Privacy policy

Last updated: 13 October 2026

Who we are

PVP Collectibles Limited ("we", "us") is a company registered in Ireland (CRO No. 822801), with its registered office at Unit 2, 2 Bridge Street, Athlone, Co. Westmeath, N37 F1W4, Ireland. We run the online store at pvpcollectibles.com and are the data controller for the personal data described in this policy. Contact: paul@pvpcollectibles.com.

What we collect

Order and contact details: name, billing and delivery address, email, phone number (if given), and what you order, return or cancel.
Account details: if you create an account, your login details and order history.
Payment details: payments are processed by our payment providers. We never see or store your full card number.
Messages: anything you send us by email or contact form.
Device and usage data: IP address, browser, device type and how you use the site, collected through cookies (see "Cookies" below).

Why we use it, and our legal basis

To process and deliver your order, handle returns, refunds and pre-orders, and answer questions about them – to perform our contract with you.
To keep tax and accounting records – because the law requires it.
To prevent fraud and keep the store secure – our legitimate interest in protecting our business and customers.
To understand how the site is used and improve it – our legitimate interest, or your consent where cookies require it.
To send marketing emails – only with your consent, or if you're an existing customer and didn't opt out when buying (you can unsubscribe at any time using the link in every email).

We don't sell your data and don't use it for automated decisions that have legal or similarly significant effects on you.

Who we share it with

Only what's needed, with:

Shopify (Shopify International Limited, Dublin) – hosts our store and processes orders.
Payment providers – Shopify Payments (operated with Stripe), including Shop Pay, Apple Pay and Google Pay.
Delivery company – DPD Ireland, to deliver your order (name, address, phone or email for delivery updates).
Our accountant and professional advisers, where needed.
Public authorities, if the law requires it.

These providers act on our instructions or under their own privacy policies where they're independent controllers (for example, payment providers).

International transfers

Some of our providers (including Shopify) may process data outside the EEA, for example in Canada or the United States. Where that happens, it's protected by an EU adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

How long we keep it

Order, invoice and payment records: 6 years after the end of the tax year, as required by Irish tax law.
Account details: until you close your account.
Customer service emails: up to 2 years after the issue is resolved.
Marketing: until you unsubscribe.

Cookies

We use cookies that are essential for the store to work (basket, checkout, security). With your consent, we also use analytics cookies. You can accept or reject non-essential cookies in the cookie banner and change your choice at any time.

Your rights

Under GDPR you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time. Email paul@pvpcollectibles.com and we'll reply within one month. We may need to confirm your identity first.

If you're unhappy with how we handle your data, you can complain to the Data Protection Commission (www.dataprotection.ie), though we'd appreciate the chance to sort it out first.

Children

Our store is intended for customers aged 18 and over. We don't knowingly collect data from children. If you believe a child has given us their data, contact us and we'll delete it.