Cookie & Privacy Policy
Last updated: 22 July 2026
Who we are
Card Guys is an independent trading card shop based in the Torbay area, Devon, UK. When this policy refers to "we", "us" or "our", it means Card Guys.
We are the data controller for the personal data described in this policy. You can reach us at:
Card Guys
81 Upper Manor Road
Paignton
Devon
TQ3 2TH
Phone: 07769 423524
Email: info@cardguys.co.uk
If you have questions about this policy, or you want to see, correct or delete the personal data we hold about you, please contact us or call the shop and we will handle it.
What are cookies?
Cookies are small text files placed on your device by websites you visit. We also use localStorage — a similar browser-based storage mechanism — to save your preferences locally on your device without sending data to a server.
What we store on your device
Essential (always active)
These are necessary for the site to function correctly and cannot be switched off.
| Name | Type | Purpose | Duration |
|---|---|---|---|
cg-cookie-consent | localStorage | Stores your cookie consent preference so we don't show the banner on every visit. | Until you clear browser storage |
Session memory (window.__cardGuysHasBooted etc.) | JS memory (not persisted) | Tracks whether the intro animation has already played during your current session. Cleared when you close the tab. | Session only |
__Host-cg_admin | Cookie | Only ever set for shop staff signing in to manage the events page. It is never set for ordinary visitors. Strictly necessary, so it does not require consent. | Signed out automatically after 30 minutes of inactivity, and after 12 hours in all cases |
Third-party services
Fonts
Our web font (DM Sans) is hosted on our own website rather than loaded from Google Fonts. This means your IP address is not shared with Google when a page loads.
Hosting (Vercel)
This website is hosted by Vercel Inc. Like any web host, Vercel processes the technical information needed to deliver pages to you, including your IP address and browser type, and keeps short-term server logs for security and reliability. Vercel acts as our data processor under a data processing agreement. See Vercel's Privacy Policy.
Google Maps
Our contact page can show a Google Map so you can find the shop, but it does not load automatically. It loads only if you click the "Show map" button. When you do, Google may receive your IP address and set its own cookies, under Google's own privacy policy. If you never click it, no data is sent to Google. See Google's Privacy Policy.
Instagram feed (SnapWidget)
Our events page can show a live feed of our Instagram posts using SnapWidget, but it does not load automatically. It loads only if you click the "Show Instagram feed" button. When you do, SnapWidget and Instagram may receive your IP address and set their own cookies, under their own privacy policies. If you never click it, no data is sent to either. See SnapWidget's Privacy Policy and Instagram's Privacy Policy.
Contact & enquiry forms (Web3Forms)
Our sell enquiry and contact forms are processed by Web3Forms when active. When you submit a form, your name, email address, and message are sent to Web3Forms and forwarded to us by email. Web3Forms does not store your submission data permanently. See Web3Forms Privacy Policy.
If you use the WhatsApp links on this site, you will be taken to WhatsApp's platform. WhatsApp operates under their own terms and privacy policy.
Analytics & advertising
We do not currently use any analytics tools (e.g. Google Analytics) or advertising/tracking pixels on this site. We do not build profiles of visitors or share personal data with advertisers.
Your consent choices
You can choose "Accept all" or "Essential only" via the cookie banner shown on your first visit. Your preference is saved in your browser's localStorage.
Choosing "Essential only" means that only the essential items listed above are stored. We do not currently set any non-essential cookies at all, so in practice both options behave the same way today — the banner exists so that this remains true and visible if that ever changes.
You can change or withdraw your choice at any time using the "Cookie settings" link in the footer of any page, which brings the banner back. You can also clear your browser's storage for this site.
What we collect, and why we are allowed to
Under UK GDPR we have to tell you our lawful basis for each use of your personal data:
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, email address, phone number and message from our contact and sell enquiry forms | To reply to your enquiry | Legitimate interests — responding to someone who has contacted us about our services | Deleted once the enquiry is closed and no longer needed, normally within 12 months |
| Cookie preference | To remember your choice so we do not ask on every page | Strictly necessary — stored on your device only | Until you clear it |
| Sign-in records for the staff admin area, including IP address and time | To detect and investigate unauthorised attempts to access the website | Legitimate interests — keeping the website secure | Most recent 500 entries, and no longer than 90 days |
We do not sell your data, share it with advertisers, or use it to build a profile of you. We do not use automated decision-making. We do not transfer your personal data outside the UK or EEA except through the service providers named above, who operate under standard contractual clauses or an adequacy decision.
Your rights (UK GDPR / GDPR)
If we hold personal data about you (for example, data submitted via a contact form), you have the following rights:
- Right to access — Request a copy of the personal data we hold about you.
- Right to rectification — Ask us to correct inaccurate data.
- Right to erasure — Ask us to delete your personal data where there is no legitimate reason to keep it.
- Right to restrict processing — Ask us to limit how we use your data.
- Right to object — Object to processing of your personal data.
- Right to data portability — Request a portable copy of data you have provided to us.
To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Data retention
Retention periods for each type of data are listed in the table above. In short: we keep enquiries only as long as we need them to help you, and we do not use form data for marketing.
Children's privacy
Our website is not directed at children under 13. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects when it was last changed. Continued use of the site after changes are posted constitutes acceptance of the updated policy.
Contact
For any privacy or data-related queries, please use our contact page or visit us in store.