Privacy Policy
PRIVACY POLICY
WonderTCG
A trading name of Wonderflow Records
Chamber of Commerce (KvK): 98616048
VAT Number: NL868570205B01
Registered Address: Grote Hout- of Koningsweg 12, 1951 GS Velsen-Noord, The Netherlands
Telephone: +31 6 3451 6834
Email: wondertcgeurope@gmail.com
Website: https://wondertcg.store
Effective date: 4 October 2026
1. Introduction
WonderTCG respects your privacy and is committed to protecting your personal data.
WonderTCG is a trading name of Wonderflow Records, a business established in the Netherlands. Wonderflow Records is the data controller responsible for the processing of personal data through the WonderTCG website and associated services.
This Privacy Policy explains:
what personal data we collect;
why we collect and use it;
the legal grounds on which we process it;
who we may share it with;
how long we retain it;
how we protect it; and
the rights you have under applicable privacy legislation.
We process personal data in accordance with the General Data Protection Regulation (GDPR/AVG) and applicable Dutch privacy legislation.
This Privacy Policy applies to visitors and customers of:
2. Who Is Responsible for Your Personal Data?
The data controller is:
Wonderflow Records, trading as WonderTCG
Grote Hout- of Koningsweg 12
1951 GS Velsen-Noord
The Netherlands
KvK: 98616048
VAT: NL868570205B01
Email: wondertcgeurope@gmail.com
Telephone: +31 6 3451 6834
For questions about this Privacy Policy or the use of your personal data, you can contact us using the details above.
WonderTCG has not appointed a Data Protection Officer unless otherwise stated on our Website.
3. Personal Data We May Collect
The personal data we process depends on how you use our Website and services.
We may process the following categories of personal data.
3.1 Identity information
This may include:
first name;
surname;
customer or order number; and
other identification information you voluntarily provide when contacting us.
3.2 Contact information
This may include:
billing address;
delivery address;
email address; and
telephone number.
3.3 Order and transaction information
When you place an Order or Pre-order, we may process information including:
Products ordered;
Order value;
order date;
delivery method;
payment status;
refunds;
cancellations;
returns;
complaints; and
correspondence relating to an Order.
3.4 Payment information
Payments may be processed through third-party payment service providers.
Depending on the payment method selected, payment providers may process information such as:
payment method;
transaction identifier;
bank or card-related information;
billing information; and
payment status.
WonderTCG does not generally need to receive or store complete payment card details where these are processed directly by an authorised payment provider.
The payment provider’s own privacy policy may also apply to its processing of your information.
3.5 Delivery information
To deliver your Order, we may process:
your name;
delivery address;
email address;
telephone number;
tracking information;
delivery status; and
information concerning unsuccessful or disputed deliveries.
WonderTCG currently uses DHL for shipping.
Information necessary to deliver your Order may therefore be shared with DHL.
3.6 Customer service and correspondence
If you contact us by email, telephone, a Website form or another communication channel, we may process:
your name;
email address;
telephone number;
the contents of your communication;
Order information;
complaint information; and
any other information you choose to provide.
3.7 Technical and Website information
When you use our Website, certain technical information may be collected automatically.
This can include:
IP address;
browser type;
device information;
operating system;
approximate location derived from an IP address;
date and time of Website access;
pages visited;
referring website;
Website interaction data;
cookie identifiers; and
security or server log information.
The exact information collected depends on the Website technology, cookies and services in use.
3.8 Marketing information
If WonderTCG offers newsletters or other direct marketing, we may process information such as:
your email address;
marketing preferences;
date of consent;
newsletter activity; and
whether you have unsubscribed.
Where consent is legally required, we will not send such marketing unless the appropriate consent has been obtained.
4. How We Obtain Your Personal Data
We generally obtain personal data directly from you when you:
place an Order;
place a Pre-order;
create or use an account, where accounts are offered;
make a payment;
subscribe to marketing communications;
contact customer service;
exercise a withdrawal or cancellation right;
return a Product;
make a complaint; or
otherwise interact with our Website.
