Last updated: October 1, 2026
1. Who is responsible for your data
The data controller is Card Dream, SASU with a share capital of €50,000, RCS Le Mans 919 148 601, 17 Chemin de Boulanderie, 72440 Bouloire, France. For any question about your data: hello@cardreamtcg.com.
2. Data we collect
- Orders: name, billing and delivery addresses, email address, phone number, products ordered, amounts and order history.
- Customer account: email address, password (stored in encrypted form) and addresses.
- Payment: payments are processed by our payment providers. Card Dream never sees or stores your full card details.
- Contact form and emails: your name, email address and the content of your message.
- Newsletter: your email address, if you subscribe.
- Technical data: IP address, browser type and cookies needed for the shop to work.
3. Why we use your data
- To process and deliver your orders, manage returns and provide customer service (performance of the contract).
- To comply with our legal obligations, in particular accounting and tax obligations.
- To prevent fraud and enforce purchase limits (legitimate interest).
- To send you our newsletter, only with your consent. You can unsubscribe at any time.
- To answer your messages (legitimate interest).
4. Who receives your data
Your data is only shared with the service providers we need to run the shop:
- Kinsta (website hosting, servers located in the European Union).
- Stripe and, where applicable, other payment providers offered at checkout (payment processing and fraud prevention).
- DHL and UPS (delivery: name, address, phone number and email for tracking).
- Our email and newsletter service providers.
- Our accountant and, where required by law, the competent authorities.
We never sell your data.
5. Transfers outside the European Union
Some of our providers, such as Stripe or Kinsta, are companies based in the United States. Where data is transferred outside the European Union, it is protected by appropriate safeguards, such as the standard contractual clauses approved by the European Commission.
6. How long we keep your data
- Order and invoice data: 10 years, as required by French accounting law.
- Customer account data: for as long as the account is active, then 3 years after your last activity.
- Contact messages: up to 3 years after our last exchange.
- Newsletter: until you unsubscribe.
7. Cookies
Card Dream uses essential cookies, which are necessary for the shop to work: keeping your cart, logging you in to your account, securing the checkout and payment, and remembering your cookie choice. These cookies do not require your consent.
With your consent, we may also use analytics cookies to understand how the site is used. They are only activated if you choose “Accept all” in the cookie banner. You can change your choice at any time with the “Cookie settings” link at the bottom of the site.
The “Our store” page displays a map provided by Google Maps. When you open this page, your browser connects to Google, which may collect your IP address and set its own cookies, under Google’s privacy policy.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. You can also withdraw your consent at any time. To exercise your rights, write to hello@cardreamtcg.com. We will answer within one month.
You also have the right to lodge a complaint with the data protection authority of your country, or with the French authority, the CNIL (www.cnil.fr).