Privacy Policy

Last updated: February 27, 2026

GearTCG respects your privacy and is committed to handling personal data lawfully, fairly and transparently. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit geartcg.com, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with our services.

This Policy applies to customers and website users worldwide. Additional rights may apply under the laws of your country or region.

1. Data Controller and Contact Details

GearTCG is the data controller for the personal data described in this Policy, except where another organisation expressly acts as an independent controller.

Email: info@geartcg.com
Address: 19 Rue Brunel, 75017 Paris, France
SIRET: 992 576 272 00015

Questions or requests concerning personal data may be sent to info@geartcg.com.

2. Personal Data We Collect

Depending on how you interact with GearTCG, we may collect the following categories of personal data:

  • Identity and contact data: name, email address, telephone number, billing address, shipping address and country;

  • Account data: customer account details, login information, saved preferences and account activity;

  • Order and transaction data: products ordered, order number, purchase date, price, currency, discounts, delivery method, order status, returns, refunds and customer-service history;

  • Payment-related data: payment method, payment status, transaction reference and limited payment details supplied by the payment provider. Complete card details are normally collected directly by the payment provider and are not made available to GearTCG;

  • Delivery data: recipient details, delivery address, carrier, parcel tracking information and delivery events;

  • Communications: messages, emails, complaints, return requests, product questions and other correspondence sent to us;

  • Marketing data: newsletter subscriptions, communication preferences, campaign interactions and consent records;

  • Technical and usage data: IP address, browser type, device information, operating system, language, approximate location derived from the IP address, pages viewed, referring pages, timestamps, website interactions, error logs and security events;

  • Cookie and analytics data: identifiers and information collected through cookies, pixels or similar technologies, subject to applicable consent requirements;

  • Fraud-prevention data: risk signals, failed payment attempts, suspected misuse, account links and information reasonably necessary to protect customers and the website; and

  • User content: product reviews, ratings, comments or other content submitted through available website features.

We do not intend to collect special categories of personal data, such as health, biometric, religious or political information. Please do not provide such information unless it is genuinely necessary for a specific request.

3. How We Collect Personal Data

We collect personal data:

  • directly from you when you place an order, create an account, complete a form, subscribe to communications, contact support or submit content;

  • automatically when you browse or use the website, through server logs, cookies and similar technologies;

  • from service providers involved in payments, fraud prevention, hosting, customer support, analytics or delivery;

  • from carriers and postal services when they provide tracking or delivery updates; and

  • from lawful public or professional sources where reasonably necessary to prevent fraud, resolve a dispute or comply with a legal obligation.

4. Why We Use Personal Data

We may use personal data to:

  • operate and secure geartcg.com;

  • create and manage customer accounts;

  • process, confirm, prepare and deliver orders;

  • manage payments, refunds, returns, cancellations and pre-orders;

  • provide parcel tracking and delivery support;

  • verify transactions and prevent fraud, abuse and security threats;

  • answer questions, complaints and customer-service requests;

  • administer legal guarantees and resolve disputes;

  • send service communications concerning accounts or orders;

  • send marketing communications where permitted;

  • personalise website content and remember user preferences;

  • measure website performance and understand how the store is used;

  • improve products, services, navigation and customer support;

  • maintain accounting, tax and business records;

  • establish, exercise or defend legal claims; and

  • comply with applicable laws, court orders and lawful requests from authorities.

We will not use personal data for a materially incompatible purpose without providing appropriate information and, where required, obtaining consent.

5. Legal Bases for Processing

Where the General Data Protection Regulation or equivalent rules apply, we rely on one or more of the following legal bases:

  • Performance of a contract: to process an order, take payment, arrange delivery, manage a return, provide customer support or administer an account requested by you;

  • Legal obligation: to comply with accounting, tax, consumer-protection, product-safety, fraud-prevention or regulatory requirements;

  • Legitimate interests: to operate and improve the website, secure transactions, prevent fraud, answer non-contractual enquiries, maintain records, understand store performance and protect our legal rights, provided those interests are not overridden by your rights and freedoms;

  • Consent: for certain marketing communications, non-essential cookies, tracking technologies or other processing where consent is legally required; and

  • Establishment, exercise or defence of legal claims: where information is necessary to manage a complaint, chargeback, suspected fraud or dispute.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. Information Required to Place an Order

Certain information is necessary to enter into and perform a sales contract, including your name, contact details, delivery address and the information needed to process payment.

If required information is not provided, we may be unable to accept, process or deliver an order. Optional fields will be identified where appropriate.

