Privacy policy.

Last updated: 14 September 2026

Surge TCG respects your privacy and aims to handle personal information fairly, securely and transparently.

This Privacy Policy explains what information we collect through surgetcg.co.uk, why we use it, who may receive it and the rights available to you under UK data-protection law.

For questions about this policy or requests concerning your personal information, contact: sales@surgetcg.co.uk

1. Who is responsible for your information?

Surge TCG is responsible for deciding how personal information collected through this website is used.

Surge TCG currently operates primarily for customers and visitors in the United Kingdom.

2. Information we collect

We may collect the following information:

Stock Alerts

When you complete the Stock Alerts form, we collect the email address you submit.

The submitted address is sent securely to the Surge TCG business mailbox. It is not currently saved as a WPForms entry in the website’s WordPress database, and no external email-marketing platform is currently connected.

Stock Alerts withdrawal requests

When you use the Stock Alerts unsubscribe form, we collect the email address you submit so we can identify the relevant Stock Alerts record and process your withdrawal request.

The submitted address is sent to the Surge TCG business mailbox. It is not currently saved as a WPForms entry in the website’s WordPress database.

After the request is processed, we may retain a minimal suppression record containing the normalised email address and limited withdrawal details needed to prevent accidental future marketing and demonstrate that the request was honoured.

Email enquiries

When you contact Surge TCG by email, we receive the email address you use and any name, message or other information you choose to include.

Technical and security information

Our hosting provider may process standard technical information required to operate and protect the website. This can include your IP address, browser information, requested pages, timestamps and server-log information.

3. How we use your information

We may use personal information to:

• respond to questions or requests;
• check stock availability;
• provide requested Stock Alerts or related Surge TCG updates;
• maintain a record of consent or withdrawal requests;
• operate, maintain and secure the website;
• prevent misuse, fraud or technical problems;
• meet legal or regulatory obligations.

We do not sell personal information.

4. Our lawful bases

Consent

We rely on your consent when you provide your email address specifically to receive Stock Alerts or similar Surge TCG updates.

You may withdraw that consent at any time through our Stock Alerts unsubscribe page. You may also email: sales@surgetcg.co.uk

Legitimate interests

We may rely on our legitimate interests to:

• answer genuine customer enquiries;
• operate and secure the website;
• maintain appropriate business and technical records;
• prevent fraud, abuse or disruption.

Steps before entering into a contract

Where you contact us about buying a card or another potential transaction, we may process your information to respond to your request before a purchase takes place.

Legal obligations

We may retain or use information where reasonably necessary to comply with applicable law or respond to lawful requests.

5. Stock Alerts

When you submit the Stock Alerts form:

• you tick a consent box, which is not ticked by default, confirming you would like to receive Surge TCG stock alerts by email;
• we receive the email address you provide;
• an administrative notification is sent to sales@surgetcg.co.uk;
• the notification records the submitted address, UTC submission time, submission page, form identity, consent version, the consent wording you agreed to, communication scope and Privacy Policy version;
• WPForms Lite does not currently retain a website entry;
• no external mailing-list provider is currently connected;
• no automatic subscriber confirmation email is currently sent.

We may use the address to provide the Stock Alerts and related updates that you requested.

To stop receiving these communications, use our Stock Alerts unsubscribe page or email: sales@surgetcg.co.uk

After receiving a withdrawal request, we stop marketing to the submitted address while the request is processed. Once completed, the address is removed from active Stock Alerts send lists.

We may retain a minimal suppression record containing the normalised email address and limited withdrawal evidence. This record is used only to prevent accidental future marketing and demonstrate that the withdrawal request was honoured.

A later valid consent may allow Stock Alerts to resume where that consent post-dates the withdrawal and covers the communication being sent. The earlier withdrawal history is retained as part of the compliance record.

6. How long we keep information

Active Stock Alerts email addresses are retained for no longer than 24 months from signup unless consent is withdrawn earlier.

After withdrawal, we retain only the minimum suppression information while Surge TCG continues direct marketing that could otherwise reach the address, and while it remains reasonably necessary to prevent accidental re-contact and demonstrate compliance. We review this justification quarterly.

The suppression record is not used for marketing, customer profiling or unrelated purposes.

General email enquiries are normally retained for no longer than 24 months after the last meaningful contact, unless we need to keep information for longer to meet a legal obligation, resolve a dispute or protect legitimate legal rights.

Technical server logs are retained according to the operational and security arrangements of our hosting provider.

We periodically review information and remove it when it is no longer reasonably required.

7. Who may receive your information?

We only share information where reasonably necessary to operate the website or provide the service requested.

Relevant service providers currently include:

Hostinger

Hostinger provides website hosting, domain-related services and authenticated email transport for Surge TCG. Standard hosting, server-log and email information may therefore be processed through Hostinger’s systems.

Website software

The website uses WordPress, WPForms and WP Mail SMTP software. These tools help operate the website and send form notifications. No WPForms cloud-entry backup or external mailing-list connection is currently enabled.

Legal or regulatory recipients

We may disclose information where required by law, a court, a regulator or another authority with lawful powers.

8. External links

The website includes links to third-party websites, including eBay and Instagram.

When you follow one of these links, the third-party service may collect or process information under its own privacy and cookie policies.

Surge TCG is not responsible for the privacy practices or content of external websites.

9. Cookies and analytics

Surge TCG does not currently use Google Analytics or WooCommerce Order Attribution tracking on the public website.

The website may use limited technical storage where necessary for WordPress administration, security or normal site operation.

Logged-in administrator cookies do not apply to ordinary public visitors.

If non-essential analytics or marketing technologies are introduced in the future, this policy and the website’s consent arrangements will be reviewed before those technologies are enabled.

10. Keeping information secure

We take reasonable technical and organisational steps to protect personal information.

The website uses encrypted HTTPS connections, and website-generated email is sent through authenticated SMTP.

No internet transmission or storage system can be guaranteed to be completely secure.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information;
• ask us to restrict how information is used;
• object to certain uses of your information;
• ask for certain information in a portable format;
• withdraw consent at any time where processing is based on consent.

Withdrawing consent does not affect processing that took place before consent was withdrawn.

To withdraw consent for Stock Alerts, use our Stock Alerts unsubscribe page or email: sales@surgetcg.co.uk

For other data-protection requests, email: sales@surgetcg.co.uk

We may need to ask for enough information to confirm your identity before completing a request.

12. Complaints

Please contact Surge TCG first if you have concerns about how your information has been handled: sales@surgetcg.co.uk

You also have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office

Website: https://ico.org.uk/

Telephone: 0303 123 1113

13. Changes to this policy

We may update this Privacy Policy when the website, our services or applicable requirements change.

The current version will be published on this page with its latest update date.