Privacy Policy for Cards of the Ancients
Last Updated: 2026-04-28
Welcome to Cards of the Ancients (www.cardsoftheancients.com). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and purchase our custom cards.
1. Data Controller
Cards of the Ancients is operated from Lithuania. Under the EU General Data Protection Regulation (GDPR), we are the “Data Controller” of the personal information you provide.
Contact Email:
2. Information We Collect
We collect information that allows us to process your orders and improve your experience:
Identity & Contact Data: Name, shipping address, billing address, email address, and phone number.
Transaction Data: Details about products you purchased and payments made (payment processing is handled via secure third-party providers).
Technical Data: IP address, browser type, and location (used for security and analytics).
Customization Data: Images or text you upload to create your custom cards.
3. How We Use Your Information
We use your data for the following legal bases:
Performance of a Contract: To process and ship your orders.
Consent: If you opt-in to our newsletter.
Legal Obligation: To comply with tax and accounting laws in Lithuania.
Legitimate Interests: To prevent fraud and improve our website functionality.
4. How We Share Your Information
We do not sell your personal data. We only share information with trusted third parties necessary to operate our business:
Service Providers: Shipping carriers (e.g., Lietuvos paštas, DHL, FedEx) and payment processors (e.g., Stripe, PayPal).
IT Services: Hosting providers and website analytics tools (e.g., Google Analytics).
Legal Requirements: If required by law or to protect our rights.
5. International Data Transfers
Since we sell worldwide, your data may be processed outside the European Economic Area (EEA). We ensure that any such transfers comply with GDPR requirements (e.g., using Standard Contractual Clauses) to ensure your data remains protected.
6. Data Retention
We keep your personal information only as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically 5–10 years for tax records in Lithuania).
7. Your Rights (GDPR)
Because we are based in Lithuania (EU), you have the following rights:
Access: Request a copy of the data we hold about you.
Correction: Request that we fix inaccurate information.
Erasure: Request that we delete your data (“Right to be Forgotten”).
Object/Restrict: Object to direct marketing or request we limit processing.
Data Portability: Request a transfer of your data to another service.
To exercise these rights, please contact us at [Insert Your Email Address].
8. Cookies
We use cookies to enhance your browsing experience. You can choose to disable cookies through your browser settings, though some parts of the website may not function properly as a result.
9. Security
We implement appropriate technical and organizational measures (such as SSL encryption) to protect your personal data from unauthorized access, loss, or alteration.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last Updated” date.
11. Contact Us
If you have questions about this Privacy Policy, please contact:
Cards of the Ancients
Email:
Website: www.cardsoftheancients.com