We may also receive information from organisations involved in providing our services, including:
payment providers;
DHL;
Website and hosting providers;
fraud-prevention or security providers; and
other service providers used to operate the webshop.
Where we receive personal information from a third party, we will process it only where there is an appropriate legal basis for doing so.
5. Why We Process Your Personal Data
We only process personal data where there is a lawful basis to do so.
The primary purposes and legal grounds are described below.
5.1 Processing your Order
We process your personal data to:
receive and confirm Orders;
process payments;
provide Order confirmations;
prepare Products for shipment;
arrange delivery;
provide tracking information;
handle returns;
process refunds; and
communicate with you regarding your Order.
Legal basis: performance of a contract or taking steps at your request prior to entering into a contract.
Without the information necessary to process and deliver an Order, we may not be able to fulfil your purchase.
5.2 Pre-orders
We process personal data to:
register Pre-orders;
process payment;
provide updates;
communicate changes to expected availability;
manage allocations; and
process cancellations and refunds.
Legal basis: performance of a contract.
5.3 Customer service and complaints
We process information to:
answer questions;
resolve customer service issues;
investigate complaints;
deal with damaged or missing shipments;
handle warranty or conformity claims; and
maintain records of communications.
Depending on the circumstances, the legal basis may be:
performance of a contract;
compliance with a legal obligation; or
our legitimate interest in providing customer service and resolving disputes.
5.4 Accounting and tax administration
We process information relating to Orders, payments and invoices to meet accounting, VAT, tax and administrative requirements.
Legal basis: compliance with a legal obligation.
Dutch businesses are generally required to retain core business administration records for at least seven years.
5.5 Fraud prevention and security
We may process information where reasonably necessary to:
detect suspicious transactions;
prevent payment fraud;
protect customer accounts;
prevent abuse of Product limits or promotions;
secure our Website;
identify malicious activity; and
protect WonderTCG, its customers and third parties.
Legal basis: our legitimate interests in preventing fraud, maintaining Website security and protecting our business and customers.
Where appropriate, we balance these interests against your rights and freedoms.
5.6 Legal claims and disputes
We may retain and process information where reasonably necessary to:
establish;
exercise; or
defend legal claims.
Legal basis: legitimate interests and, where applicable, compliance with legal obligations.
5.7 Website operation and improvement
Certain technical information may be processed to:
operate the Website;
diagnose errors;
maintain security;
analyse Website performance;
prevent misuse; and
improve usability.
Depending on the technology involved, processing may be based on:
legitimate interests;
contractual necessity; or
your consent, particularly where non-essential cookies or tracking technologies are involved.
5.8 Marketing
Where permitted, WonderTCG may use your contact information to inform you about Products, new releases, offers or other relevant WonderTCG news.
Where consent is required, the legal basis is consent.
You may withdraw your consent or unsubscribe from marketing at any time.
Withdrawing consent does not affect processing that took place lawfully before consent was withdrawn.
6. Cookies and Similar Technologies
Our Website may use cookies and similar technologies.
Cookies may be used for purposes such as:
maintaining shopping cart functionality;
remembering Website preferences;
securing the Website;
processing checkout;
analysing Website usage; and
marketing or advertising.
Cookies that are strictly necessary for the operation of the Website may be used without consent where permitted by law.
Non-essential analytics, advertising or tracking cookies will only be used where the appropriate legal requirements have been satisfied, including obtaining consent where required.
More detailed information should be provided in the separate WonderTCG Cookie Policy and through the Website’s cookie settings or consent interface.
You can normally change or withdraw your cookie preferences through the Website’s cookie controls.
7. Who We Share Personal Data With
WonderTCG does not sell your personal data.
We may share personal data only where reasonably necessary to operate the Website, fulfil Orders or comply with legal requirements.
Recipients may include the following categories.
7.1 DHL
We share necessary delivery information with DHL so that DHL can:
transport your Order;
provide delivery notifications;
provide tracking;
complete delivery; and
investigate delivery problems.
7.2 Payment providers
Information may be shared with the payment provider selected during checkout in order to:
authorise payments;
process transactions;
issue refunds;
prevent fraud; and
comply with financial regulations.
