MYTHIC RIFT PRIVACY POLICY
Last updated: [12 August 2026]
This Privacy Policy explains how Mythic Rift collects, uses, stores and shares personal information when you visit our website, contact us, register an interest in a product, join a waitlist, subscribe to marketing communications or purchase products from us.
1. ABOUT MYTHIC RIFT
1.1 Mythic Rift Ltd is the data controller responsible for personal information processed in connection with the Mythic Rift website and our retail activities.
1.2 Mythic Rift Ltd is registered in England and Wales under company number [INSERT COMPANY NUMBER].
1.3 Our registered office is [INSERT REGISTERED OFFICE ADDRESS].
1.4 You can contact us regarding privacy or data protection matters at [privacyquestions@mythicrift.co.uk].
1.5 In this Privacy Policy, references to “Mythic Rift”, “we”, “us” and “our” mean Mythic Rift Ltd.
2. DATA PROTECTION LAW
2.1 We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.
2.2 We aim to collect and use personal information lawfully, fairly and transparently.
2.3 We will only collect personal information that is reasonably necessary for legitimate business, contractual, legal or customer-service purposes.
2.4 We will take reasonable steps to ensure that personal information is accurate, secure and retained for no longer than reasonably necessary.
3. PERSONAL INFORMATION WE MAY COLLECT
3.1 The personal information we collect will depend on how you interact with Mythic Rift.
3.2 When you place an order, we may collect your name, email address, telephone number, billing address, delivery address and order details.
3.3 We may collect information about the products you purchase, quantities ordered, prices paid, discounts used, returns requested, refunds issued and communications relating to your order.
3.4 When you register an interest in a product or join a product waitlist, we may collect your email address and information identifying the product in which you expressed an interest.
3.5 When you contact us, we may collect your name, contact information and the contents of your correspondence.
3.6 If you create a customer account, we may collect information associated with that account, including login information, saved addresses and order history.
3.7 If you subscribe to marketing communications, we may collect your email address, marketing preferences and information about your consent.
3.8 When you browse our website, technical information may be collected automatically, including your IP address, browser type, device type, operating system, pages visited, referring website and general interaction with our website.
3.9 We may collect information through cookies and similar technologies in accordance with our Cookie Policy and your cookie preferences.
3.10 We do not normally receive or store your complete debit or credit card number. Payment information is processed by third-party payment providers.
4. HOW WE COLLECT PERSONAL INFORMATION
4.1 We may collect personal information directly from you when you place an order, complete a form, contact us, join a waitlist, subscribe to communications or otherwise interact with us.
4.2 We may collect certain technical information automatically when you access or use our website.
4.3 We may receive information from third parties involved in processing or fulfilling your order, including payment providers, delivery companies and fulfilment providers.
4.4 We may receive information from service providers that help us operate, secure, analyse or improve our website and retail activities.
5. PURPOSES FOR WHICH WE USE PERSONAL INFORMATION
5.1 We use personal information where it is reasonably necessary to operate Mythic Rift and provide our products and services.
5.2 We may use your personal information to process, accept and fulfil orders.
5.3 We may use your personal information to process payments, confirm transactions and prevent payment fraud.
5.4 We may use your personal information to arrange delivery and provide order tracking.
5.5 We may use your personal information to process cancellations, returns, refunds and complaints.
5.6 We may use your personal information to respond to customer-service enquiries.
5.7 We may use your personal information to provide product waitlist or stock-availability notifications that you have requested.
5.8 We may use personal information to manage customer accounts where such functionality is available.
5.9 We may use personal information to comply with accounting, tax, legal and regulatory obligations.
5.10 We may use personal information to detect, investigate or prevent fraud, abuse, security incidents or misuse of our website.
5.11 We may use technical and analytical information to monitor website performance, understand how visitors use our website and improve customer experience.
5.12 Where permitted, we may use personal information to communicate with customers about Mythic Rift products, services, releases, promotions and news.
6. LAWFUL BASES FOR PROCESSING
6.1 UK data protection law requires us to have a lawful basis for processing personal information.
6.2 Where you place an order or ask us to take steps before purchasing a product, we will normally process your personal information because the processing is necessary to perform or prepare to enter into a contract with you.
6.3 Where we are legally required to retain or disclose information, we may process that information because the processing is necessary to comply with a legal obligation.
6.4 We may rely on our legitimate interests where reasonably necessary to operate and protect our business, provide customer service, prevent fraud, secure our website, maintain business records and improve our services.
6.5 Where we rely on legitimate interests, we will consider whether those interests are proportionate and whether they unduly interfere with your rights and interests.
6.6 Where consent is required, including in relation to certain electronic marketing or non-essential cookies, we will rely on your consent.
