CardTerra Card shops near you
Featured partner Partner shop Listed

Privacy notice

Who we are

CardTerra is run by KantoForge Ltd, a company registered in England and Wales (company number 14592116), registered office Sopers House, Sopers Road, Cuffley, Hertfordshire, EN6 4RY ("we", "us"). We are the controller responsible for the personal data handled through this website. Contact: privacy@cardterra.uk.

What we collect and why

  • Account details (email, username, password hash, age confirmation): to run your account. Lawful basis: contract.
  • Profile and activity (bio, games, home shop, follows, passport stamps, want list, event RSVPs): to provide the features you use. Lawful basis: contract.
  • Location at check-in: used once to confirm you are at a shop, then discarded. We store only that you stamped the shop. Lawful basis: consent (your browser asks).
  • Shop listings: business details from public sources (including OpenStreetMap) and shop owners. Where a listing contains a sole trader's details, our lawful basis is legitimate interests in helping players find shops; owners can ask us to correct or remove them.
  • Payments: handled by Stripe. We never see your full card number.
  • Emails: alerts and newsletters you sign up to, sent via our email provider. Unsubscribe any time.
  • Messages to shops: when you message a shop, we email your message, display name and account email to that shop so it can reply to you. We keep a record that you sent a message (not its text) for 12 months to prevent spam. Lawful basis: contract (you ask us to send it).
  • Selling your collection: when you ask for offers, we email your description, display name, account email and rough distance (not your postcode or address) to up to 3 nearby shops that buy cards. Your postcode is used once to find them. Lawful basis: consent, given each time with the tick box.
  • Card shows you list: show details and your account, so we can check and manage the listing. Lawful basis: contract.
  • Card show reviews: your rating, whether you went as a visitor or trader, and what you wrote. They're public on the show's page and the organiser's page, under your username only if your profile is public (otherwise as "A collector" or "A trader"). Delete a review any time from the show. Lawful basis: contract.
  • Usage counts: we count shop card views and clicks to give shops anonymous statistics. We do not use advertising cookies.

Children

Accounts are for people aged 18 or over. Anyone can browse the map without an account. Profiles are private by default, visit dates are never shown publicly, and there is no messaging between users. Players can email a shop through the site, and the shop replies by email.

Who we share data with

Railway (hosting), Stripe (payments), Resend (sending email), Cloudflare (our domain and email forwarding), and Discord (shops' stock news is posted to a public channel; no player data). Your browser also loads things directly from other services, which see your IP address as any website does: OpenFreeMap (map tiles), Google Fonts (lettering), unpkg and cdnjs (map and QR code software), and postcodes.io (when you search a postcode). The server uses postcodes.io and OpenStreetMap to place shops and shows on the map, with no personal data. Some of these companies are based in the United States. Where your data leaves the UK, we rely on the UK's adequacy regulations (including the UK–US data bridge) or the standard contract clauses approved for UK data. Shops see only anonymous totals (views, followers, stamps, aggregated want-list demand), never who you are, unless you message them or ask them for an offer.

Links to other sites

Links on shop pages and "Buy online" links go out through cardterra.uk so we can count clicks. Some are affiliate links: if you buy something, we may earn a small commission at no extra cost to you. The shop or seller is not told who you are.

How long we keep it

Until you delete your account (Me → Delete my account), after which it is removed within 30 days, except payment records we must keep for 6 years.

Your rights

You can access, correct, delete, restrict or object to our use of your data, and ask for a copy, wherever you live. Email privacy@cardterra.uk. You can also complain to the data protection authority where you live.

Cookies

We use one essential cookie to keep you logged in, and the browser's local storage to remember your filter choices. No advertising or tracking cookies.