Privacy Policy

ThunderDeck operates the Pokémon-card storefront at thunderdeck.com. For purposes of the Protection of Personal Information Act 4 of 2013 (“POPIA”), ThunderDeck is the responsible party for personal information processed through the store.

Privacy questions and requests can be sent to hello@thunderdeck.com.

Depending on how you use the store, we may process:

• account details such as your name, email address, profile image, account identifier, role, and sign-in timestamps;
• order and fulfilment details such as products, quantities, delivery address, contact number, payment status, and correspondence;
• messages and support information you send about orders, card condition, wanted cards, or collections;
• technical information such as IP address, browser or device information, security logs, and cookie or similar identifiers; and
• cart contents stored in your browser until checkout or removal.

We do not intend to store full payment-card details. Payment providers process those details under their own privacy terms.

We process personal information where necessary to create and secure accounts, provide the catalogue and cart, conclude and fulfil orders, deliver products, provide support, prevent fraud, keep financial and transaction records, enforce our terms, and comply with law.

Where required, we rely on consent—for example, for certain electronic direct marketing. You may withdraw marketing consent at any time without affecting lawful processing that occurred before withdrawal.

We share only the information reasonably needed with service providers that help operate ThunderDeck, including Clerk for authentication, Convex for application data and hosting, payment processors, delivery or courier partners, email providers, analytics or security providers, and professional advisers.

We may also disclose information where required by law, to protect users or our rights, during a business reorganisation, or with your instructions or consent. We do not sell personal information.

Some providers may process or store information outside South Africa. Where personal information crosses borders, we take reasonable steps to use recipients and safeguards that provide an adequate level of protection as required by POPIA.

ThunderDeck and its service providers may use necessary cookies or similar technologies for authentication, security, preferences, and site operation. The cart currently uses browser local storage so its contents remain available after refresh. You can clear cookies or site data in your browser, but doing so may sign you out or remove your saved cart.

We retain personal information only for as long as reasonably necessary for the stated purpose, legal obligations, dispute resolution, fraud prevention, and legitimate business records. Retention periods vary by record type. We then delete, destroy, or de-identify information where reasonably practicable.

We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security. Please use a strong password and promptly tell us if you suspect unauthorised account activity.

Subject to applicable law, you may ask whether we hold your personal information; request access to it; ask us to correct, update, delete, or restrict inaccurate or unlawfully held information; object to certain processing; withdraw consent; or opt out of direct marketing.

We may need to verify your identity before completing a request. You may also lodge a complaint with South Africa’s Information Regulator if you believe your personal information has been processed unlawfully.

The store is intended for customers who can lawfully enter into transactions. If you are under 18, please use ThunderDeck only with the involvement and consent of a parent or legal guardian. We do not knowingly process a child’s personal information without authorisation from a competent person where POPIA requires it.

We may update this policy as the store, providers, or legal requirements change. The latest version and effective date will appear on this page. Material changes may also be communicated through the site or account email.

Contact hello@thunderdeck.com for privacy requests, or visit our Contact Us page.