PRESALE NOW OPEN — EXPECTED DISPATCH WEEK COMMENCING 14 SEPTEMBER 2026
0

Privacy policy

Last updated: 13 August 2026

This Privacy Policy explains how CardGuardian collects, uses, stores and shares your personal information when you visit cardguardian.co.uk, purchase from us, contact us or otherwise interact with our services.

1. Who we are

CardGuardian

For the purposes of UK data protection law, CardGuardian is the data controller responsible for the personal information described in this policy.

Email: hello@cardguardian.co.uk
Website: cardguardian.co.uk

In this policy, “CardGuardian”, “we”, “us” and “our” refer to the business operating cardguardian.co.uk.

2. Information we collect

Depending on how you interact with us, we may collect:

  • Your name, billing address, delivery address, email address and telephone number.

  • Order details, products purchased, delivery information, returns and refunds.

  • Account details if you create a customer account.

  • Communications you send to us, including emails, contact forms and social-media messages.

  • Marketing preferences, including whether you have agreed to receive promotional communications.

  • Technical information such as your IP address, browser, device, approximate location, pages visited and interactions with our website.

  • Information used to prevent fraud, misuse, chargebacks and security threats.

  • Information received from Shopify, payment providers, delivery companies, marketplaces or social-media platforms where you interact with us through those services.

Payments are handled by secure third-party payment providers. CardGuardian does not normally receive or store your complete payment-card details.

We do not intentionally collect special-category personal data, such as information about your health, ethnicity, religion or political opinions.

3. How we use your information

We may use personal information to:

  • Process, fulfil and deliver orders.

  • Take payment and provide order confirmations and delivery updates.

  • Manage returns, refunds, cancellations and customer enquiries.

  • Create and manage customer accounts.

  • Detect and prevent fraud, misuse and security incidents.

  • Maintain and improve our website, products and customer experience.

  • Understand website performance and how customers use our store.

  • Send marketing communications where you have agreed to receive them or where applicable law otherwise permits us to do so.

  • Maintain appropriate business, tax and accounting records.

  • Establish, exercise or defend legal claims.

  • Comply with legal, regulatory and law-enforcement requirements.

  • Protect the rights, property and safety of CardGuardian, our customers and others.

4. Our lawful bases

Under UK data protection law, we must have a lawful reason for using your personal information. Depending on the circumstances, we rely on:

  • Contract: when information is required to accept, process and fulfil your order or provide a service you requested.

  • Legal obligation: when we must retain or disclose information to comply with tax, accounting, consumer-protection or other legal requirements.

  • Legitimate interests: when reasonably necessary to operate and improve CardGuardian, provide customer support, maintain security, prevent fraud, keep appropriate records or defend legal claims, provided those interests do not override your rights.

  • Consent: when you agree to marketing, non-essential cookies or another optional use of your information. You may withdraw consent at any time.

5. Marketing communications

We may send you news, product announcements, offers or other marketing where you have consented or where applicable law permits us to contact existing customers.

You can stop receiving marketing at any time by:

Unsubscribing from marketing will not stop essential communications relating to an existing order, payment, delivery, return or customer-service request.

We may retain limited information on a suppression list so that we can respect your request not to receive further marketing.

6. Cookies and similar technologies

Our website uses cookies and similar technologies to:

  • Operate essential website and checkout functions.

  • Remember your preferences and shopping basket.

  • Maintain security and prevent fraud.

  • Measure website traffic and performance.

  • Understand how visitors use the website.

  • Support advertising and marketing, where you have consented.

Essential cookies may operate without consent where they are necessary to provide the service you requested. Analytics, advertising and other non-essential cookies will be used in accordance with your choices and applicable law.

You can manage your choices through the cookie banner on our website and through your browser settings. Disabling certain cookies may affect how the website functions.

7. How we share information

We do not sell personal information for money.

We may share information only where reasonably necessary with:

  • Shopify, which hosts and operates our online store.

