Privacy Policy

Last updated: 21-08-2026

1. Who are we?

This privacy statement applies to the webshop Card Frontier Collectibles, accessible via card-frontier.com.

Data Controller:
Card Frontier Collectibles VOF
Roordastraat 82
2035 SH Haarlem
Netherlands

Chamber of Commerce number: 42135848
VAT ID: NL869881334B01
Email: info@card-frontier.com

Card Frontier Collectibles VOF is responsible for the processing of personal data as described in this privacy statement.

2. What personal data do we process?

We may process the following personal data:

  • name and contact details, such as email address, phone number, billing address, and shipping address;

  • order details, such as order number, products, payment status, shipping status, and return information;

  • account details, if you create a customer account;

  • communication data, such as emails, contact forms, and customer service messages;

  • payment information, to the extent visible through our payment provider, such as payment method, payment status, and transaction reference;

  • technical data, such as IP address, browser, device, cookie IDs, and website usage;

  • marketing preferences, such as newsletter subscription or consent for marketing cookies.

We generally do not receive full payment card details. These are processed by the respective payment provider.

3. What do we use personal data for?

We process personal data for the following purposes:

  • processing, shipping, and delivering orders;

  • handling payments, returns, refunds, and complaints;

  • providing customer service;

  • managing customer accounts;

  • processing and managing pre-orders;

  • complying with legal obligations, such as tax and administrative retention requirements;

  • securing our webshop and preventing fraud, misuse, and unauthorized access;

  • improving our website, products, and services;

  • sending newsletters and marketing messages, when you have given consent or when legally permitted;

  • placing and reading cookies and similar technologies, to the extent permitted and where necessary with your consent.

We generally do not receive full payment card details. These are processed by the respective payment provider.

4. Grounds according to the GDPR

We process personal data based on one or more of the following grounds:

  • Performance of a contract: for example, for processing, paying, shipping, and delivering your order.

  • Legal obligation: for example, for our accounting, invoices, and tax obligations.

  • Legitimate interest: for example, for security, fraud prevention, customer service, handling disputes, and improving our webshop.

  • Consent: for example, for newsletters or marketing cookies. You can withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

5. With whom do we share personal data?

We share personal data only to the extent necessary for our services, legal obligations, or legitimate business operations.

Recipients may include, among others:

  • our e-commerce platform and hosting service providers, including Shopify;

  • payment providers offered during checkout;

  • carriers and any fulfillment parties;

  • accounting software, accountants, administrative service providers, and tax advisors;

  • email and marketing service providers, if you subscribe to marketing;

  • analytics, cookie, security, and fraud prevention service providers;

  • banks and financial service providers as necessary for payments and refunds;

  • manufacturers or distributors when necessary for a warranty or product claim;

  • government agencies, regulators, investigative services, or other competent authorities when we are legally obliged to provide data.

With parties who process personal data on our behalf, we make appropriate agreements on the protection of personal data where necessary.

We do not sell personal data as a commercial product.

6. Transfer outside the European Economic Area

Some service providers may process personal data outside the European Economic Area.

When personal data is processed outside the European Economic Area, we ensure that there is a valid legal basis and appropriate safeguards. This may take place, for example, based on:

  • an adequacy decision by the European Commission;

  • approved standard contractual clauses;

  • other legally permitted safeguards.

Which international processing takes place also depends on the services and Shopify apps that Card Frontier Collectibles uses.

7. How long do we retain personal data?

We do not retain personal data longer than necessary for the purpose for which it was collected, unless a statutory retention period applies.

Indicative retention periods are:

  • order, invoice, and administration data: generally 7 years due to tax retention obligations;

  • data subject to an applicable OSS or IOSS retention obligation: maximum 10 years as legally required;

  • customer service communication: typically maximum 2 years after the last substantive communication, unless longer retention is necessary due to a complaint, dispute, warranty, or legal obligation;

  • customer account data: as long as the account is active or until you request deletion, unless certain data must be retained longer;

  • newsletter data: until you unsubscribe or withdraw your consent;

  • cookie and consent data: according to the retention periods stated in our cookie settings or our cookie policy;

  • fraud and security data: as long as necessary for security, disputes, and preventing repeated misuse.

8. Cookies and similar technologies

Our webshop uses cookies and similar technologies.

Functional cookies are necessary for the website to function properly, for example for:

  • the shopping cart;

  • the checkout;

  • security;

  • remembering cookie preferences.

For non-essential analytical, personalization, or marketing cookies, we request consent when legally required.

You can adjust your cookie preferences via our cookie banner or cookie settings. Blocking certain cookies may affect the functionality of the website.

More information can be found in our Cookie Policy.

9. Newsletter and marketing

If you subscribe to our newsletter, we may use your email address to send you messages about, among other things:

  • new releases;

  • pre-orders;

  • promotions;

  • events;

  • new products;

  • news from Card Frontier Collectibles.

You can unsubscribe at any time via the unsubscribe link in the respective email or by contacting us at info@card-frontier.com.

10. Security

We take appropriate technical and organizational measures to protect personal data against:

  • loss;

  • misuse;

  • unauthorized access;

  • unauthorized alteration;

  • unauthorized disclosure.

For this, we use, among other things, secure connections, access restrictions, and reliable technical service providers.

Where possible, we use additional security measures, such as two-factor authentication.

No digital system can guarantee complete security.

11. Your privacy rights

Within the limits of applicable law, you have, among others, the following rights:

  • right to access your personal data;

  • right to rectification of inaccurate or incomplete data;

  • right to erasure of personal data;

  • right to restriction of processing;

  • right to data portability;

  • right to object to certain processing;

  • right to withdraw consent when processing is based on consent.

You can submit a privacy request via:

info@card-frontier.com

We will respond in principle within one month of receiving your request. If a request is complex or if multiple requests are received simultaneously, the statutory response period may be extended. We will inform you of this in due course.

We may ask you to provide additional information when necessary to verify your identity.

12. Automated processing and fraud prevention

Payment, security, or fraud prevention service providers may use automated signals to assess transactions.

Card Frontier Collectibles may further check suspicious orders or transactions before an order is processed or shipped.

To the extent that we do not exclusively make automated decisions that have legal or similar significant consequences for customers, such decisions are not based solely on automated processing.

13. Minors

Our webshop is not specifically aimed at children under 16 years of age.

When consent is required for the processing of personal data in connection with an online service to a child under 16 years of age, we will seek consent from a parent or legal guardian where necessary.

For the conclusion of a purchase agreement by a minor, the applicable legal rules also apply.

14. Filing a complaint

If you believe that we are not handling your personal data carefully, we would appreciate it if you first contact us via:

info@card-frontier.com

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, in the case of cross-border processing, another competent European supervisory authority.

15. Changes

We may change this privacy statement when:

  • our webshop or services change;

  • we start using new service providers or systems;

  • laws or regulations change;

  • our processing of personal data changes.

The most recent version of this privacy statement is always available on card-frontier.com.

In the event of significant changes, we will inform customers when appropriate or legally required.