Privacy Policy
Top Deck Cards ("we", "us", "our") is operated by Top Deck Cards, a sole proprietorship based in London, Ontario, Canada. This policy explains what personal information we collect when you place an order on topdeckcards.ca, how we use it, and the choices you have.
We are committed to handling your information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. What we collect
We collect only what's needed to process your order and stay in touch about it.
- Information you give us at checkout — your name, email address, phone number (optional), shipping address (only if you choose shipping), and any notes you send with the order.
- Order contents — the list of cards ordered, their prices, and the order total.
- Anti-spam signals — if our bot-detection trigger fires on a submission, we log the IP address and browser identifier of that request for security purposes only.
- Local-only browser storage — your cart is stored in your browser's
localStorageso it survives reloads. This never leaves your device. We do not set tracking cookies on this site.
2. How we use your information
- To confirm your order, send payment instructions, and notify you of shipping or pickup.
- To contact you if there's a problem with your order (e.g., an item sold out before payment arrived).
- To keep accurate sales records for tax and recordkeeping purposes.
We do not sell your information. We do not use it for marketing or profile you across the web.
3. Who we share information with
We share data only with the service providers needed to run the store. Each has its own privacy practices, which apply to any data they process on our behalf:
- Cloudflare, Inc. — website hosting, content delivery, and transactional email delivery. Cloudflare may process technical information (IP address, request headers) as part of normal web hosting.
- Google LLC — your order details are recorded in a private Google Sheets workbook used only by us. Access is restricted to the store owner.
- Scryfall — card images and gameplay metadata shown on the site are loaded directly from Scryfall's public card database. No customer information is sent to Scryfall.
- Interac — payments are processed through Interac e-Transfer to an account held at TD Canada Trust. Your bank will handle payment information per its own privacy terms.
4. Cookies and similar technologies
We don't use advertising or analytics cookies. Your browser stores cart contents in localStorage (purely client-side) so your cart survives a refresh. No tracking pixels, no third-party analytics.
5. How long we keep your information
Order records (name, email, address, items, totals, order timestamps) are retained for seven (7) years so we can honour returns, handle warranty claims, and meet tax recordkeeping obligations. Cart data stored in your browser is yours to clear at any time via your browser's site-data settings.
6. Your rights
Under PIPEDA you have the right to access the personal information we hold about you, request corrections, or request deletion (subject to legal retention obligations for completed sales). To exercise any of these rights, email [email protected] from the address used to place your order. We aim to respond within 30 days.
7. Security
We use industry-standard transport encryption (HTTPS) for all traffic to this site. Our order database (Google Sheets) is protected by the store owner's Google account with two-factor authentication enabled. Despite reasonable safeguards, no online service can guarantee absolute security.
8. Children
The site is not directed to children under the age of majority in your province or territory. We do not knowingly collect personal information from minors without parental consent.
9. Changes to this policy
If we update this policy, we'll change the "Last updated" date at the top. Material changes (e.g., new categories of data collection, new service providers handling customer data) will be announced at the top of the site for at least 14 days.
10. Contact
Questions or privacy requests: [email protected]
Mail: 64 Virginia Cres, London, Ontario, N5X 3E8