Privacy policy

Draft updated 20 September 2026

Who is responsible

The operator of sealedstash is responsible for the customer information described here. Contact info.sealedstash@gmail.com with privacy questions or requests. The seller’s legal identity and business address will be included above before publication.

Information you give us

We receive the name, email address, delivery location, requested quantity and message you enter in an item request. If an order proceeds, we also receive the delivery details, correspondence and payment information needed to fulfil it. We keep the item description, quoted price, reference, dates and order status with the request.

Selling inquiries contain the contact details, game, box information and payment preference you supply; you may send photographs by email. Optional collection subscriptions contain your email address, game preference and subscription record. Requesting an item does not subscribe you to marketing. Please avoid sending unnecessary sensitive information or anyone else’s details without authority.

Technical information

We do not collect only information typed into forms. Hosting services process network information such as IP addresses, requested pages, times and browser details for delivery, troubleshooting and security. Our forms use short-lived hashed network identifiers to limit repeated submissions.

Product-view counting uses a random identifier in your browser’s session storage. We store a hash specific to the product and a timestamp, separate from contact details, to avoid counting repeated views within a rolling 24-hour period. Records older than that window are removed when subsequent views are processed; daily totals may be retained. Hosting and administrator sign-in can also use essential cookies. This storefront does not include advertising trackers or customer profiling.

Why we use information

• Inquiries and orders: to take steps you request before a contract and to fulfil an agreed order.
• Accounts and legal obligations: to keep records required by applicable tax, accounting or other law.
• Security and disputes: our legitimate interests in protecting the store, preventing abuse, investigating delivery or payment problems and establishing or defending legal claims, balanced against your rights.
• Collection emails: your consent. You may withdraw it at any time without affecting earlier lawful use.

We do not buy customer profiles or sell your personal information. Necessary transaction details may also come from banks, carriers or correspondence about your order. We use relevant records to assess disputes fairly, not to penalise genuine complaints. We do not make solely automated decisions with legal or similarly significant effects on customers.

Who may receive it

Access is limited to the store operator and service providers involved in running the store or handling your request. These include website hosting and content-delivery providers, database and image-storage providers, administrator authentication providers, email and transactional-notification providers, and the banks and delivery services involved in an order. Customer messages, email addresses and payment details are not published in the catalog.

Relevant records may be disclosed to professional advisers or competent authorities where necessary and lawful. Service providers may process information outside the UK. Where a restricted international transfer is made, an appropriate lawful transfer mechanism must apply, such as adequacy regulations or approved contractual safeguards. Contact us for information about safeguards relevant to your data.

How long we keep it

We retain information for its stated purpose and review whether it is still needed. Uncompleted inquiries are normally kept for no longer than 24 months after the last meaningful contact. Order, payment and accounting records may be retained for up to six years after the relevant financial year, or longer where a specific legal requirement or unresolved claim justifies it. This is a retention policy, not a promise that all systems erase records automatically on a set date.

Subscription information is retained while you remain subscribed. The unsubscribe link removes the active subscription; limited records may still be needed to demonstrate your preference or handle a complaint. Short-lived view and abuse-prevention records follow the cleanup described above; operational logs and backups follow the relevant provider’s retention arrangements.

Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction or transfer of your information, and object to processing based on legitimate interests. Deletion is not absolute where records are still needed for a lawful purpose. We may ask for proportionate information to verify your identity before disclosing personal data. We normally respond within one month; any permitted extension will be explained.

Unsubscribe from collection updates using the link in an email or by contacting us. You can complain to the Information Commissioner’s Office. You do not have to contact us first, although we welcome the opportunity to resolve a concern.

Security and updates

The CRM restricts access to the designated administrator. Please do not submit bank-login credentials, one-time codes or full card details. We use reasonable safeguards, but no internet service can promise absolute security. Material changes to our use of information will be explained here and, where required, communicated directly.

For orders, authenticity, cancellations and returns, see our Terms & Conditions.