Privacy Policy

Last updated: April 2026

1. Who we are

TCG Assistant Ltd is a UK-registered company operating the TCG Assistant marketplace at tcgassistant.com. We are the data controller for personal data processed through our platform.

2. Data we collect

We collect your name, email address, username, and shipping addresses when you register or make a purchase. Payment data is processed by Stripe and is not stored on our servers.

3. How we protect your data

All personal data is encrypted at rest using AES-256-GCM encryption. Data is stored in UK-based servers (AWS eu-west-2, London). We use HTTPS for all data in transit.

4. Your rights (UK GDPR)

Under UK GDPR you have the right to access, rectify, or erase your personal data. You may also request data portability or object to processing. To exercise your rights, contact privacy@tcgassistant.com.

5. Contact

For privacy enquiries: privacy@tcgassistant.com