  • Payment processors and fraud-prevention providers.

  • Delivery companies, couriers and fulfilment providers.

  • Website, IT, analytics, marketing and customer-service providers.

  • Professional advisers, including accountants, insurers and legal advisers.

  • Regulators, courts, law-enforcement agencies or other authorities where required or permitted by law.

  • A prospective buyer, investor or successor if CardGuardian is involved in a sale, merger, restructuring or transfer of the business.

These organisations may only receive the information reasonably necessary to perform their role. Some providers may also act as independent data controllers and process information under their own privacy policies.

Shopify processes customer information in connection with operating our store. Further information is available in the Shopify Consumer Privacy Policy.

If you purchase or contact us through a third-party marketplace or social-media platform, that platform will process your information under its own privacy policy.

8. International transfers

Some of our service providers, including Shopify and its subprocessors, may process information outside the United Kingdom.

Where personal information is transferred internationally, we or our providers use safeguards recognised under applicable data protection law. These may include UK adequacy regulations, approved contractual protections or other legally recognised safeguards.

9. How long we retain information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, tax, accounting and reporting requirements.

Generally:

  • Order, payment and accounting records may be retained for up to six years or longer where legally required.

  • Customer-service communications may normally be retained for up to two years after the enquiry is resolved.

  • Marketing information is retained until you unsubscribe or we determine it is no longer required.

  • Security and fraud-prevention information is retained for as long as reasonably necessary to protect our business and customers.

  • Cookie and analytics information is retained according to the duration described through our cookie controls and relevant provider settings.

We may retain information for longer where a dispute, chargeback, investigation or legal claim is ongoing or reasonably anticipated. When information is no longer required, we will delete or anonymise it where reasonably possible.

10. How we protect information

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no website, internet transmission or storage system can be guaranteed to be completely secure. Customers are responsible for keeping their account credentials confidential and should contact us if they suspect unauthorised use of their account.

11. Automated fraud checks

Our payment, ecommerce and fraud-prevention providers may use automated systems to identify transactions that appear fraudulent or present an elevated risk.

These checks may result in an order being delayed, reviewed, rejected or cancelled. If you believe a decision has been made incorrectly, contact hello@cardguardian.co.uk and we will review the circumstances where appropriate.

12. Your rights

Depending on your location and the circumstances, you may have the right to:

  • Request access to the personal information we hold about you.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your information in certain circumstances.

  • Ask us to restrict how your information is used.

  • Object to processing based on legitimate interests.

  • Object at any time to the use of your information for direct marketing.

  • Request the transfer of certain information to you or another organisation.

  • Withdraw consent at any time where processing is based on consent.

  • Raise a complaint with a data-protection authority.

These rights are not absolute, and we may retain or continue using information where the law allows or requires us to do so.

To exercise your rights, contact hello@cardguardian.co.uk. We may ask for information needed to confirm your identity before completing a request.

You have an absolute right to object to the use of your personal information for direct marketing.

If you are dissatisfied with how we handle your information, please contact us first so that we can try to resolve the issue. You may also complain to the UK Information Commissioner’s Office through ico.org.uk.

13. Children’s information

Our website is not designed to knowingly collect personal information from children under 13 without appropriate permission. If you believe a child has provided personal information to us improperly, please contact hello@cardguardian.co.uk.

14. Third-party links

Our website may contain links to other websites or services. We are not responsible for the privacy, security or content of third-party websites. You should review their privacy policies before submitting personal information.

15. Changes to this policy

We may update this Privacy Policy to reflect changes to our business, website, service providers or legal obligations.

The latest version will always be published on this page with the revised “Last updated” date. Where appropriate, we may also notify customers of significant changes by email or through the website.

16. Contact us

For questions, requests or concerns about this Privacy Policy or how CardGuardian uses personal information, contact:

CardGuardian
Email: hello@cardguardian.co.uk