Privacy Policy

CardVault sells Pokémon trading cards. This page explains what information we collect and why.

What we collect

• Order details you type at checkout: your name, your mobile number or Messenger/email, and your shipping address when you ask us to ship.
• Payment reference: the GCash reference number you send us. We never see or store your GCash login or PIN.
• Google sign-in (only if you use the stash): your name and email address from your Google account. We do not receive your Google password and we do not access anything else in your Google account.

How we use it

• To reserve, prepare, stash and ship your cards, and to confirm your payment.
• To show you your own orders and stash when you are signed in.
• To contact you about your order.

We do not sell your information and we do not use it for advertising.

Who can see it

Only the shop owner can see orders and stashes. Our website and database are hosted by Cloudflare and Supabase, which store the data for us. Your address is shared with a courier only to deliver your parcel.

Keeping and deleting your data

We keep order records for as long as needed to run the shop and handle any problems with an order. You can ask us to delete your account and personal details by contacting us using the details you were given when you placed an order.

Changes

We may update this page. The latest version is always here.