6.7 Where processing is based on consent, you may withdraw that consent at any time.
7. ORDERS AND PURCHASES
7.1 When you purchase from Mythic Rift, we need certain personal information to process the transaction and fulfil your order.
7.2 We may use your name, delivery address, email address, telephone number and order details to manage the transaction.
7.3 We may provide relevant information to payment processors, delivery companies, fulfilment providers and other organisations where necessary to complete your order.
7.4 We may retain information about transactions after an order has been completed where required for accounting, taxation, fraud prevention, customer service or legal purposes.
8. PAYMENT INFORMATION
8.1 Payments through our website may be processed by third-party payment providers.
8.2 Those providers may collect payment-card and financial information directly from you.
8.3 Mythic Rift does not normally receive or store complete payment-card details.
8.4 Payment providers process your information in accordance with their own privacy policies and applicable law.
9. PRODUCT WAITLISTS AND STOCK NOTIFICATIONS
9.1 Where a product is unavailable, we may allow you to register your interest or request a stock-availability notification.
9.2 We will use the information you provide for the purpose of providing the requested notification and administering the relevant waitlist.
9.3 Registering for a product waitlist does not automatically subscribe you to general Mythic Rift marketing communications.
9.4 We may retain information about customer demand for products in an aggregated or anonymised form for purchasing, stock-planning and business-analysis purposes.
10. MARKETING COMMUNICATIONS
10.1 We may offer you the opportunity to subscribe to newsletters, product announcements, new-release information, promotions or other marketing communications.
10.2 Where consent is legally required for electronic marketing, we will only send those communications after obtaining appropriate consent.
10.3 Marketing consent will not be a condition of purchasing products from Mythic Rift.
10.4 Purchasing a product or joining a stock waitlist does not automatically mean that you have consented to receive general marketing communications.
10.5 You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in the communication or by contacting us.
10.6 We may retain limited information indicating that you have opted out of marketing so that we can respect your preference in the future.
11. COOKIES AND SIMILAR TECHNOLOGIES
11.1 Our website may use cookies and similar technologies.
11.2 Some cookies are necessary for essential website functions, including security, shopping baskets, checkout and account functionality.
11.3 Other cookies may be used for analytics, website improvement, personalisation or marketing.
11.4 Where required by law, non-essential cookies will not be activated until you have provided appropriate consent.
11.5 You can manage your cookie choices through the cookie controls made available on our website.
11.6 Further information about the cookies used on our website is available in our Cookie Policy.
12. SQUARESPACE
12.1 The Mythic Rift website is hosted using Squarespace.
12.2 Squarespace may process personal and technical information on our behalf in connection with hosting the website, operating online-store functionality, providing website security and delivering related services.
12.3 Squarespace may also place essential or optional cookies depending on the services used and the visitor's cookie preferences.
12.4 Additional third-party services connected to Squarespace may process information where required to provide their functionality.
12.5 Where appropriate, information about these services will be included in our Cookie Policy or other relevant privacy information.
13. WHO WE MAY SHARE PERSONAL INFORMATION WITH
13.1 We do not sell customer personal information.
13.2 We may share personal information with organisations that provide services necessary for the operation of Mythic Rift.
13.3 These organisations may include our website platform provider, payment processors, banks, delivery companies, fulfilment providers, accounting providers, professional advisers, email providers, customer-support providers, analytics providers and technology suppliers.
13.4 We will only provide personal information that is reasonably necessary for the recipient to perform the relevant service.
13.5 We may disclose personal information where required by law, regulation, court order or a lawful request from a competent authority.
13.6 We may disclose information where reasonably necessary to establish, exercise or defend legal claims or protect Mythic Rift, our customers or others against fraud or unlawful activity.
14. DELIVERY AND FULFILMENT PROVIDERS
14.1 We may provide your name, address, contact details and relevant order information to delivery or fulfilment providers in order to dispatch and deliver your purchase.
14.2 Delivery providers may use your contact details to provide tracking information, delivery updates or to resolve delivery issues.
14.3 Where we use a third-party fulfilment provider, that provider may process relevant customer and order information on our behalf.
15. ACCOUNTING AND BUSINESS RECORDS
15.1 We may retain information relating to orders, payments, refunds and transactions as part of our financial and accounting records.
15.2 Relevant information may be made available to accountants, bookkeepers, tax advisers, auditors or regulatory authorities where necessary.
15.3 We will retain financial records for periods required under applicable tax, accounting and company law.
16. INTERNATIONAL TRANSFERS
16.1 Some of the organisations that provide services to Mythic Rift may process personal information outside the United Kingdom.
