Who we are
DeckDorm (“DeckDorm”, “we”, “us”) designs and supplies TCG card storage and accessories to wholesale partners. This policy explains what personal data we collect through deckdorm.com and in the course of doing business with you, why we collect it, and what rights you have over it.
Our company details:
- Legal entity: [COMPANY LEGAL NAME]
- Registered address: [REGISTERED ADDRESS]
- Business registration no.: [REGISTRATION NUMBER]
- Data protection contact: sales01@deckdorm.com
We are the “data controller” for the information described below. Because we sell to businesses, most of the information we hold is business contact information rather than consumer data — but it is still personal data, and this policy still applies.
Information we collect
Information you give us. When you send a quote request, ask for a sample or email us, we collect what you enter: name, company name, business email address, phone or WhatsApp number, country, shipping address, the products and quantities you are interested in, and any artwork, files or specifications you send.
Information we create while handling an order. If you order, we also keep order records: proforma invoices, purchase orders, payment confirmations, shipping documents, inspection reports and correspondence.
Technical information. Our server and caching layer record standard web-server data such as IP address, browser type, the page requested and the time of the request. This is used for security, caching and troubleshooting.
We do not ask for and do not want sensitive personal data (for example health, political or biometric data). Please do not send it to us.
Why we use it
- To answer enquiries and prepare quotations, samples and orders.
- To produce, inspect, ship and invoice the goods you order.
- To arrange freight, customs clearance and delivery with carriers and agents.
- To meet accounting, tax, export-control and customs obligations.
- To protect the website against spam, abuse and fraud.
- To send you occasional product or industry updates where you have asked for them.
Legal bases (EEA and UK visitors)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (quoting, selling and shipping to you); legitimate interests (running a secure website, preventing fraud, keeping business records and contacting you about relevant products); legal obligation (tax, accounting, customs and export records); and consent (where you have opted in to marketing email, which you can withdraw at any time).
Cookies and similar technologies
This site uses a small number of strictly necessary cookies and cache entries — for example a session cookie and the page cache — to keep the site working and fast. We do not run advertising or cross-site tracking cookies on this site. If you contact us through a form, a short-lived cookie or token may be set to protect that form against spam and duplicate submissions.
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may break parts of the site.
Who we share it with
We do not sell or rent personal data. We share it only where needed to run the business:
- Hosting and email providers that operate our website and mailbox.
- Factories and production partners, for the limited details needed to make your goods.
- Freight forwarders, carriers, customs brokers and inspection agencies, to move and clear your shipment.
- Banks and payment providers, to receive and reconcile payment.
- Professional advisers and authorities, where we are legally required to provide information.
International transfers
We are based in China and work with partners in several countries, so your information may be transferred to and processed outside your own country, including in China, where our team and supplier records are held. Where personal data moves out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses, and on the practical safeguard of limiting each transfer to what an order actually requires.
How long we keep it
Enquiry and quotation records: up to 24 months after the last contact. Order, shipping, tax and accounting records: for the period required by the applicable law (typically 5–10 years). Marketing contacts: until you unsubscribe. Server logs: a short rolling period.
Your rights
If you are in the EEA, the UK, California or another jurisdiction with similar rules, you may have the right to:
- ask what personal data we hold about you and receive a copy;
- ask us to correct inaccurate data;
- ask us to delete data we no longer need;
- object to, or ask us to restrict, certain processing;
- ask for data you gave us in a portable format;
- withdraw consent to marketing at any time;
- complain to your local data protection authority.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA.
To exercise any of these rights, email sales01@deckdorm.com. We will respond within the time the applicable law requires, and may need to verify that the request comes from you or your company.
How we protect it
Access to enquiry and order data is limited to staff and partners who need it to do their job. Website access uses encrypted HTTPS. We keep software patched and apply a firewall and rate limiting to the site. No method of transmission or storage is completely secure, so we cannot promise absolute security.
Children
This is a business-to-business website. It is not directed at children and we do not knowingly collect personal data from anyone under 16.
Changes to this policy
We may update this policy from time to time. The version published on this page, with its “last updated” date, is the version that applies.
Contact
Questions about this policy or about your data? Email sales01@deckdorm.com or write to us at the registered address above.
Last updated: 22 September 2026