Privacy Policy

Privacy Policy — ManitobaTCG Effective Date: September 19, 2026 ManitobaTCG is committed to protecting your personal information and respecting your privacy. This policy explains what information we collect, how we use it, the services with which it may be shared, and the choices available to you. 1. Information We Collect We collect information reasonably necessary to process orders, provide customer service, operate the website, and protect our business. This may include: • Your name, email address, telephone number, and shipping or billing address • Account and authentication information • Products ordered, order value, order history, fulfilment method, and order reference • Payment status, transaction identifiers, and receipt information provided by our payment processors • Information included in support requests, product reports, trade-in requests, or other communications • Your privacy and advertising-consent choices • Technical information such as your IP address, browser type, device information, referring page, and pages visited • Website activity such as product views, searches, cart activity, checkout activity, and completed purchases We do not store complete payment-card numbers or online-banking credentials. Card payments are processed by Square, and other payment methods are handled through the applicable payment provider or payment process. 2. How We Use Your Information We use personal information to: • Process, verify, fulfil, and maintain orders • Process payments, refunds, trade-ins, and order adjustments • Communicate about purchases, payments, fulfilment, account activity, and support requests • Provide and secure customer accounts • Prevent fraud, abuse, and unauthorized activity • Maintain inventory and business records • Improve website functionality and customer experience • Comply with tax, bookkeeping, legal, and regulatory requirements • Measure and improve advertising when you have consented to optional advertising measurement We do not sell, rent, or trade your personal information. 3. When We Share Information We share information only when reasonably necessary to operate the business, provide requested services, measure advertising with your consent, or comply with the law. Recipients may include: • Payment processors, including Square • Shipping and delivery providers • Website hosting, database, content-management, authentication, and email-delivery providers • Service providers that help us prevent fraud, maintain security, or operate the website • Meta Platforms, when you consent to optional advertising measurement • Professional advisers, regulators, courts, law-enforcement authorities, or government agencies when disclosure is required or permitted by law These providers receive information relevant to the services they perform. Some providers may process information outside Canada. If ManitobaTCG or its assets are reorganized, sold, or transferred, personal information may be included in that transaction where permitted by law and subject to appropriate protections. 4. Cookies and Similar Technologies We use first-party cookies and similar technologies to operate the website, maintain sessions, remember preferences, support shopping-cart and account functionality, maintain security, and remember your privacy choices. Some cookies are necessary for the website to function. Disabling necessary cookies through your browser may prevent certain features from working correctly. Optional advertising technologies are disabled unless you select “Accept” in our privacy choices banner. You may decline optional advertising without affecting your ability to browse the website or place an order. 5. Optional Advertising and Conversion Measurement When you consent, we use advertising measurement tools provided by Meta Platforms, including the Meta Pixel and Meta Conversions API. These tools help us understand whether our advertising leads to website visits, product views, searches, cart activity, checkouts, or purchases. They also help us measure advertising performance and improve the relevance and effectiveness of our advertising. When optional advertising measurement is enabled, we may send Meta information about: • Page visits • Product views • Website searches • Products added to a cart • Checkout initiation • Purchases after payment has been confirmed The information transmitted may include: • Event type, event time, and webpage URL • Product variation identifiers, quantities, prices, and currency • Order value, fulfilment method, and order reference • Meta browser identifiers, including _fbp and _fbc when available • IP address and browser user-agent information • For completed purchases, information such as email address, telephone number, name, city, province, postal code, and country Contact and location fields sent through the server are normalized and transformed using SHA-256 hashing before transmission to Meta. Hashing does not make the information anonymous, but it allows Meta to attempt to match the information with an existing Meta account without receiving those fields in ordinary readable form. IP addresses, browser user agents, and Meta browser identifiers are not hashed because Meta uses them in their original form for event matching and attribution. We do not send Meta complete payment-card numbers, bank-account information, online-banking credentials, or complete street addresses. Browser and server versions of the same purchase may both be transmitted using a shared event identifier. This allows Meta to recognize them as the same transaction and avoid counting the purchase twice. Meta may use information received through these tools to match activity with Meta accounts, attribute purchases to advertising, create measurement reports, and optimize or deliver advertising. Meta may combine this information with information it already holds in accordance with its own policies. For more information about Meta’s privacy practices, visit: https://www.facebook.com/privacy/policy/ 6. Your Advertising Privacy Choices You can accept or decline optional advertising measurement using the privacy choices banner. You can change your selection later by choosing “Privacy Choices” in the website footer. Your selection is stored in a first-party cookie for up to 180 days. When that period expires, we may ask you to make a new selection. If you withdraw consent: • We stop intentionally sending new optional browser advertising events • We revoke the Meta Pixel’s consent state • We attempt to remove Meta’s _fbp and _fbc cookies from this website • Future server Purchase events will not be sent under the withdrawn or expired consent Withdrawing consent does not remove information transmitted before consent was withdrawn. You may use the privacy and advertising controls provided by Meta to manage information associated with your Meta account. We may retain a record of your consent selection for compliance, security, and auditing purposes, but we will not rely on an expired consent record to send new advertising events. 7. International Processing Some service providers, including Meta, may process information in Canada, the United States, or other countries. Information processed outside Canada may be subject to the laws of the country where it is processed and may be accessible to courts, law-enforcement authorities, national-security authorities, or other government agencies in that jurisdiction. We take reasonable steps to use reputable service providers and protect personal information under our control. 8. Data Retention and Safeguards We retain order records, payment records, account information, consent records, and related information for as long as reasonably necessary to: • Complete transactions and provide customer service • Maintain accurate business, tax, and bookkeeping records • Resolve disputes, refunds, chargebacks, and support requests • Detect fraud or security incidents • Meet legal and regulatory requirements Information that is no longer reasonably required is deleted, anonymized, or otherwise securely disposed of where practicable and subject to our legal obligations. We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. However, no internet transmission or electronic storage system can be guaranteed to be completely secure. 9. Your Rights and Requests Subject to applicable law, you may request: • Access to personal information we hold about you • Correction of inaccurate or incomplete information • Deletion of information where retention is not legally required • Information about how your personal information has been used or disclosed • Withdrawal of optional advertising consent • Assistance with a privacy concern or complaint We may need to verify your identity before fulfilling a request. Some information may need to be retained for legal, tax, fraud-prevention, security, or transaction-record purposes. 10. Changes to This Policy We may update this Privacy Policy when our practices, services, legal obligations, or technology change. When we make material changes, we will update the effective date and provide additional notice where appropriate. If an update introduces a materially different optional use of personal information, we will request new consent where required. 11. Contact For privacy-related questions, requests, or complaints, contact: Privacy Officer ManitobaTCG manitobatcg@gmail.com