Privacy Policy

What we collect, and why

You can browse the shop, events and leagues without giving us any personal information. We ask for it only when you use one of these tools, and only for what that tool needs.

• Buy lists (“Sell to us”). Your first and last name, phone number and email address, how you would like to be paid (cash or store credit), and the cards, sealed product or graded slabs you list. Staff use it to review your list, contact you about it and make an offer in person. We also email you a private link for checking on your list. While you build a list, a draft is kept in your browser until you submit it.
• Back-in-stock and release alerts. Your email address and the item or release you asked about. We email you a confirmation link first and send nothing else until you click it. Every alert email has an unsubscribe link.
• Release drawing free entries. Your first and last name, email address and mobile number; your Instagram username, only if that drawing asks for it; a record that you said you are old enough and agreed to the drawing’s official rules; and the network address and browser type of the request. We email a confirmation link first, and your entry counts only after you click it. We use your mobile number and email address to match your entry to your store purchases so the two count as one person, and to tell you if you are selected (by email, if you have not signed up for texts). We never contact Instagram: our staff look up the username by hand. We do not text you because you entered; texts are a separate sign-up. See “How long we keep it” below.
• Text sign-ups. Your mobile number, so we can text you if you are selected to purchase an item from a release drawing. You are not signed up until you reply YES to our confirming text. We keep a record of your consent: the number, the date, how you signed up, the wording you were shown and, for the web page, the network address and browser type of the request. See “Text messages” below.
• Live queue check-in. When you join the in-store queue from the shop’s QR code: your first and last name, an optional phone number, and how many items you are bringing. If you look up a buy list there, we ask for your last name and your email or phone number to find it. If you add a phone number and tick the box to agree, we also text you about that visit; see “Text messages” below.
• Leagues. Public league pages show a player’s display name, results and standings, never contact details. A player can ask the store to hide their profile.
• In the store. What you tell us at the counter, such as your name, phone number and email, and what you buy or sell, may be kept in the store’s customer records. That is also how release drawing tickets are tracked.

Error reports

If a page on this site crashes or freezes, your browser may send a short report to our server so we can fix it. It contains the kind of error, the error message and technical trace, the page address (with any search text, email address or token removed), and the version of the site. It does not contain anything you typed into a form. Reports are kept in our hosting platform’s monitoring (Microsoft Azure).

Saved in your browser

Some things are saved on your own device so the site works the way you left it: your shopping cart, a buy list you are still building, your in-store queue ticket, progress and high scores in the site’s little arcade games, and a few one-time flags (for example, that an animation has already played this visit). These stay in your browser’s local or session storage, and you can clear them any time in your browser’s settings.

The only cookies the public site sets are for in-store features: one that limits how often a single device can join the queue, and one that pairs the shop’s own display screens. We do not use advertising or analytics cookies or trackers.

Other companies that handle your information

• Shopify runs our online shop. When you check out you go to Shopify’s hosted checkout, which collects your name, address and payment details under Shopify’s own terms and privacy policy. We never see your card number.
• Microsoft Azure hosts this site and its database, and Azure Communication Services delivers our emails and text messages.
• Google supplies the site’s fonts, so your browser asks Google’s servers for them, and Google sees your IP address when it does. The store’s Google reviews on the home page come from Google, and a reviewer’s photo loads from Google. Map links open Google Maps, Apple Maps or Waze only if you tap them.
• Instagram. We show the shop’s recent posts, copied to our own server, so loading this site does not contact Instagram. Links to the shop’s profile open Instagram.

Like any website, our hosting provider’s servers keep ordinary technical logs, such as IP address, time and the page requested, for security and reliability.

Text messages

If you give us your mobile number and agree, Pure Joy Toys will text you when you are selected to purchase an item from a release drawing, with your pickup dates and pickup code, a reminder on the last day of pickup if you haven't collected it, and a confirmation text once you've picked it up. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We use your number only to send these messages and to respond to you, and we share it only with the platform providers and phone companies that deliver them. Message frequency varies and message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help.

If you check in to the trade line at the shop, enter your mobile number and tick the box to agree, Pure Joy Toys will text you a confirmation when you check in, then when you are next in line and when it is your turn: up to three texts for that visit. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We use your number only to send these messages and to respond to you, and we share it only with the platform providers and phone companies that deliver them. We keep a record of your consent (your number, the date, the wording you were shown and how you gave it) for four years, in case a phone company or you ask us to prove it. We delete your name and the rest of your visit details 30 days after your visit. Message and data rates may apply. Reply STOP to any message to stop receiving texts from Pure Joy Toys, or HELP for help.

We do not sell your information

We do not sell your personal information and we do not share it for advertising. We share it only with the companies above that run the site, email and texts for us, and where the law requires it.

How long we keep it

We keep information for as long as we need it for the reason you gave it to us, or as the law requires, and then delete it or remove what identifies you. An alert subscription lasts until you unsubscribe. A release drawing free entry that was not selected is deleted 90 days after that drawing’s pickup window ends, and one you never confirmed is deleted within about a month. The store keeps a record of each drawing itself, including its entrants’ names and chances. When you unsubscribe or reply STOP we keep a minimal record of that, so we do not contact you again. Records of your consent to text messages are kept as proof of that consent. A text sign-up you never confirm by replying YES is deleted 30 days after you signed up.

Your choices and requests

• Unsubscribe from alert emails with the link in any of them, and from texts by replying STOP.
• Clear what is saved in your browser from your browser’s settings.
• To ask what we hold about you, to correct it, or to have it deleted, contact the store using the details below. We may ask you to confirm it is you first. Some records, such as proof of your consent to texts, may have to be kept.

Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them. If you think a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change affects how we use information you have already given us, we will say so on this page.

Contact us