Privacy policy
Privacy Policy
Last updated: April 14, 2026
THE CARD BAG operates this store and website, including all related information, content, features, tools, products, and services, in order to provide customers with a curated shopping experience (the “Service”). THE CARD BAG is powered by Shopify, which enables us to provide the Service to you. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit or use the Service, make a purchase or other transaction, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will apply with respect to the collection, processing, and disclosure of personal information.
Please read this Privacy Policy carefully. By using or accessing the Service, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Personal Information We Collect or Process
When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be associated with you or another individual. Personal information does not include information that is collected anonymously or that has been anonymized so that it cannot identify you.
Depending on how you use the Service, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from such personal information.
Contact information, including your name, address, billing address, shipping address, phone number, and email address.
Financial information, including credit card information, debit card information, financial account numbers, payment information, financial account information, transaction details, payment methods, payment confirmations, and other payment-related details.
Account information, including your username, password, security questions, preferences, and settings.
Transaction information, including products you viewed, products you added to your cart, products you added to your wishlist, purchases, returns, exchanges, cancellations, and past transaction history.
Communications with us, including information contained in communications with us, such as when you contact customer support.
Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.
Usage information, including information about your interactions with the Service, such as how and when you access the Service and how you navigate it.
Sources of Personal Information
We may collect personal information from the following sources.
Directly from you, including when you create an account, visit or use the Service, communicate with us, or otherwise provide your personal information.
Automatically through the Service, including from your device when you use our products and services or visit our website, and through cookies and similar technologies.
From our service providers, including when we engage them to provide certain technologies or to collect or process your personal information on our behalf.
From our partners and other third parties.
How We Use Your Personal Information
Depending on how you interact with us and the Service you use, we may use your personal information for the following purposes.
Providing, customizing, and improving the Service
We use personal information to provide the Service to you. This includes fulfilling our contract with you, processing payments, fulfilling your orders, remembering your preferences and products you are interested in, sending notifications related to your account, processing purchases, returns, exchanges, and other transactions, creating, maintaining, and managing your account, arranging shipping, facilitating returns and exchanges, enabling you to post reviews, and providing a customized shopping experience, such as recommending products related to your purchase history. This may include using your personal information to better customize and improve the Service.
Marketing and advertising
We use your personal information for marketing and promotional purposes. For example, this may include sending marketing, advertising, and promotional communications by email, text message, or postal mail, and displaying online advertisements within the Service or on other websites based on products and services you have previously purchased, added to your cart, or otherwise interacted with through the Service.
Security and fraud prevention
We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate, and respond to potential fraudulent, unauthorized, illegal, harmful, or malicious activity, protect public safety, and ensure the security of the Service. If you register an account through the Service, you are responsible for keeping your account credentials secure. We strongly recommend that you do not share your username, password, or other access information with anyone.
Communicating with you
We use personal information to provide customer support, respond to you promptly, provide effective services, and maintain our business relationship with you.
Legal reasons
We use your personal information to comply with applicable laws and to respond to valid legal processes, including requests from law enforcement or government authorities. We may also use your personal information to participate in or investigate civil discovery, potential or actual litigation, or other legal disputes, and to investigate and enforce potential violations of our Terms of Service or policies.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this Privacy Policy. Such circumstances may include the following.
With Shopify, and with vendors and other third parties who provide services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping.
With business and marketing partners who provide marketing services and deliver advertisements to you. For example, we use Shopify to support personalized advertising in collaboration with third-party services based on your online activity across different merchants and websites. Our business and marketing partners use your information in accordance with their own privacy policies. Depending on where you live, you may have the right to direct us not to share your information for targeted advertising or marketing based on your online activity across different merchants and websites.
When you direct, request, or consent to our disclosure of certain information to third parties, such as when we ship products to you or when you use social media widgets or login integrations.
With our affiliates or within our corporate group.
In connection with a business transaction, such as a merger or bankruptcy, to comply with applicable legal obligations, including responding to subpoenas, search warrants, and similar requests, to enforce applicable Terms of Service or policies, and to protect or defend the Service, our rights, and the rights of our users or others.
Our Relationship with Shopify
The Service is hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Service in order to provide and improve the Service for you. Information you submit to the Service may be transmitted to and shared with Shopify and with third parties that may be located outside your country of residence in order to provide and improve the Service for you.
In addition, in order to protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, other merchants, and Shopify. To provide these enhanced features, Shopify may use personal information collected about your interactions with our store, other merchants, and Shopify. In such cases, Shopify is responsible for processing your personal information and for responding to requests to exercise your rights regarding its use of personal information for these purposes.
To learn more about how Shopify uses your personal information and the rights you may have, please see the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights regarding your personal information through the Shopify Privacy Portal.
Third-Party Websites and Links
The Service may contain links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with or controlled by us, please review their privacy and security policies and other terms of use.
We do not guarantee, and are not responsible for, the privacy or security of such sites, or for the accuracy, completeness, or reliability of information found on these sites. Information you provide in public or semi-public areas, including third-party social networking platforms, may be viewed by other users of the Service and users of those third-party platforms without limitation as to its use by us or by the third party.
The inclusion of such links does not imply any endorsement or recommendation of the content of those platforms or of their owners or operators, unless explicitly stated on the Service.
Children’s Data
The Service is not intended for children, and we do not knowingly collect personal information from children who are under the age of majority in your jurisdiction. If your child has provided us with personal information and you are the child’s parent or guardian, you may contact us using the contact information below to request that the information be deleted.
As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell,” as those terms are defined under applicable law, personal information of individuals under the age of 16.
Security and Retention of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on various factors, including whether we need the information to maintain your account, provide the Service, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below regarding your personal information. However, these rights are not absolute, may apply only in certain circumstances, and we may decline your request where permitted by law.
Right to access / right to know
You may have the right to request access to the personal information we hold about you.
Right to delete
You may have the right to request that we delete personal information we hold about you.
Right to correct
You may have the right to request that we correct inaccurate personal information we hold about you.
Right to data portability
You may have the right to receive a copy of the personal information we hold about you and, under certain circumstances and exceptions, to request that we transfer it to a third party.
Managing communication preferences
We may send you promotional emails. You can opt out of receiving promotional emails at any time by using the unsubscribe option included in our emails. Even if you opt out, we may still send you non-promotional emails, such as important notices regarding your account or orders.
You may exercise these rights where indicated on the Service or by contacting us using the contact information below.
To learn more about how Shopify uses your personal information and the rights you may have, including rights related to data processed by Shopify, please visit:
https://privacy.shopify.com/en
We will not discriminate against you for exercising any of these rights. As permitted or required by applicable law, we may need to verify your identity before processing your request.
In accordance with applicable law, you may designate an authorized agent to make a request on your behalf. Before accepting such a request from an authorized agent, we may require the agent to provide proof that you have authorized them to act on your behalf, and we may also require you to verify your identity directly with us.
We will respond to your request within the time period required by applicable law.
Complaints
If you have a complaint about how we handle your personal information, please contact us using the contact information below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact information below, or to lodge a complaint with your local data protection authority.
International Transfers
Please note that we may transfer, store, and process your personal information outside your country of residence.
If we transfer your personal information outside the European Economic Area (EEA) or the United Kingdom, we will rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the relevant competent authority in the United Kingdom, where applicable, unless the destination country has been recognized as providing an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time due to changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last updated” date, and provide notice as required by applicable law.
Contact
If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise your rights, please contact us at: