Privacy Policy
How we protect and use your information
What We Collect
- When you place an order, we collect your email address and shipping address (provided to us via Stripe Checkout)
- We store order details including items purchased, quantities, and transaction references for order fulfilment
- If you contact us directly, we may collect your name and email address
- If you enter a giveaway or prize draw at one of our events, we collect your first name and email address so we can contact the winner. If you win, we will also collect your shipping address so we can send the prize. Giveaways are open to UK residents only and are intended for attendees of the event. You can withdraw your entry at any time before the draw is held by emailing us
- For in-person purchases, we may collect limited payment information via card reader
How We Use Your Information
- To process and fulfil your orders
- To send order confirmation and shipping updates
- To handle returns, refunds, and customer queries
- To run prize draws and contact winners
- To improve the website and user experience
Third-Party Services
- We use Stripe to process payments. When you checkout, you are redirected to Stripe's secure payment page. Stripe collects and processes your card details directly — we never see or store your full card information. You can view Stripe's privacy policy at stripe.com/privacy
- We use Google Analytics for anonymous website usage data
- Website and customer data (orders, giveaway entries) is hosted on Google Firebase (Google Cloud Platform). Google's privacy policy applies to this infrastructure: policies.google.com/privacy
Data Security
- Payment information is handled entirely by Stripe and is never stored on our servers
- We do not share or sell your personal data to third parties
- We take reasonable steps to keep any data we handle secure
- Order data is retained for accounting and legal purposes
- Giveaway entries are retained until the draw is concluded and the winner has been notified, then deleted within 90 days
Your Rights
- Under UK GDPR, you have the right to access, correct, or delete your personal data
- You can request a copy of the data we hold about you
- You can request deletion of your data (subject to legal retention requirements)
- To exercise any of these rights, contact us at orders@ninecards.co.uk or via our contact page
- If you are not satisfied with how we handle your data, you can lodge a complaint with the Information Commissioner's Office (ICO)