Last updated: March 12, 2026

At ZeniTCG, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit zenitcg.com, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with our store.

By using ZeniTCG, you acknowledge the practices described in this Privacy Policy.

1. About ZeniTCG

ZeniTCG is an independent online retailer specializing in Pokémon Trading Card Game products and collectibles.

ZeniTCG is operated by a French SAS – Société par actions simplifiée.

SIRET: 950 725 515 00015
Email: contact@zenitcg.com
Website: zenitcg.com

For the purposes of applicable data protection laws, ZeniTCG is responsible for determining how and why personal information collected through our store is processed, except where another service provider acts independently as a data controller.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected when you:

• Visit zenitcg.com
• Browse our products
• Create or use a customer account
• Add products to your cart
• Place an order
• Make a payment
• Join a waitlist
• Place a pre-order
• Subscribe to marketing communications
• Contact customer support
• Participate in a promotion
• Use website features
• Interact with cookies or similar technologies

This Privacy Policy does not govern websites or services operated independently by third parties.

3. Personal Information We Collect

Depending on how you interact with ZeniTCG, we may collect different categories of personal information.

Contact Information

This may include:

• First name
• Last name
• Email address
• Telephone number
• Billing address
• Shipping address
• Country or region

Account Information

If customer accounts are available, we may collect information such as:

• Account email
• Account credentials or authentication information
• Saved addresses
• Order history
• Account preferences

Order & Transaction Information

When you purchase from ZeniTCG, we may collect:

• Products purchased
• Order number
• Order date
• Order value
• Discounts used
• Promotional offers used
• Shipping method
• Delivery status
• Returns or refund information
• Payment status
• Transaction identifiers

4. Payment Information

Payments are processed through payment processors and payment services available through our ecommerce platform.

Depending on the payment method selected, payment information may be processed by providers such as Shopify or other payment service providers.

ZeniTCG may receive information such as:

• Payment status
• Payment method type
• Transaction identifier
• Billing information
• Limited payment details necessary to manage the transaction

Complete payment credentials may be processed directly by the relevant payment provider rather than stored directly by ZeniTCG.

5. Device & Technical Information

When you access our website, certain technical information may be collected automatically.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Device identifiers
• Network information
• General geographic location
• Language
• Time zone
• Referring website
• Pages visited
• Products viewed
• Shopping activity
• Cart activity
• Website interactions

Shopify itself may process information such as IP addresses, device identifiers, browser information and browsing or purchasing activity when consumers interact with Shopify-powered stores or Shopify consumer services.

6. Customer Support Information

If you contact us, we may collect the information contained in your communication.

This can include:

• Your name
• Email address
• Order number
• Message contents
• Photographs
• Shipping information
• Product information
• Information relating to damaged or missing orders

We use this information to respond to your request and provide customer support.

7. Information We Receive From Third Parties

We may receive personal information from third parties involved in operating our store.

These may include:

• Shopify
• Payment processors
• Shipping carriers
• Fraud-prevention services
• Analytics providers
• Advertising platforms
• Ecommerce applications
• Customer-support providers

The information received depends on the service being provided.

8. How We Use Personal Information

We may use personal information to:

• Process orders
• Accept payments
• Confirm purchases
• Deliver products
• Manage pre-orders
• Provide tracking information
• Manage customer accounts
• Process refunds and returns
• Respond to customer inquiries
• Investigate damaged or missing parcels
• Prevent fraud
• Protect our website
• Detect suspicious transactions
• Improve our website
• Understand website usage
• Analyze store performance
• Remember customer preferences
• Provide personalized shopping experiences where permitted
• Send marketing communications where permitted
• Operate promotions
• Comply with legal obligations
• Maintain business and accounting records
• Establish, exercise or defend legal claims

9. Legal Bases for Processing

Where the GDPR, UK GDPR or similar legislation applies, we process personal information only where we have an appropriate legal basis.

Depending on the circumstances, this may include:

Performance of a Contract

We process information necessary to:

• Accept your order
• Process your payment
• Ship your products
• Manage your account
• Handle returns
• Provide customer support relating to your purchase

Legal Obligations

We may process or retain information where necessary to comply with:

• Tax obligations
• Accounting obligations
• Consumer-protection requirements
• Fraud-prevention requirements
• Court orders
• Other applicable laws

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights.

These interests may include:

• Preventing fraud
• Protecting our website
• Improving our store
• Understanding business performance
• Managing customer relationships
• Defending legal claims

Consent

Where required, we may rely on your consent for activities such as:

• Marketing emails
• Advertising cookies
• Certain analytics technologies
• Certain personalization technologies

You may withdraw your consent where applicable.

