Sharing and Disclosure of Your Information

We share personal information only as needed to operate our business and provide the Service, including with:

E-commerce & Hosting: our store platform (e.g., Shopify), theme and app providers, and web hosting/CDN services.
Payments: Shopify Payments, PayPal, card networks, banks, and fraud prevention tools (for payment processing and risk checks).
Shipping & Logistics: label platforms and delivery carriers (name, address, contact details, and order contents where required for delivery).
Analytics & Marketing: tools that measure site performance or run advertising/remarketing campaigns (only where permitted by law and subject to your preferences).
Professional Services: accountants, auditors, insurers, and legal advisors where necessary for business operations or compliance.
Legal Reasons: where required by law, regulation, court order, or to protect our rights, property, safety, or users.

We do not sell your personal information in the ordinary sense of “selling” it for money. Some advertising/analytics technologies may involve limited data sharing that could be considered a “sale” or “sharing” under certain US state privacy laws (see Section 8).

Payments & Buy-Now-Pay-Later (Afterpay)

If you choose Afterpay at checkout, we share limited customer and order data with Afterpay to enable instalment payments, fraud prevention, and regulatory checks. This typically includes your name, email, billing and shipping address, order total/currency, and non-sensitive order details (e.g., items and quantities). Afterpay acts as an independent controller and processes your data under its own Terms of Service and Privacy Policy.

Purpose: provide BNPL at checkout, prevent fraud, meet compliance obligations
Lawful basis (NZ/AU): performance of a contract (providing your chosen payment method) and legitimate interests (fraud prevention, platform security)
Your choice: Using Afterpay is optional, select another method at checkout if you prefer not to share data with Afterpay

  1. International Data Transfers

We are based in New Zealand, and your personal information may be stored or processed in New Zealand, Australia, or other countries where our service providers operate. This can include cloud hosting and processing in the United States, Canada, the United Kingdom, the European Union, or other locations depending on the provider.

We take reasonable steps to ensure that overseas recipients protect personal information in a way that is consistent with applicable privacy laws, including the New Zealand Privacy Act 2020 and, for Australian users, the APPs.

  1. Your Rights and Choices

New Zealand & Australia

You may have rights to:
Access: request access to the personal information we hold about you.
Correction: request correction of inaccurate or incomplete information.
Deletion: request deletion of your information, subject to legal obligations (e.g., tax/accounting record retention).
Objection / Opt-out: object to certain processing, including direct marketing.
Portability: request a copy of certain information in a structured format where applicable.

Marketing communications

You can opt out of marketing emails at any time by using the “unsubscribe” link in the email or by contacting us at support@mythicdecktcg.co.nz. Transactional messages (e.g., order and shipping updates) will still be sent where necessary.

United States (State Privacy Notices)

If you are located in a US state with specific privacy laws (e.g., California, Virginia, Colorado, Connecticut, Utah), you may have additional rights such as the right to opt out of certain targeted advertising or data sharing. To request access, deletion, correction, or to opt out of certain data sharing for advertising, contact us at support@mythicdecktcg.co.nz with the subject line “Privacy Request.”

  1. Cookies and Tracking

We use cookies and similar technologies to:
Enable core website functions (e.g., cart and checkout),
Remember preferences,
Measure website performance and improve user experience, and
Support advertising/remarketing where permitted.

You can manage cookie preferences through your browser settings. Disabling cookies may limit website functionality. Some third-party tools may still collect limited data required to deliver services (e.g., fraud prevention and checkout security).

  1. Data Security and Retention

Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Retention

We retain personal information only as long as necessary to provide the Service, manage our business records, comply with legal obligations, resolve disputes, and enforce agreements. For example, we may retain order and payment records for accounting and tax compliance purposes.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website, and the "Effective Date" will be updated.