Payment providers may act as independent controllers for some of their processing activities and will have their own privacy policies.
7.3 Hosting and IT providers
We may use third-party providers to:
host the Website;
store information;
maintain technical systems;
provide Website functionality;
secure the Website; and
create backups.
These providers may process personal data on our behalf where necessary.
7.4 Email and communication providers
We may use third-party providers for:
customer emails;
transactional emails;
newsletters; and
other communications.
Such providers may process your name, email address and relevant communication information.
7.5 Professional advisers
Personal information may be shared where necessary with:
accountants;
bookkeepers;
tax advisers;
lawyers;
insurers; or
other professional advisers.
7.6 Government and regulatory bodies
We may disclose personal data where we are legally required to do so, including to:
tax authorities;
law enforcement agencies;
courts;
supervisory authorities; or
other authorised public authorities.
7.7 Business transactions
If Wonderflow Records or all or part of the WonderTCG business is sold, reorganised or transferred, relevant customer information may form part of that transaction where legally permitted.
Any recipient will remain subject to applicable privacy law.
8. International Transfers
WonderTCG is based in the Netherlands and primarily operates within Europe.
Some third-party service providers used by the Website may process or store personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, WonderTCG will seek to ensure that an appropriate legal transfer mechanism is in place where required.
Depending on the circumstances, this may include:
an adequacy decision issued by the European Commission;
approved Standard Contractual Clauses;
another recognised GDPR transfer mechanism; or
another lawful exception permitted by the GDPR.
Where appropriate, additional safeguards may also be used.
You may contact WonderTCG if you would like more information about safeguards used for international transfers relating to your personal data.
9. How Long We Keep Personal Data
WonderTCG does not intend to retain personal data for longer than reasonably necessary.
Retention periods depend on:
the reason the data was collected;
contractual requirements;
tax and accounting rules;
statutory limitation periods;
potential disputes; and
applicable legal obligations.
9.1 Order and financial records
Information forming part of WonderTCG’s statutory financial and business administration will generally be retained for at least seven years where required by Dutch tax law.
Certain records may need to be retained for longer where a specific legal retention period applies.
9.2 Customer service information
General customer service correspondence will normally be retained only for as long as reasonably necessary to resolve the matter and deal with any related claims.
Relevant correspondence may be retained longer where it relates to:
an Order;
a complaint;
a refund;
a legal claim; or
another matter for which continued retention is reasonably necessary.
9.3 Marketing information
Marketing information may be retained for as long as you remain subscribed.
Where you unsubscribe, we may retain limited information indicating that you have opted out so that we can respect your preference in the future.
9.4 Technical and security information
Server logs, security information and technical records will normally be retained for a limited period appropriate to their purpose unless longer retention is necessary to investigate fraud, abuse or a security incident.
When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.
10. Your Privacy Rights
Subject to applicable law, you have a number of rights regarding your personal data.
These may include the following.
10.1 Right of access
You may ask whether we process your personal data and request access to the personal data we hold about you.
10.2 Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
10.3 Right to erasure
In certain circumstances, you may ask us to delete personal data relating to you.
The right to deletion is not absolute.
For example, we may be required to retain information to comply with accounting or tax obligations.
10.4 Right to restriction
In certain circumstances, you may ask us to restrict the processing of your personal data.
10.5 Right to data portability
Where applicable, you may have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and to have that information transferred to another organisation.
10.6 Right to object
Where processing is based on our legitimate interests, you may have the right to object to that processing.
We will stop the processing unless we have compelling legitimate grounds to continue or processing is necessary for the establishment, exercise or defence of legal claims.
10.7 Direct marketing
You may object to direct marketing at any time.
If you object to direct marketing, we will stop using your personal data for that purpose.
10.8 Withdrawal of consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
10.9 Automated decision-making
You may have rights concerning decisions based solely on automated processing where such decisions produce legal effects or similarly significantly affect you.
WonderTCG does not currently intend to make significant decisions about customers solely through automated processing unless expressly stated otherwise.