European data-protection rules require businesses to identify the purposes and legal basis for processing and to provide transparent information about their data practices.

10. Shopify

Our online store is powered by Shopify.

Shopify provides the ecommerce infrastructure that allows us to:

• Display products
• Manage carts
• Process orders
• Manage customer accounts
• Facilitate payments
• Operate checkout
• Provide ecommerce security
• Manage certain privacy features

As part of providing these services, Shopify may process personal information relating to customers and visitors.

Shopify states that customer information may include contact information, device information, shopping activity, transaction details and other information generated when interacting with Shopify-powered merchants.

Shopify and its service providers may process personal information in countries outside your country of residence. Shopify's Data Processing Addendum provides for international processing and transfers in accordance with applicable data-protection requirements.

Shopify may also process certain information independently under its own privacy policies.

11. How We Share Personal Information

We may disclose personal information where necessary to operate ZeniTCG.

This may include sharing information with the following categories of recipients.

Ecommerce Platform Providers

Including Shopify and related infrastructure providers.

Payment Providers

Information may be shared with payment processors to:

• Process payments
• Verify transactions
• Prevent fraud
• Process refunds

Shipping & Logistics Providers

We may provide information such as your:

• Name
• Shipping address
• Telephone number
• Email address
• Order information

to carriers and logistics providers where necessary to deliver your order.

Technology Providers

We may use service providers that assist with:

• Website hosting
• Email
• Customer support
• Analytics
• Security
• Fraud prevention
• Store functionality

Marketing & Advertising Providers

Where permitted by applicable law and based on our website configuration, information may be disclosed to advertising or marketing providers for:

• Advertising measurement
• Campaign performance
• Audience measurement
• Personalized advertising

Where consent is required, these technologies will be subject to applicable consent requirements.

Professional Advisers

We may disclose information where reasonably necessary to:

• Accountants
• Lawyers
• Insurers
• Tax advisers
• Other professional advisers

Government & Legal Authorities

We may disclose personal information where required by applicable law, regulation, court order or lawful government request.

12. We Do Not Sell Your Personal Information for Money

ZeniTCG does not sell personal information to third parties in exchange for money.

However, some privacy laws use broader definitions of terms such as “sale,” “sharing,” or “targeted advertising.”

Depending on the advertising, analytics or ecommerce features enabled on our website, certain disclosures to advertising or technology partners could potentially be treated as “sharing” under applicable U.S. privacy laws.

Where such laws apply, eligible customers may have the right to opt out.

California law, for example, provides eligible consumers with rights concerning the sale or sharing of personal information and certain forms of targeted advertising.

13. Cookies & Similar Technologies

ZeniTCG and our service providers may use cookies, pixels, local storage and similar technologies.

These technologies may be used to:

• Operate the website
• Maintain shopping carts
• Remember preferences
• Enable checkout
• Improve security
• Prevent fraud
• Measure website performance
• Understand customer interactions
• Analyze traffic
• Support marketing
• Display relevant advertising where permitted

14. Types of Cookies

Cookies used on our website may include:

Strictly Necessary Cookies

These cookies are required for functions such as:

• Shopping carts
• Checkout
• Security
• Authentication
• Network management

Functional Cookies

These may remember preferences and improve website functionality.

Analytics & Performance Cookies

These may help us understand:

• Website traffic
• Popular products
• User interactions
• Website performance

Advertising Cookies

Where enabled and permitted, these technologies may be used to:

• Measure advertising campaigns
• Understand advertising performance
• Personalize advertising
• Avoid displaying irrelevant advertisements

In the EU and similar jurisdictions, non-essential tracking technologies generally require an appropriate consent mechanism, while strictly necessary technologies may fall within applicable exemptions.

15. Cookie Preferences

Where available, you can manage your cookie preferences through the privacy or cookie controls displayed on zenitcg.com.

You may be able to:

• Accept cookies
• Reject non-essential cookies
• Customize cookie categories
• Change previous preferences

Your browser may also allow you to block or delete cookies.

Blocking certain essential technologies may affect the operation of some website functions.

Shopify provides merchants with customer-privacy settings that can include a cookie banner, customer preference controls and a data-sharing opt-out page.

16. Marketing Communications

Where permitted by applicable law, we may send you marketing communications relating to:

• New Pokémon TCG releases
• Pre-orders
• Restocks
• Promotions
• Special offers
• New products
• ZeniTCG updates

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting:

contact@zenitcg.com

Unsubscribing from promotional communications does not prevent us from sending transactional communications relating to an existing order.

