1. Information We Collect
When you interact with Deckelio, we collect specific personal data to facilitate your experience. This includes identity data (name), contact data (email, billing and shipping addresses), financial data (payment card details via secure processors), and technical data (IP address, browser type, device information). We may also collect profile data such as your order history, wishlist items, and preferences for our luxury editions.
2. How We Use Your Data
We utilize your information to process and deliver your orders, manage your account, and provide customer support. Additionally, we use technical data to improve our website's functionality and security. With your explicit consent, we may also use your contact details to send you exclusive updates regarding new limited edition drops, artist series collaborations, or architectural deck releases.
3. Lawful Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), our lawful bases for processing your data include: the performance of a contract (to fulfill your orders), our legitimate interests (to run our business, provide administration, and secure our website), and your consent (for direct marketing communications). We ensure that our legitimate interests never override your fundamental rights and freedoms.
4. Data Sharing and Third Parties
We do not sell your personal data. We only share your information with trusted third parties necessary to fulfill our services. These include payment gateways (such as Stripe or PayPal), logistics and courier partners for shipping your decks, and IT service providers who host and secure our platform. All third parties are legally bound to strictly protect your data.
5. International Data Transfers
As an ecommerce business, we may transfer your data outside the United Kingdom to specific service providers. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as specific contracts approved for use in the UK which give personal data the same protection it has within the UK.
6. Data Retention Period
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. By law, we must keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.
7. Your Rights Under UK GDPR
You have the right to request access to your personal data, request correction of any inaccurate data, request erasure of your data, object to processing, request restriction of processing, and request the transfer of your data to another party. You may also withdraw consent at any time where we are relying on consent to process your personal data.
8. Contact Our Data Protection Officer
If you have any questions about this privacy policy or our privacy practices, please contact our Data Protection Officer. You can reach us via email at support@deckelio.com or by mail at Deckelio Cartomancy Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Need further assistance?
If you have any questions regarding how your data is handled, please reach out to our support team at support@deckelio.com.