Privacy policy
Privacy notice
Last updated: 24 September 2026
This notice explains how we collect and use your personal information when you visit collect.thegamecollection.net, buy from us, or contact us.
Who we are
TGC Collectables (collect.thegamecollection.net) is a company registered in England and Wales (company number 016492579). TGC Collectables is part of the Curveball Leisure Ltd group of companies (company number 05287160). Our address is Unit C Redbrick Court, Ferryboat Close, Swansea, SA6 8QN, United Kingdom.
We are the controller of the personal information described in this notice, which means we decide how and why it is used. If you have any questions about this notice or your information, contact our Data Protection Officer by email at support@thegamecollection.net or by post at the address above, marked "Data Protection Officer".
The information we collect
• Contact and delivery details: your name, billing and delivery addresses, email address and phone number.
• Order information: what you buy, return or exchange, your order history, and payment confirmation. You enter your card details on our payment providers' secure checkout. We do not see or store your full card number.
• Account information: your login details, saved addresses, wishlist and preferences.
• Messages with us: emails, customer service tickets, and anything you tell us when you contact us.
• Marketing preferences: whether you have signed up to our emails or texts, and whether you open or click on them.
• Technical and usage information: your IP address, device and browser details, and how you use our website. Some of this is collected through cookies, but only if you allow it (see Cookies below).
Where we get your information from
• From you, when you place an order, create an account, sign up to marketing, or contact us.
• Automatically from your device when you use our website.
• From our payment providers, including the results of fraud checks on orders. If you pay with Klarna, Klarna may carry out a credit check and uses your information under its own privacy notice.
• From delivery companies, for example tracking and delivery updates.
• From Shopify, which runs our online store (see Our online store platform below).
How we use your information, and our lawful basis
UK data protection law requires us to have a lawful basis for each way we use your information:
• Processing your orders, payments, deliveries, returns and refunds, and running your account. Lawful basis: contract.
• Answering your questions and providing customer service. Lawful basis: contract where it relates to an order, otherwise legitimate interests (responding to people who contact us).
• Preventing fraud and keeping our website and your account secure. Lawful basis: legitimate interests (protecting our customers and our business).
• Keeping accounting and tax records. Lawful basis: legal obligation.
• Sending marketing emails and texts. Lawful basis: consent, or for existing customers, legitimate interests under the "soft opt-in" (see Marketing below).
• Understanding how our website is used, and showing personalised advertising. Lawful basis: consent, which you give through our cookie banner.
• Improving our products and services, using information about orders and website use. Lawful basis: legitimate interests (running and developing our business).
• Handling data protection requests and complaints, and meeting other legal requirements. Lawful basis: legal obligation.
Where we rely on legitimate interests, we have weighed our interests against your rights, and you can object at any time (see Your rights below).
You need to give us your name, contact, delivery and payment details to place an order. If you do not, we cannot complete it. Everything else is optional.
Marketing
We only send you marketing emails or texts if you have agreed to receive them, or if you have bought from us before and did not opt out, in which case we only tell you about similar products. Every message includes a way to unsubscribe, and you can also change your preferences in your account or by contacting us. We use an email marketing provider to send marketing emails. If you unsubscribe, we keep a record of your email address so that we do not contact you again.
We only use information from our website for personalised advertising on other websites and social media if you have accepted advertising cookies.
Cookies
Cookies are small files stored on your device. Some are needed for our website to work, for example to keep items in your basket and keep you logged in, and these do not need your consent. We only use other cookies, for analytics (Google Analytics) and advertising, if you accept them in our cookie banner. Our cookie banner shows details of each cookie we use. You can change your choices or withdraw consent at any time by clicking the cookie settings button shown on every page of our website.
Who we share your information with
We share information with service providers who work on our behalf. They must protect it and only use it on our instructions:
• Shopify, which runs our online store and sends order, delivery and account emails
• Payment providers, which process your payments
• Our email marketing provider, which sends our marketing emails
• Our customer service system provider
• Google Analytics, for website analytics, and our cookie consent provider
• Our web agency, which maintains our website
• Delivery companies, which deliver your orders
• Our IT providers and professional advisers, such as accountants and lawyers
We also share information with organisations that decide for themselves how to use it:
• Klarna and PayPal, if you choose to pay with them. Their own privacy notices apply.
• Shopify, for its enhanced services (see Our online store platform below).
• HMRC, the police or other authorities, where the law requires it or to prevent fraud.
• A buyer of all or part of our business, if it is sold.
We do not sell your personal information.
Our online store platform
Our store is hosted by Shopify, which processes your information to run the store for us. Shopify also provides enhanced features, such as fraud protection, analytics and advertising services, that use information about how you interact with our store, with other Shopify stores and with Shopify. For these features, Shopify is responsible for your information as a separate controller and may process it in other countries. Shopify's Consumer Privacy Policy explains how it uses your information: https://www.shopify.com/legal/privacy/app-users. You can object to or opt out of this processing at https://privacy.shopify.com/en. Information is only used for personalised advertising if you have accepted advertising cookies.
International transfers
Some of our service providers store or access information outside the UK, mainly in the United States, Canada, the European Economic Area and Singapore. Where a country does not have UK adequacy regulations, we rely on safeguards approved under UK law, such as the UK Extension to the EU-US Data Privacy Framework, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you would like more details.
How long we keep your information
• Your account and order history: for as long as you have an account with us, so that you can view your past orders. If you close your account, or it has not been used for 6 years, we delete your personal details and keep only the order and invoice records we need for tax and legal purposes (see the next point).
• Order, invoice and payment records: 6 years from the end of the financial year in which the order was placed. For guest orders, this is the only period that applies.
• Customer service messages: 6 years after your query is closed.
• Marketing: until you unsubscribe. After that, we keep a record of your email address so that we do not contact you again.
• Data protection requests and complaints: 6 years after they are closed.
• Website analytics data: 14 months.
• Cookies: for the periods shown in our cookie settings.
Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our fraud checks may flag an order automatically. A member of our team reviews every flagged order before it is cancelled. If you pay with Klarna, Klarna may make automated credit decisions, which are explained in its own privacy notice.
Your rights
You have the right to:
• ask for a copy of the personal information we hold about you
• have inaccurate or incomplete information corrected
• have your information deleted
• ask us to restrict how we use your information
• object to how we use your information. You can always object to direct marketing, and we will stop
• receive the information you gave us in a portable format, or have it sent to another organisation
• withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it
• not be subject to decisions made solely by automated means that have legal or similarly significant effects on you
To use any of these rights, email support@thegamecollection.net or write to us at the address above. We will respond within one month. If your request is complex we may need up to two more months, and we will tell you if so. There is normally no charge. We may need to confirm your identity before we act, and some rights have legal exceptions, which we will explain if they apply.
How to complain
If you are unhappy with how we have handled your personal information, please tell us. You can use our contact form at https://collect.thegamecollection.net/pages/contact (choose "Privacy or data protection"), email support@thegamecollection.net, or write to us at the address above. We will acknowledge your complaint within 30 days, look into it, keep you updated, and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Children
Our online store is for customers aged 18 and over. We do not knowingly collect personal information about children. If you think a child has given us personal information, please contact us and we will delete it.
Keeping your information secure
We use appropriate technical and organisational measures to protect your information, and our service providers must do the same. Please keep your account login details private and use a strong, unique password.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed. If we make a significant change, we will tell you, for example by email or with a notice on our website.