7. Payments

Payments are processed through authorised payment service providers. These providers may collect and process payment information as independent controllers or as processors acting on our behalf, depending on the service and applicable law.

GearTCG generally receives confirmation of payment, transaction identifiers, payment method and limited anti-fraud information rather than complete card credentials. We do not retain the card security code after a transaction.

If a payment method offers the option to save payment details for future purchases, any required consent and storage are managed in accordance with the payment provider’s terms and applicable law.

8. Shipping and International Delivery

To deliver an order, we share the minimum necessary personal data with relevant carriers, postal operators, fulfilment providers, customs intermediaries and delivery partners. This may include the recipient’s name, address, email address, telephone number, order reference, parcel contents where required for customs, and declared value.

For international shipments, customs authorities or other public bodies may require access to delivery and transaction information. Their processing is governed by applicable law.

9. Accounts and Guest Checkout

Where available, you may place an order through a customer account or as a guest. Account data is used to provide login access, order history, saved details and other requested features.

You are responsible for keeping your credentials confidential. Please contact us promptly if you suspect unauthorised access to your account.

You may request account closure at info@geartcg.com. Closure does not require deletion of records that must be retained for legal, accounting, fraud-prevention or dispute-resolution purposes.

10. Customer Support and Communications

When you contact GearTCG, we use the information provided to verify your identity where necessary, investigate the request, respond to you and maintain an appropriate record of the interaction.

Order confirmations, payment notices, dispatch updates, safety notices, policy notifications and responses to customer enquiries are service communications. They are not marketing messages and may be sent where necessary to perform a contract or comply with law.

11. Marketing Communications

We may send newsletters, product announcements, restock information, pre-order news or promotional offers where you have consented or where another lawful basis permits such communication.

You may unsubscribe at any time by using the link included in a marketing email or by contacting info@geartcg.com. Opting out of marketing does not prevent essential order or account communications.

We may retain limited information on a suppression list so that your opt-out preference continues to be respected.

12. Cookies and Similar Technologies

The website may use cookies and similar technologies for functions such as keeping the shopping cart active, maintaining sessions, securing checkout, remembering preferences, measuring performance and, with appropriate consent, analytics or advertising.

Strictly necessary technologies may be used without consent where permitted because the requested website service cannot function correctly without them. Non-essential cookies and trackers are activated only after valid consent where required by law.

You can accept, refuse or adjust available choices through the website’s cookie controls. Withdrawing consent must be as easy as giving it. Browser settings may also allow cookies to be deleted or blocked, although disabling necessary cookies may affect website functions.

More detailed information, including the technologies actually used, their providers, purposes and durations, is available in our separate Cookie Policy and cookie preference tool.

13. Analytics and Advertising

Where enabled, analytics services help us understand website traffic, page performance and customer journeys. Advertising or social-media technologies may help measure campaigns or display relevant content.

These tools may collect device identifiers, IP addresses, browsing events and campaign information. Where consent is required, they will not be activated before consent is given. You may withdraw your choice through the cookie settings.

14. Reviews and User Content

If you submit a product review or other public content, the name or alias you choose and the content of the submission may be displayed publicly. Do not include an address, telephone number, order number or other sensitive information in public content.

We may process review data to verify purchases, prevent fraudulent reviews, moderate unlawful content and improve the customer experience.

15. Fraud Prevention and Website Security

We process limited account, transaction, device and usage information where reasonably necessary to identify fraud, payment abuse, automated purchasing, account compromise, security incidents or attempts to bypass purchase limits.

An order or account may be reviewed where risk indicators are detected. We will not make a decision based solely on automated processing that produces legal or similarly significant effects unless permitted by law and accompanied by appropriate safeguards.

16. When We Share Personal Data

We may disclose personal data, only where necessary, to:

  • website hosting and e-commerce infrastructure providers;

  • payment processors and fraud-prevention providers;

  • carriers, postal operators, fulfilment services and customs intermediaries;

  • customer-support, email and communication providers;

  • analytics, advertising and cookie providers where lawfully enabled;

  • IT, security, backup and technical service providers;

  • accountants, insurers, auditors, legal advisers and other professional advisers;

  • public authorities, courts, regulators or law-enforcement bodies where disclosure is legally required or lawfully justified; and

  • a purchaser, investor or adviser involved in a genuine proposed sale, restructuring or transfer of all or part of the business, subject to appropriate confidentiality and data-protection safeguards.

Service providers acting on our behalf are authorised to process data only for agreed purposes and must provide appropriate confidentiality and security protections.

