Privacy Policy

ChogsCards operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). ChogsCards is powered by a custom frontend architecture integrated with Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

1. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Financial information including payment card information and transaction details (processed securely via encrypted third-party providers).
• Account information including your username, encrypted password credentials, Vault inventory allocations, and preferences.
• Transaction information including the items you view, put in your cart, purchase, return, or exchange.
• Communications with us including information you submit via customer support inquiries or Buylist submission forms.
• Device & Usage information including information about your device, browser, IP address, and how you interact with or navigate the Services.

2. Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, communicate with us, or place an order.
• Automatically through the Services including from your device when you use our website, and through the use of cookies and similar technologies.
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.

3. How We Use Your Personal Information

• Provide, Tailor, and Improve the Services: To perform our contract with you, process payments, fulfill orders, manage your private "Vault" allocations, facilitate returns, and create a customized shopping experience.
• Security and Fraud Prevention: To authenticate your account, provide a secure payment experience, and detect/investigate possible fraudulent activity (especially regarding high-value Buylist payouts or Vault withdrawals).
• Communicating with You: To provide customer support and send notifications related to your account or orders.
• Marketing and Advertising: To send promotional communications and show online advertisements based on your activity, where permitted by law.
• Legal Reasons: To comply with applicable law or respond to valid legal process.

4. How We Disclose Personal Information (Our Tech Stack)

To provide a seamless, high-performance experience, Chogs Cards utilizes specialized infrastructure. We may disclose your personal information to these third parties for legitimate purposes:

• Shopify: Powers our secure checkout processing, backend inventory management, and handles your payment methods.
• Supabase: Acts as our secure database infrastructure, encrypting and managing user login credentials, Vault inventory, and order history.
• Vercel: Hosts our website frontend and provides anonymized web traffic analytics.
• Payment & Logistics: Payment gateways (PayPal, Klarna) and shipping carriers to fulfill your orders.
• Legal Obligations: In connection with a business transaction, to comply with legal obligations, or to defend the rights of our users or others.

5. Relationship with Shopify

Our checkout and backend systems are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside.

In these circumstances, Shopify is responsible for the processing of your personal information. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information at the Shopify Privacy Portal.

6. Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide Services, comply with legal obligations, or resolve disputes.

7. Your Rights and Choices (UK GDPR)

If you reside in the UK or European Economic Area, and subject to exceptions provided by local law, you have the following rights:

• Right to Access / Know: Request access to personal information we hold about you.
• Right to Delete: Request that we delete personal information we maintain about you.
• Right to Correct: Request that we correct inaccurate personal information.
• Right of Portability: Receive a copy of your information to transfer to a third party.
• Objection / Restriction: Ask us to stop or restrict our processing of personal information.
• Withdrawal of Consent: Where we rely on consent, you have the right to withdraw it at any time.

8. International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in. If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority of the UK.

9. Contact & Complaints

Should you have any questions about our privacy practices, or if you would like to exercise any of the rights available to you, please contact us:

For the purpose of applicable data protection laws, we are the data controller of your personal information. If you have complaints about how we process your personal information, you have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK).