Privacy Policy – Ember TCG

Last updated: 17 September 2026

Ember TCG values the privacy of customers and visitors of our webshop. In this privacy statement we explain which personal data we collect, why we use it, which parties data may be shared with and what rights you have.

1. Who is responsible for your personal data?

Ember TCG is a trade name of:

JVE ECOM
Drogendijk 12
3207 LE Spijkenisse
The Netherlands

Chamber of Commerce (KvK) number: 42035320
VAT number: NL005446450B03

For questions about privacy or to exercise your privacy rights, you can contact us via:

info@embertcg.nl

2. Which personal data do we process?

Which data we process depends on how you use our webshop.

We may process the following data, among others:

When placing an order

• first and last name;

• billing and delivery address;

• email address;

• telephone number, if you provide one;

• ordered products;

• order number;

• payment status and transaction data;

• chosen payment method;

• chosen shipping method;

• information about returns, refunds and complaints.

Full credit card and bank details are in principle not stored by Ember TCG itself. Payments are processed by the payment provider concerned.

When using our webshop

Depending on your settings and the consent given, the following may be processed, among others:

• IP address;

• browser and device data;

• date and time of visit;

• pages visited;

• shopping cart data;

• checkout data;

• technical log data;

• cookie and similar identifiers;

• interactions with advertisements or marketing campaigns.

When contacting Ember TCG

When you contact us, we may process:

• your name;

• email address;

• order number;

• the content of your message;

• photos or other files you send us yourself;

• previous communication relevant to your question or order.

When registering for pre-orders or draws

For certain popular products, Ember TCG may work with registration and random allocation.

For this we may process, among other things:

• name;

• email address;

• registration data;

• any previous or duplicate registrations;

• information needed to monitor product limits and a fair allocation.

This data may also be used to counter abuse, automated registrations or the circumvention of product limits.

3. No customer accounts

Ember TCG currently does not offer personal customer accounts.

When you place an order, Shopify may create a customer record that is necessary for processing and administering your order. This does not mean that you have a public or personal customer account with Ember TCG yourself.

4. What do we use personal data for?

We process personal data for, among other things:

• fulfilling and delivering orders;

• processing payments;

• sending order and shipping information;

• handling returns and refunds;

• customer service;

• pre-orders and product allocations;

• stock and product limits;

• preventing and investigating fraud and abuse;

• securing the webshop and keeping it technically functional;

• complying with tax and legal obligations;

• sending newsletters when you have given consent for this;

• sending reminders about an abandoned checkout when this is legally permitted;

• collecting customer feedback and reviews;

• measuring and improving marketing campaigns when you have given the required consent for this.

5. On which legal bases do we process data?

Under the General Data Protection Regulation (GDPR), a valid legal basis must exist for every processing operation.

Depending on the situation, we process personal data on the basis of:

Performance of an agreement

This applies, for example, to:

• your order;

• payment;

• shipping;

• returns;

• refunds;

• customer service relating to your order.

Actions you request yourself before an agreement is concluded may also fall under this.

Legal obligation

We must retain and process certain data in order to comply with, for example, tax and administrative obligations.

Consent

We ask for consent when this is legally required, for example for:

• email newsletters;

• certain marketing cookies;

• advertising and tracking pixels;

• personalised online advertisements.

You can always withdraw consent you have given.

Legitimate interest

In certain situations we process data because we or another party have a legitimate interest in doing so.

This may relate to, for example:

• fraud prevention;

• security of our webshop;

• protection against abuse;

• enforcement of product limits;

• preventing duplicate or fraudulent pre-order registrations;

• improving our services;

• protecting our legal interests;

• collecting non-promotional customer feedback.

In doing so, we weigh our interests against your privacy interests.

6. Shopify

Our webshop uses Shopify for, among other things, order processing, checkout, customer data, payments, fraud prevention and email functionality.

As a result, personal data may be processed by Shopify.

This may relate to, among other things:

• contact details;

• order data;

• delivery and billing data;

• payment and transaction data;

• IP addresses;

• device and browser data;

• browsing and shopping activity;

• cart and checkout data.

Shopify processes certain data on behalf of Ember TCG and may also process personal data independently for certain services of its own in accordance with Shopify's privacy policy.

7. Payments

Depending on the chosen payment method, personal data is shared with the payment provider that is necessary to carry out the payment.

Ember TCG uses or intends to use:

• Shopify Payments, including iDEAL and credit card payments;

• PayPal;

• Klarna.

The payment provider concerned may process, among other things, your name, contact details, payment details, transaction data, billing details and technical data.

Payment providers may also independently carry out checks to prevent fraud, money laundering and other forms of financial abuse.