Where GDPR or UK GDPR applies, individuals have a specific right to object to the processing of their information for direct-marketing purposes.

17. Order Communications

Even if you unsubscribe from marketing emails, we may continue to send necessary service communications such as:

• Order confirmations
• Payment notifications
• Shipping confirmations
• Tracking information
• Pre-order updates
• Security notifications
• Return or refund information
• Customer-support responses

These communications are necessary to manage your relationship and transactions with ZeniTCG.

18. Analytics

We may use analytics technologies to understand how visitors use zenitcg.com.

Analytics information may help us understand:

• Visitor numbers
• Website performance
• Popular pages
• Popular products
• Conversion performance
• Navigation patterns
• Technical errors

Where applicable law requires consent for analytics technologies, we will use them subject to the applicable consent requirements.

19. Advertising

ZeniTCG may use online advertising platforms to promote our products.

Depending on the tools enabled, advertising providers may receive information about:

• Website visits
• Product views
• Shopping activity
• Advertising interactions
• Device information
• Cookie or advertising identifiers

This information may be used to measure advertising performance or deliver relevant advertising where legally permitted.

Where required, customers will be provided with appropriate choices regarding advertising-related data processing.

20. Fraud Prevention & Security

We may process personal information to:

• Detect fraudulent transactions
• Identify unauthorized payment activity
• Prevent account abuse
• Protect customers
• Protect ZeniTCG
• Protect our payment systems
• Enforce purchase limits
• Investigate suspicious orders
• Reduce chargeback fraud

Fraud-prevention providers and payment processors may use automated systems to assess transaction risk.

21. Automated Processing

Certain ecommerce, payment, security or fraud-prevention tools may use automated processing.

This may result in an order being:

• Flagged for review
• Temporarily held
• Subject to additional verification
• Refused by a payment provider

Where applicable law gives individuals rights relating to decisions based solely on automated processing that produce legal or similarly significant effects, those rights remain unaffected.

22. International Data Transfers

ZeniTCG serves customers internationally and uses service providers that may operate across multiple countries.

As a result, personal information may be processed outside your country of residence.

This may include countries in which:

• Shopify operates
• Payment processors operate
• Cloud providers operate
• Shipping or technology providers operate

Where international transfers are subject to GDPR, UK GDPR or other applicable requirements, appropriate transfer mechanisms or safeguards will be used where required.

Shopify expressly provides that customer data may be processed in countries where Shopify, its affiliates or service providers operate and that applicable transfer requirements are addressed through its data-processing arrangements.

23. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

• Complete transactions
• Maintain order records
• Provide customer support
• Manage returns
• Prevent fraud
• Comply with accounting requirements
• Comply with tax requirements
• Resolve disputes
• Enforce agreements
• Establish or defend legal claims

Different categories of information may be retained for different periods.

Where a legal retention period applies, information may be retained for the period required by law.

Marketing information may generally be retained until consent is withdrawn, you unsubscribe, or retention is no longer reasonably necessary, subject to applicable law.

GDPR transparency requirements include informing individuals about retention periods or the criteria used to determine them.

24. Data Security

We use reasonable organizational, technical and administrative measures designed to protect personal information.

Our ecommerce and technology providers may also maintain their own security measures.

However, no method of transmitting information over the internet or storing electronic information can guarantee absolute security.

Customers are responsible for keeping any account credentials confidential.

25. Your Privacy Rights

Depending on where you live, you may have privacy rights relating to your personal information.

These rights may include the right to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of information
• Restrict certain processing
• Object to certain processing
• Withdraw consent
• Request data portability
• Opt out of certain marketing
• Opt out of certain data sharing or targeted advertising
• Lodge a complaint with an applicable supervisory authority

These rights are not absolute and may be subject to legal exceptions.

Under GDPR, individuals may have rights including access, rectification, erasure, restriction, objection and portability.

UK GDPR provides comparable individual rights.

26. Exercising Your Rights

To submit a privacy request, contact:

contact@zenitcg.com

Please include enough information for us to identify your request.

We may need to verify your identity before responding where reasonably necessary or legally required.

We will respond within the period required by applicable law.

We may retain certain information despite a deletion request where retention is necessary or legally permitted, including for:

• Legal obligations
• Tax records
• Fraud prevention
• Dispute resolution
• Legal claims

27. European Union & EEA Customers

If GDPR applies to you, you may have rights including:

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability
• Withdrawal of consent

You may also have the right to lodge a complaint with a competent data-protection authority.

