Privacy Policy

1) Scope

This Privacy Policy explains how Momento Trading Card (“we,” “us,” “our”) collects, uses, and safeguards personal information when you visit momentotradingcard.com, make a purchase, contact us, or otherwise interact with our site and services. It applies to information we collect directly from you and automatically via our site. We maintain a public, conspicuously posted privacy policy to comply with California’s Online Privacy Protection Act (CalOPPA). :contentReference[oaicite:0]{index=0}

2) What we collect

Information you provide: name, email, phone, shipping/billing address, order details, messages to support, and any other information you choose to send us.

Information collected automatically: basic device and usage data (e.g., IP address, browser type, pages viewed, timestamps) gathered to operate and secure our site. We do not collect sensitive personal information unless you provide it and it’s necessary for a specific purpose you request.

3) How we use information

• Provide, operate, and improve the site, fulfill orders, process payments, and deliver customer support.
• Communicate about orders, updates, and service-related notices.
• Protect against fraud, security incidents, and misuse; debug and maintain functionality. :contentReference[oaicite:1]{index=1}
• Comply with legal obligations and enforce our terms.

4) No “sale” or “sharing” of personal information

We do not sell personal information and we do not “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act, as amended by the CPRA. If that ever changes, we will update this Policy and provide legally required opt-out mechanisms. :contentReference[oaicite:2]{index=2}

5) When we disclose information (service providers only)

We consider your information private. We do not trade or give data. We disclose personal information only to service providers under written contracts that limit their use of the information to the services we request (e.g., secure payment processing, order fulfillment/shipping, hosting, email delivery, fraud prevention, or site analytics). We may also disclose information if required by law, to protect our rights, or as part of a legitimate business transfer (e.g., merger). These disclosures are not “sales” or “sharing” under California law. :contentReference[oaicite:3]{index=3}

6) Cookies & analytics

Our site uses essential cookies to operate and keep your session secure. We do not use third-party advertising cookies. If we use basic analytics, it is to understand site performance and fix problems—not to build profiles for advertising. Any analytics or hosting vendor we use is engaged as our service provider under a contract that limits use of your data. CalOPPA requires us to disclose whether other parties may collect information across sites; if we add third-party analytics that collect across sites, we will disclose that here. :contentReference[oaicite:4]{index=4}

7) Your privacy rights (U.S.)

Depending on your state, you may have rights to access/know, correct, delete, receive a portable copy of your information, and to appeal certain denials. We do not sell or share data for targeted advertising. You can submit requests by emailing info@momentotradingcard.com. We will verify your identity and respond within the timeframes allowed by law (typically 45 days, with a possible extension where permitted). Some states (e.g., Virginia and Colorado) require an appeals process if we decline to act; if you disagree with our response, reply “Privacy Appeal” to our decision email and we will review promptly. :contentReference[oaicite:5]{index=5}

8) Global Privacy Control & Do Not Track

Global Privacy Control (GPC): Where required by law, we honor user-enabled global privacy controls as valid opt-out signals. Because we do not sell or share personal information, there is currently nothing to opt out of for advertising purposes; if that changes, we will honor GPC automatically. :contentReference[oaicite:6]{index=6}

Do Not Track (DNT): There is no current industry standard for responding to DNT signals; CalOPPA requires that we disclose how we handle them. At this time, our site does not change its behavior in response to DNT signals, but we will update this Policy if standards emerge. :contentReference[oaicite:7]{index=7}

9) Visitors from the EEA/UK (GDPR)

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR/UK GDPR, including access, rectification, erasure, restriction, objection, and portability. Our legal bases typically include contract (to process your orders), legitimate interests (site operation and security), legal obligation, and consent where required. You may contact us at info@momentotradingcard.com to exercise your rights; you also have the right to complain to your Data Protection Authority. :contentReference[oaicite:8]{index=8}

10) Children’s privacy

Our site is for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided personal information to us, contact us and we will take appropriate steps to delete it. :contentReference[oaicite:9]{index=9}

11) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, and unauthorized access. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

12) Data retention

We keep personal information only as long as necessary to provide our services (e.g., order records for tax/audit) and to comply with law, resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify information consistent with applicable law.

13) International data transfers

Our site and systems are operated in the United States. If you access the site from outside the U.S., your information may be transferred to, stored in, or processed in the U.S. We implement appropriate safeguards for any transfers as required by law.

14) Changes to this policy

If we make material changes, we will update the “Effective date” and post the revised Policy here. Where required by law, we will provide additional notice or seek consent.

15) Contact us