Privacy Policy

Who is responsible for your data

Suikoden, is the data controller. Contact: through our contact form.

What we collect and why

Data	Why	Legal basis
Name, email, phone, delivery & billing address	To process, deliver and support your order	Contract
Order history, refunds	To provide your account, handle problems with orders, keep accounting records	Contract / legal obligation
Account login, two-factor settings	To keep your account secure	Contract / legitimate interest
Collector profile, wishlist, items you own, reviews	To show them on the site as you choose	Contract / consent
"Want this?" requests, contact messages	To answer you and source items	Legitimate interest
Newsletter & cart reminders	Marketing — only if you opt in	Consent (withdraw any time)
IP address, security logs	Fraud prevention and site security	Legitimate interest

Who we share it with

Only what's needed: Stripe and PayPal (payments — we never see your card details), Japan Post and customs authorities (name, address, phone and parcel contents — required for international shipping), our email provider (to send order and account emails), Google (sign-in if you choose "Continue with Google"; reCAPTCHA spam protection), and our web hosting provider. Some of these process data outside the UK under approved safeguards. We never sell your data.

How long we keep it

Order and payment records: 6 years (UK tax law). Account data: until you delete your account. Marketing consent: until you unsubscribe. Abandoned carts are cleared after 30 days.

Your rights

You can access, correct, delete or export your data, object to processing, and withdraw consent for marketing at any time — update your details in My Account, unsubscribe via the link in any email, or contact us. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

See our Cookie Policy.