Privacy policy
This policy explains what HOLORUSHTCG collects when you use this website, why, and what you can do about it. It is written to be read, not to be defensible.
What we collect
When you buy something
Your name, email, billing address, shipping address and phone number. We need all five to take payment and get a parcel to you.
We never see your card number. Payment is handled by Shopify Payments and the card networks; the card details go from your browser to them and never touch our systems. What we receive back is the last four digits, the card brand, and whether it succeeded.
When you just browse
Our platform records the usual server-side things: pages viewed, the referring site, approximate location from your IP address, and your browser and device type. This is used to understand what people look at and to spot fraud and abuse.
When you contact us
Whatever you put in the message, plus your email address, kept so we can answer and so we have a record if the same issue comes back.
Cookies
Strictly necessary cookies keep your cart and your session working; the site cannot function without them. Analytics and advertising cookies are set only where you have consented, and you can change that at any time through the cookie preferences link in the footer.
Who we share it with
Only the companies that make the shop work, and only what each of them needs:
- Shopify — hosts the store and processes payments.
- Carriers (USPS, UPS, FedEx and their Canadian counterparts) — get your name, address and phone number so they can deliver.
- Canada Border Services Agency, for Canadian orders — a commercial invoice stating the contents and their value, which is a legal requirement for an export.
- Google, where you have consented to analytics or advertising cookies.
We do not sell your personal information and we do not share it for cross-context behavioural advertising.
How long we keep it
Order records are kept for seven years, because US tax rules require it. Support emails are kept for two years. Analytics data is kept for the retention period configured in the tool, which is 14 months by default.
Your choices
Email storeholorushtcg@gmail.com and we will, within 30 days: tell you what we hold about you, correct anything wrong, delete what we are not legally required to keep, or send you a copy in a portable format.
The CCPA/CPRA applies to businesses over roughly $25 million in annual revenue, or that buy, sell or share the personal information of 100,000 or more California residents. We meet neither threshold, so we are not subject to it — we honour access and deletion requests anyway, because it costs us nothing and it is the right default.
If you are in Canada, PIPEDA gives you these rights directly and you can complain to the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca. In the United States, the Federal Trade Commission enforces the representations made in this policy, at https://reportfraud.ftc.gov.
Children
This store is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.
Changes
If this policy changes materially we will say so on this page with the date, rather than quietly editing it.
Contact
HOLORUSHTCG
314 S Guadalupe St
Santa Fe, NM 87501
United States
Email storeholorushtcg@gmail.com · Phone +1 219-319-1323
Mon–Fri 9:00 am – 6:00 pm MT