top of page

Privacy Policy:

​

Last updated: 1/23/2026

Welcome to Forbidden Quest!  This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit or make a purchase from [your website URL] (the “Site”), and explains your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

​

1. Information We Collect:

​

a. Personal Information

We may collect the following categories of personal information:

  • Identifiers (name, email address, phone number, IP address)

  • Commercial information (products purchased, order history)

  • Payment information (processed securely by third-party payment processors)

  • Billing and shipping addresses

  • Account credentials (if you create an account)

  • ​

b. Automatically Collected Information

When you browse the Site, we may automatically collect:

  • Device and browser information

  • IP address and approximate location

  • Pages viewed, referring URLs, and interaction data

  • Cookies, pixels, and similar technologies

  • ​

2. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contractual necessity: to process and deliver your orders

  • Consent: for marketing communications and non-essential cookies

  • Legitimate interests: to improve our services, prevent fraud, and ensure website security

  • Legal obligation: to comply with tax, accounting, or regulatory requirements

  • ​

3. How We Use Your Information

We use personal information to:

  • Fulfill orders and process payments

  • Provide customer support

  • Communicate with you about purchases, updates, or promotions

  • Improve our website, products, and marketing

  • Detect and prevent fraud or abuse

  • Comply with legal obligations

  • ​

4. Sharing Your Information

We may share personal information with:

  • Payment processors

  • Shipping and fulfillment providers

  • IT, hosting, and analytics service providers

  • Legal or regulatory authorities when required by law

  • ​

We do not sell personal information.

​

5. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential site functionality

  • Analytics and performance measurement

  • Marketing and advertising (where permitted by law)

EU users: You may manage cookie consent through our cookie banner.
California users: You may opt out of certain tracking where applicable.

​

6. Your Rights Under GDPR

If you are located in the EEA or UK, you have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

You also have the right to lodge a complaint with your local data protection authority.

​

7. Your Rights Under CCPA / CPRA (California Residents)

California residents have the right to:

  • Know what personal information we collect, use, and disclose

  • Request deletion of personal information

  • Correct inaccurate personal information

  • Opt out of the sale or sharing of personal information (we do not sell data)

  • Not be discriminated against for exercising privacy rights

You may submit requests by contacting us using the information below. We may verify your identity before fulfilling requests.

​

8. Data Retention

We retain personal information only for as long as necessary to:

  • Fulfill the purposes outlined in this policy

  • Comply with legal, tax, and accounting obligations

  • Resolve disputes and enforce agreements

  • ​

9. Data Security

We use appropriate technical and organizational safeguards to protect your personal information. However, no system is completely secure, and we cannot guarantee absolute security.

​

10. International Data Transfers

If you are located outside the country where our servers are hosted, your information may be transferred internationally. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

​

11. Children’s Privacy

Our Site is not intended for individuals under the age of 13 (or 16 in certain jurisdictions), and we do not knowingly collect personal information from children.

​

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

​

13. Contact Information

If you have questions or wish to exercise your privacy rights, contact us at:

Email: admin@forbiddenquesttcg.com
Business Name: Forbidden Quest LLC

bottom of page