If you choose Klarna, additional personal data may be processed for, for example, identification, credit assessment and offering the chosen payment option. This processing also takes place under Klarna's own terms and privacy statement.

8. Fraud and risk checks

Ember TCG uses the fraud prevention and risk functions available within Shopify and the payment providers used.

The following may be assessed, among other things:

• order data;

• payment data;

• IP address;

• billing and delivery address;

• previous transactions;

• unusual ordering patterns;

• possible duplicate orders;

• risk signals from payment providers.

This information may be used to check an order more closely, to hold it temporarily or, where justified, to cancel it.

We may also use such information to investigate fraud, abuse of product limits and other unlawful activities.

9. Shipping

To deliver your order, we share the data necessary for this with our carriers.

Ember TCG uses:

• PostNL;

• DHL.

The following may be shared, among other things:

• name;

• delivery address;

• email address;

• telephone number, if any;

• order or shipping reference.

The carrier uses this data to, among other things, deliver the parcel and inform you about the delivery.

10. Newsletter and marketing emails

You only receive our newsletter if you have signed up for it or if we are allowed to send marketing communication on another legal basis.

For email marketing we in principle use Shopify's email functionality, including Shopify Email or a successor Shopify service.

We may use newsletters for, for example:

• new releases;

• new stock;

• pre-orders;

• product drops;

• promotions;

• other relevant Ember TCG updates.

Every marketing email contains an option to unsubscribe.

After unsubscribing, we will no longer send you new marketing emails for which your consent is required. We may keep minimal data about your unsubscription to ensure that it is respected.

Transactional messages about, for example, an order, payment, return or important service information are not covered by a newsletter subscription.

11. Abandoned cart and checkout

If you entered your email address during checkout but did not complete the order, Shopify may store data about this abandoned checkout.

Ember TCG may send a reminder allowing you to resume the checkout if you have consented to such email marketing or if this is legally permitted on another basis.

These reminders may include information about the products that were in your abandoned checkout.

You can always unsubscribe from marketing communication.

12. Trustpilot and reviews

Ember TCG may use Trustpilot to collect and publish customer reviews.

When we use Trustpilot's automatic review invitations, we may share data insofar as necessary, such as:

• name;

• email address;

• order number or order reference;

• information showing that a purchase has taken place.

This data is used solely to enable a genuine customer to leave a review about Ember TCG, and insofar as this is legally permitted.

Leaving a review is always voluntary.

If you post a review on Trustpilot yourself, Trustpilot also processes your data in accordance with its own terms and privacy policy.

13. WhatsApp Channels

Ember TCG may use WhatsApp Channels to let interested people voluntarily follow updates about, for example:

• new drops;

• new stock;

• pre-orders;

• releases.

Following an Ember TCG channel is entirely voluntary and can be ended within WhatsApp.

WhatsApp Channels is offered by WhatsApp/Meta. When Channels is used, WhatsApp itself processes data about users, followers, interactions and use of the service in accordance with WhatsApp's own privacy policy.

Ember TCG does not use WhatsApp Channels as its primary customer service.

For questions about orders, returns, complaints or privacy requests, please contact us via:

info@embertcg.nl

14. Cookies and similar technologies

Our webshop uses cookies and similar technologies.

Some of these are necessary for the webshop to function properly, for example for:

• the shopping cart;

• checkout;

• security;

• payment processes;

• remembering certain settings.

Consent is not always required for strictly necessary cookies.

For cookies and similar techniques used for tracking, personalised advertisements or similar marketing purposes, we ask for prior consent where legally required.

Via our cookie banner you can indicate which non-essential cookies you do or do not accept.

You can change your choice again later.

15. Meta and Google

For online advertising, Ember TCG may use services from, among others:

• Meta, including Facebook and Instagram;

• Google, including Google Ads.

When these marketing functions are enabled, technologies such as advertising pixels, tags or similar systems may be used.

These may process data about, for example:

• pages visited;

• products viewed;

• additions to the shopping cart;

• checkouts started;

• purchases;

• IP address;

• device and browser information;

• cookie or advertising identifiers.

Where legally required, such marketing and tracking technologies are only activated after you have given consent for this via our cookie settings.

We currently do not use Google Analytics.

Meta and Google may also process the data they receive in accordance with their own privacy terms.

16. Technical service providers

To make the webshop technically available and to manage it, we use various service providers.

These may include:

GitHub

Parts of the technical infrastructure or website code of Ember TCG may be hosted or delivered via GitHub.

Depending on the technical configuration, GitHub may process technical information in this context, such as IP addresses, server logs and request data.

Vimexx

Vimexx is used for domain and related technical services around embertcg.nl.