16.2 Where personal information is transferred internationally, we will take reasonable steps to ensure that the transfer complies with applicable UK data protection law.
16.3 Appropriate safeguards may include an applicable adequacy regulation, contractual safeguards or other legally recognised transfer mechanisms.
17. HOW LONG WE RETAIN PERSONAL INFORMATION
17.1 We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, taxation, fraud-prevention and regulatory requirements.
17.2 Different categories of information may be retained for different periods.
17.3 Order and financial records may be retained for the period required under applicable UK tax and accounting rules.
17.4 Customer-service correspondence may be retained for a reasonable period after an enquiry, dispute or complaint has been resolved.
17.5 Marketing information may be retained while you remain subscribed and for a reasonable period afterwards where necessary to maintain opt-out records.
17.6 Product-waitlist information may be retained until the requested notification has been provided or until the information is no longer reasonably required.
17.7 Technical security information may be retained for a reasonable period where necessary for fraud prevention, cybersecurity or investigation purposes.
17.8 Where information is no longer required, we will take reasonable steps to delete it, securely dispose of it or anonymise it.
18. INFORMATION SECURITY
18.1 We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, loss, destruction or alteration.
18.2 We use established third-party platforms and providers to assist with secure website hosting, payments and other business functions.
18.3 Access to personal information will be limited to persons or organisations that reasonably require access for legitimate business purposes.
18.4 No online service can guarantee absolute security and you use internet-based services with the understanding that some security risks always exist.
19. YOUR DATA PROTECTION RIGHTS
19.1 UK data protection law gives individuals a number of rights in relation to their personal information.
19.2 You may have the right to ask us to confirm whether we process personal information about you and to request access to that information.
19.3 You may have the right to request correction of inaccurate or incomplete personal information.
19.4 You may have the right to request deletion of personal information in certain circumstances.
19.5 You may have the right to request restriction of processing in certain circumstances.
19.6 You may have the right to object to certain processing, including processing based on legitimate interests and direct marketing.
19.7 You may have the right to request transfer of certain personal information to you or another organisation in a structured, commonly used and machine-readable format.
19.8 Where processing is based on consent, you have the right to withdraw that consent.
19.9 These rights are subject to applicable legal conditions, exemptions and limitations.
19.10 To exercise a data protection right, please contact us at [privacyquestions@mythicrift.co.uk].
19.11 We may need to request reasonable information to verify your identity before acting on certain requests.
20. AUTOMATED DECISION-MAKING
20.1 Mythic Rift does not currently intend to make significant decisions about customers solely through automated decision-making.
20.2 Certain payment, fraud-prevention or security providers may use automated systems when assessing transactions.
20.3 Where such systems are operated independently by third-party providers, their own privacy terms may apply.
21. CHILDREN
21.1 Trading cards and collectible products may appeal to children and younger people.
21.2 Our online purchasing services are intended to be used by persons who are legally capable of entering into the relevant purchase contract or by a parent, guardian or other responsible adult purchasing on behalf of a child.
21.3 We do not knowingly seek to collect unnecessary personal information from children.
21.4 If you believe that a child has provided personal information to us inappropriately, please contact us.
22. THIRD-PARTY WEBSITES
22.1 Our website may contain links to websites operated by third parties.
22.2 Mythic Rift is not responsible for the privacy practices of third-party websites.
22.3 You should review the privacy information provided by those third parties before providing personal information to them.
23. CHANGES TO THIS PRIVACY POLICY
23.1 We may update this Privacy Policy from time to time.
23.2 Changes may be made to reflect changes in our business, website functionality, service providers, legal obligations or data-processing activities.
23.3 The latest version will be published on our website.
23.4 The date at the beginning of this Privacy Policy will indicate when it was last updated.
24. COMPLAINTS
24.1 If you have concerns about how Mythic Rift has used your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.
24.2 You also have the right to raise a concern with the Information Commissioner's Office, which is the UK's independent data protection regulator.
24.3 Information about the Information Commissioner's Office and how to raise a concern is available through the ICO's official website.
25. INFORMATION COMMISSIONER'S OFFICE REGISTRATION
25.1 Mythic Rift will assess whether it is required to pay the applicable data protection fee and register with the Information Commissioner's Office.
25.2 Where registration is required, we will maintain the appropriate registration in accordance with applicable requirements.
26. CONTACT US
26.1 Questions regarding this Privacy Policy or the way we process your personal information should be sent to [info@mythicrift.co.uk].
26.2 Our legal entity is Mythic Rift Ltd.
26.3 Our company number is [INSERT COMPANY NUMBER].
26.4 Our registered office is [INSERT REGISTERED OFFICE ADDRESS].privacyquestions@mythicrift.co.uk