11. How to Exercise Your Rights
To exercise a privacy right, contact:
Email: wondertcgeurope@gmail.com
or write to:
WonderTCG / Wonderflow Records
Grote Hout- of Koningsweg 12
1951 GS Velsen-Noord
The Netherlands
Please clearly explain:
which right you wish to exercise; and
which information or processing your request relates to.
We may request additional information where reasonably necessary to verify your identity before providing access to or changing personal data.
This is intended to prevent personal information from being disclosed to an unauthorised person.
We will respond within the timeframe required under applicable data protection legislation.
12. Complaints to the Dutch Data Protection Authority
If you believe that WonderTCG has processed your personal data in breach of applicable privacy law, please contact us first so that we have an opportunity to investigate the issue.
You also have the right to submit a complaint to the relevant supervisory authority.
For WonderTCG’s activities in the Netherlands, the primary supervisory authority is:
Autoriteit Persoonsgegevens
Dutch Data Protection Authority
The Netherlands
Information about privacy rights and submitting a complaint is available through the Autoriteit Persoonsgegevens website.
If you live elsewhere in the European Economic Area, you may also have the right to contact the data protection authority in your country of residence.
13. Security
WonderTCG takes appropriate technical and organisational measures designed to protect personal data against:
unauthorised access;
loss;
misuse;
alteration;
disclosure; and
destruction.
Measures may include, where appropriate:
access controls;
secure passwords;
encryption;
secure connections;
Website security measures;
software updates;
backups;
restricted access to customer information; and
use of reputable service providers.
No method of electronic transmission or storage can be guaranteed to be completely secure.
If WonderTCG becomes aware of a personal data breach, we will assess and handle the breach in accordance with applicable GDPR requirements, including notification to the appropriate authority or affected individuals where legally required.
14. Children
WonderTCG sells collectible trading card Products which may appeal to younger customers.
However, our online sales are intended to be entered into by persons who have the legal capacity to enter into the relevant purchase agreement.
We do not knowingly seek to collect personal data from children for marketing purposes without the consent or other legal basis required by applicable law.
If you believe that personal data relating to a child has been provided to WonderTCG inappropriately, please contact us.
15. Third-Party Websites
Our Website may contain links to:
manufacturers;
social media platforms;
payment providers;
delivery providers; or
other external websites.
WonderTCG is not responsible for the privacy practices of independent third-party websites.
When you leave wondertcg.store, you should review the privacy policy of the relevant third party before providing personal data.
16. Social Media
WonderTCG may operate accounts on third-party social media platforms.
If you interact with WonderTCG through such a platform, both WonderTCG and the relevant platform may process personal information relating to the interaction.
The social media platform’s own privacy policy applies to its processing of your personal data.
Information that you post publicly on social media may be visible to other users.
17. Changes to This Privacy Policy
WonderTCG may update this Privacy Policy from time to time, for example because of:
changes to the Website;
new service providers;
changes to our business;
changes to privacy legislation; or
changes to the way we process personal data.
The latest version will be published on:
The effective date displayed at the beginning of this Privacy Policy will be updated when material changes are made.
Where appropriate or legally required, we may also notify customers of significant changes by another suitable method.
18. Dutch Law
Wonderflow Records and WonderTCG are established in the Netherlands.
The processing of personal data by WonderTCG is primarily subject to:
the General Data Protection Regulation (GDPR/AVG);
applicable Dutch implementation legislation; and
other applicable Dutch and European privacy and electronic communications legislation.
Where customers located elsewhere in Europe benefit from mandatory rights under applicable privacy legislation, nothing in this Privacy Policy is intended to remove those rights.
19. Contact
If you have any questions about this Privacy Policy, your personal data or the way WonderTCG processes your information, please contact:
WonderTCG
A trading name of Wonderflow Records
Grote Hout- of Koningsweg 12
1951 GS Velsen-Noord
The Netherlands
KvK: 98616048
VAT: NL868570205B01
Telephone: +31 6 3451 6834
Email: wondertcgeurope@gmail.com
Website: https://wondertcg.store
This Privacy Policy is effective from 4 October 2026.