GDPR & Data Protection Compliance

Jurassic Cards Ltd is fully committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a UK‑registered company, we ensure that all customer information is collected, processed, and stored lawfully, transparently, and securely.

How We Use Your Data

We only collect information necessary to process orders, provide customer support, prevent fraud, and improve your shopping experience. This includes details such as your name, email address, delivery information, and order history. We never sell or share your data with third parties for marketing purposes.

Your Rights Under GDPR

You have the right to:

  • Access the personal data we hold about you

  • Request corrections to inaccurate information

  • Request deletion of your data (“right to be forgotten”)

  • Restrict or object to certain types of processing

  • Request a copy of your data in a portable format

To exercise any of these rights, contact us at info@jurassiccards.co.uk.

Data Security

We use secure, encrypted systems provided by Shopify and trusted payment processors to protect your information. Access to customer data is strictly limited to authorised personnel within Jurassic Cards Ltd.

Legal Basis for Processing

We process personal data under the following lawful bases:

  • Contractual necessity – to fulfil your orders

  • Legitimate interests – fraud prevention, business operations

    • Consent – for optional marketing communications

    Retention Period

    We retain customer records only for as long as necessary to meet legal, tax, and operational requirements. After this period, data is securely deleted.

    Contact Details

    Jurassic Cards Ltd 4 Lym Close Lyme Regis Dorset DT7 3DE United Kingdom Company No: 14327418 VAT No: GB423718110 Email: info@jurassiccards.co.uk