We do not sell personal data for money. We do not disclose personal data to unrelated third parties for their own direct marketing without the permission required by law.

17. International Data Transfers

Because GearTCG serves customers worldwide and may use international service providers, personal data may be processed outside France or the European Economic Area.

Where the receiving country does not benefit from an applicable adequacy decision, we use an appropriate transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where necessary. Other legally recognised safeguards may apply depending on the destination and provider.

You may contact info@geartcg.com for further information about safeguards relevant to your data.

18. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

The following general periods apply unless a longer or shorter period is required by law or justified by the circumstances:

  • Order, invoicing and accounting records: for the commercial relationship and generally for 10 years where required by French accounting law;

  • Customer account data: while the account remains active, then deleted or anonymised after an appropriate inactivity period, except for information retained for another lawful purpose;

  • Customer data used for marketing: during the commercial relationship and generally for up to 3 years after the last purchase or customer contact, unless you opt out earlier;

  • Prospect data: generally for up to 3 years after collection or the last meaningful contact;

  • Customer-support records: for the time needed to handle the request, followed by an appropriate period for service quality, proof or dispute management;

  • Fraud, security and dispute records: for the period needed to investigate the issue and for applicable legal limitation periods;

  • Consent and opt-out records: for as long as reasonably necessary to demonstrate and respect your choice; and

  • Cookie and tracker data: for the period stated in the Cookie Policy and consent tool, subject to legal limits.

When data is no longer required, it is deleted, anonymised or securely archived with restricted access where continued retention is legally necessary.

19. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. Measures may include access controls, encryption in transit, secure hosting, backups, monitoring and restrictions on service-provider access.

No internet service is completely secure. You should use a unique password, protect your account credentials and contact us immediately if you suspect unauthorised activity.

Where required by law, we will notify the competent supervisory authority and affected individuals of a personal-data breach presenting the relevant level of risk.

20. Your Data Protection Rights

Subject to the conditions and exceptions of applicable law, you may have the right to:

  • obtain confirmation as to whether we process your personal data;

  • request access to your personal data and receive a copy;

  • correct inaccurate or incomplete data;

  • request deletion of data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • receive certain data in a structured, commonly used and machine-readable format and request portability;

  • withdraw consent at any time;

  • request information about relevant international-transfer safeguards; and

  • challenge a decision based solely on automated processing where it produces legal or similarly significant effects.

These rights are not absolute. For example, we may need to retain information to comply with law, complete a transaction, establish or defend legal claims, or protect the rights of others.

21. How to Exercise Your Rights

To exercise a privacy right, contact info@geartcg.com and clearly describe your request. You may also write to:

GearTCG
19 Rue Brunel
75017 Paris, France

We may request additional information only where reasonably necessary to confirm identity or clarify the request. We aim to respond within the period required by applicable law. Under the GDPR, this is generally one month, subject to a permitted extension for complex or numerous requests.

Privacy requests are normally free of charge. A reasonable fee may be charged, or a request may be refused, only where permitted because it is manifestly unfounded or excessive.

22. Right to Lodge a Complaint

If you believe that your personal data has been handled unlawfully, please contact us first so that we can investigate the issue.

You also have the right to lodge a complaint with the French data-protection authority:

Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy, 75007 Paris, France
Website: https://www.cnil.fr/

If you live elsewhere in the European Economic Area, you may also contact the supervisory authority in your country of residence, workplace or the place of the alleged infringement.

23. Children’s Privacy

The website is not directed at young children. A person who does not have legal capacity to place an order must act through or with the authorisation of a parent or legal guardian.

We do not knowingly collect personal data from a child in circumstances where parental authorisation is legally required and has not been provided. A parent or guardian who believes that a child has submitted personal data improperly may contact info@geartcg.com.

24. Third-Party Websites

The website may contain links to payment providers, carriers, social networks or other third-party websites. Their privacy practices are governed by their own notices, and GearTCG is not responsible for processing carried out independently by those organisations.

We encourage you to review the privacy information of any third-party service you choose to use.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, operational or commercial changes. The updated version will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal data is used, we will provide additional notice or request consent where required by law.

26. Contact Us

For questions, concerns or requests relating to this Privacy Policy or your personal data, contact:

Email: info@geartcg.com
Address: 19 Rue Brunel, 75017 Paris, France
SIRET: 992 576 272 00015

Free shipping

Tell your customers about your shipping offer.

Customer service

Tell your customers how they can reach you.

Refer a friend

Tell your customers about your promotional offers.

Secure payment

Tel your customers about your payment methods.