Insofar as necessary for those services, Vimexx may process technical or administrative data.

Shopify

Shopify provides a major part of Ember TCG's e-commerce infrastructure, checkout and order processing.

Which party actually receives personal data depends on the technical setup and on the functions you use during your visit.

17. With whom do we share personal data?

We do not sell your personal data to third parties in exchange for money.

We only share personal data when this is necessary or permitted, for example with:

• Shopify;

• payment providers;

• carriers;

• IT and hosting providers;

• email service providers;

• Trustpilot;

• Meta and Google when marketing functionalities are enabled and the required consent has been obtained;

• accountants, bookkeepers or other professional advisers when necessary;

• government authorities when we are legally obliged to provide data.

In doing so, we try not to share more data than is necessary for the purpose concerned.

18. Processing outside the European Economic Area

Some of our service providers are international companies and may process or store personal data outside the Netherlands or the European Economic Area (EEA).

When personal data is transferred to a country outside the EEA for which no equivalent level of protection has been established, appropriate legal safeguards must be used.

This may take place, for example, on the basis of:

• an adequacy decision of the European Commission;

• approved standard contractual clauses;

• other legally permitted transfer mechanisms.

For more information about international data processing by a specific service provider, you can consult that party's privacy policy.

19. How long do we keep personal data?

We do not keep personal data longer than necessary for the purpose for which it was collected, unless a statutory retention obligation requires a longer period.

Order and administrative data

Data that forms part of our tax records is in principle kept for at least 7 years.

If a longer tax retention obligation applies to certain cross-border transactions, for example under applicable One Stop Shop rules, relevant data may be kept for 10 years.

Customer service and complaints

We keep correspondence as long as reasonably necessary to handle the question, order, complaint or any dispute.

Data may be kept longer when this is necessary for establishing, exercising or defending legal claims.

Newsletter

Your email address remains registered for marketing purposes until you unsubscribe or until the marketing activity concerned is ended.

After unsubscribing, minimal data may be kept to record and respect your unsubscription.

Abandoned checkouts

Data about abandoned checkouts is not kept longer than necessary for checkout recovery, fraud prevention, technical analysis and other legitimate purposes, unless the checkout still results in an order or a longer retention period is necessary.

Fraud and security

Data necessary for preventing or investigating fraud or abuse may be kept as long as there is a legitimate need for this.

Service providers such as Shopify and payment providers may also apply their own retention periods for data they process under their own legal responsibilities.

20. Security

We take appropriate technical and organisational measures to protect personal data against, among other things:

• unauthorised access;

• loss;

• unwanted modification;

• disclosure;

• abuse.

Where possible, we make use of the security provisions of professional e-commerce, payment and infrastructure providers.

However, no digital system can guarantee complete security.

21. Your privacy rights

When the GDPR applies, depending on the situation you have the right, among other things, to:

• access your personal data;

• have incorrect data corrected;

• have personal data deleted;

• have the processing of personal data restricted;

• object to certain processing operations;

• have certain data transferred;

• withdraw consent given earlier.

Withdrawing consent has no consequences for processing that lawfully took place before the withdrawal.

Do you want to exercise one of these rights? Send an email to:

info@embertcg.nl

Clearly state which privacy request it concerns.

We may ask for additional information when this is reasonably necessary to verify your identity before we provide or change personal data.

22. Objection to direct marketing

You always have the right to object to the use of your personal data for direct marketing.

For email marketing you can use the unsubscribe option at the bottom of the email.

You can also contact us for this via:

info@embertcg.nl

23. Complaint about the processing of personal data

Do you have a complaint about the way Ember TCG handles your personal data? Then preferably contact us first via:

info@embertcg.nl

You also have the right to lodge a complaint with the competent supervisory authority.

For Ember TCG, in the Netherlands that is the:

Autoriteit Persoonsgegevens (Dutch Data Protection Authority)

If you live in another EU country, you may under certain circumstances also contact the privacy supervisory authority of that country.

24. Links and services of external parties

Our webshop may contain links to external websites or services.

When you use an external website or service, the privacy policy of that party applies.

Ember TCG is not responsible for the way an independent third party processes personal data within its own services.

25. Changes to this privacy statement

We may change this privacy statement when, for example:

• our services change;

• we add new payment or shipping methods;

• we use new marketing technology;

• laws or regulations change.

The most recent version is always published on our webshop.

In the event of important changes, we may provide additional information when this is appropriate or legally necessary.

26. Contact

For questions about this privacy statement or the use of your personal data, you can contact us via:

Ember TCG / JVE ECOM
Drogendijk 12
3207 LE Spijkenisse
The Netherlands

Email: info@embertcg.nl