1. Introduction
Next Level Trading Cards ("we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit or purchase from our online store, how we use it, and the choices you have. By using our site you agree to the practices described here.
2. Information We Collect
We collect the following categories of information:
- Account information — name, email address, password (hashed), and, if you choose to sign in with Google, the basic profile information Google provides (name, email, profile picture).
- Order & shipping information — billing and shipping address, phone number, items purchased, order total, and tracking details.
- Payment information — processed by our payment provider (Stripe). We do not store full card numbers on our servers.
- Communications — messages you send us through forms, email, or chat.
- Device & usage data — IP address, browser type, device identifiers, pages viewed, referring URL, and interactions with the site.
- Cookies & similar technologies — used for authentication, cart persistence, analytics, and advertising measurement.
3. How We Use Your Information
- Create and manage your account and authenticate sign-ins (including Google sign-in).
- Process, fulfil, and ship your orders and provide customer support.
- Send transactional emails (order confirmations, shipping updates, password resets).
- Detect, prevent, and address fraud, abuse, or security issues.
- Measure site performance, understand how visitors use the site, and improve our products.
- Personalize content and marketing, including advertising on third-party platforms (with your consent where required by law).
- Comply with legal obligations.
4. Analytics & Advertising Tools
We use third-party tools to understand how our site is used and to measure the effectiveness of our marketing. These tools may set cookies or collect device identifiers and behavioural data on our behalf:
- Google Analytics — measures site traffic and user behaviour. See Google's privacy policy at policies.google.com/privacy.
- Microsoft Clarity — captures session recordings and heatmaps to help us understand how users interact with the site. See Microsoft's privacy statement at privacy.microsoft.com.
- Meta (Facebook) Pixel & Conversions API — measures the performance of advertising on Facebook and Instagram and helps us show relevant ads. Some information about your activity and purchases (such as a hashed email, order value, and items) may be shared with Meta. See Meta's data policy at facebook.com/privacy/policy.
You can opt out of personalized advertising at youradchoices.ca (Canada), optout.aboutads.info (US), or youronlinechoices.eu (EU/UK).
5. Cookies
Cookies are small text files stored on your device. We use strictly necessary cookies (for authentication, security, and your shopping cart), performance cookies (analytics), and marketing cookies (advertising measurement). You can control cookies through your browser settings, but disabling them may affect site functionality such as staying signed in or completing checkout.
6. How We Share Information
We do not sell your personal information. We share it only with:
- Service providers who run the site on our behalf (hosting, database, email delivery, payment processing via Stripe, shipping rate calculation and fulfilment via ShipStation and carriers).
- Analytics and advertising partners listed above.
- Authentication providers (Google) when you choose to sign in with them.
- Legal & safety — when required to comply with the law, enforce our terms, or protect the rights, property, or safety of our users or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets.
7. Data Retention
We keep your information for as long as your account is active and as needed to provide our services, comply with legal obligations (including tax and accounting), resolve disputes, and enforce our agreements.
8. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at the address below. We will respond within the timeframe required by applicable law.
9. Children
Our site is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.
10. International Transfers
We are based in Canada and our service providers may process your information in Canada, the United States, the European Union, and other countries. Where required, we put appropriate safeguards in place for international transfers.
11. Security
We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes we will post the updated policy on this page and update the "Last updated" date above.