Because ZeniTCG operates from France, the CNIL – Commission Nationale de l'Informatique et des Libertés is the French data-protection supervisory authority.

GDPR expressly recognizes rights of access, correction, erasure, restriction, objection and portability, as well as the right to complain to a supervisory authority.

28. United Kingdom Customers

Where UK GDPR applies, customers may have rights including:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure in certain circumstances
• The right to restrict processing
• The right to data portability in applicable circumstances
• The right to object
• Certain rights relating to automated decision-making

These rights are described by the UK Information Commissioner's Office.

29. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights where the relevant state privacy legislation applies to ZeniTCG.

Depending on applicable law, these rights may include:

• The right to know or access certain information
• The right to request deletion
• The right to correct inaccurate information
• The right to opt out of certain sales or sharing
• The right to opt out of targeted advertising
• The right to limit certain uses of sensitive personal information
• The right not to receive unlawful discriminatory treatment for exercising privacy rights

For example, California law recognizes rights concerning access, deletion, correction and opting out of the sale or sharing of certain personal information where the CCPA applies.

Not every U.S. privacy law applies to every business or transaction.

Where applicable, ZeniTCG will provide the rights required by relevant law.

30. California Residents

If the California Consumer Privacy Act and related California privacy requirements apply to ZeniTCG and your personal information, eligible California residents may exercise applicable privacy rights.

As stated above:

ZeniTCG does not sell personal information for money.

However, certain disclosures for advertising purposes may potentially qualify as “sharing” under California law depending on the tools enabled.

Where legally required, eligible customers may opt out through the privacy controls made available on our website or by contacting:

contact@zenitcg.com

California recognizes an opt-out right regarding certain sale or sharing of personal information.

31. Canadian Customers

Where Canadian privacy law applies, ZeniTCG processes personal information in accordance with applicable requirements.

Eligible individuals may have rights concerning:

• Transparency
• Consent
• Access
• Correction
• Appropriate safeguards

Canada's federal PIPEDA framework establishes principles governing collection, use and disclosure of personal information in commercial activities, including access and accountability requirements.

Certain Canadian provinces may apply their own privacy legislation.

32. UAE Customers

Customers in the United Arab Emirates retain any privacy rights available to them under applicable UAE data-protection legislation.

Depending on the applicable circumstances, UAE data-protection law provides individuals with rights relating to personal data, including certain rights concerning correction and restriction or cessation of processing.

Nothing in this Privacy Policy is intended to remove rights that cannot legally be waived.

33. Children's Privacy

ZeniTCG sells collectible trading card products that may be of interest to people of different ages.

However, we do not knowingly collect or process children's personal information in violation of applicable privacy law.

Where a minor does not have the legal capacity to place an order independently, the purchase should be completed or authorized by a parent or legal guardian as required by applicable law.

If you believe a child has provided personal information to ZeniTCG improperly, contact:

contact@zenitcg.com

We will review the request and take appropriate action where required.

34. Third-Party Websites & Services

zenitcg.com may contain links to websites or services operated by third parties.

These may include:

• Payment providers
• Shipping providers
• Social networks
• Shopify services
• Other external platforms

Third-party websites operate under their own privacy policies.

ZeniTCG is not responsible for the independent privacy practices of third-party websites.

35. Social Media

If you interact with ZeniTCG through social-media platforms, the platform may independently collect and process information according to its own privacy policy.

Information you choose to send directly to ZeniTCG through social media may also be used to respond to your communication.

36. Business Transfers

If ZeniTCG or the business operating it is involved in a merger, acquisition, restructuring, financing, sale or transfer of all or part of its business, personal information may be disclosed or transferred as part of that transaction where permitted by law.

Any recipient will remain subject to applicable data-protection obligations.

37. Legal Disclosure

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with applicable law
• Respond to a valid legal request
• Protect our legal rights
• Protect customers
• Investigate fraud
• Enforce our agreements
• Protect the security of our website
• Prevent illegal activity

38. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our services
• Changes to our technology
• New service providers
• Changes to our privacy practices
• Legal or regulatory developments

The updated version will be published on zenitcg.com with a revised Last updated date.

Where required by applicable law, we will provide additional notice of material changes.

39. Contact Us

For questions regarding this Privacy Policy or the processing of your personal information, or to exercise an applicable privacy right, contact:

ZeniTCG
French SAS
SIRET: 950 725 515 00015

Privacy Contact: contact@zenitcg.com
Website: zenitcg.com