Privacy Policy
Revision 1.2.0 Active From 24rd September 2026.
Sacred Realm (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit or use our website, www.sacredrealm.co.uk, create an account, place an order, contact us, subscribe to our marketing communications or otherwise interact with us.
We handle personal information in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018.
1. Who we are
The data controller responsible for your personal information is:
Sacred Realm
Maylands Business Centre
Redbourn Road
Hemel Hempstead
HP2 7ES
United Kingdom
Email: sales@sacred-realm.co.uk
Website: www.sacredrealm.co.uk
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the email address above.
2. Information we collect
Depending on how you interact with us, we may collect the following types of personal information:
Information you provide to us
This may include:
Your name
Billing and delivery address
Email address
Telephone number, where provided
Account login details
Order and purchase information
Payment and transaction information
Marketing preferences
Information you provide when contacting us
Information you provide when submitting a review or feedback
Any other information you voluntarily provide to us
Payment information
Payments made through our website are processed using Square.
We do not receive or store your full payment card number, security code or other sensitive payment-card details ourselves. Payment information is processed by Square in accordance with its own privacy and security policies.
Square states that payment data is encrypted and that its payment systems use security measures designed to protect payment information.
3. Information collected automatically
When you visit our website, certain information may be collected automatically, including:
IP address
Browser type and version
Device type
Operating system
Pages visited
Date and time of visits
Referring website
Website usage information
Cookies and similar technologies
We use some of this information to operate, secure and improve our website and to understand how visitors use it.
4. How we use your personal information
We may use your personal information for the following purposes.
Processing and fulfilling orders
We use your information to:
Process your order
Take and process payment
Confirm your order
Prepare and dispatch your products
Deliver your order
Provide delivery updates
Deal with returns, refunds and exchanges
Provide customer support
Maintain records of transactions
Managing customer accounts
If you create an account with us, we use your information to:
Create and maintain your account
Allow you to log in
Display your order history
Manage your saved information
Provide account-related communications
You may also choose to purchase from us without creating an account.
Website operation and improvement
We use information about how visitors interact with our website to:
Maintain and improve website functionality
Understand how customers use our website
Monitor website performance
Identify technical problems
Improve our products and services
Fraud prevention and security
We use Square's built-in fraud prevention and risk-management services to help detect and prevent potentially fraudulent transactions.
Square's Risk Manager can assess online payments for suspicious activity and may use automated systems, including machine-learning technology, to identify potential payment fraud.
We may therefore process information relating to an order or payment, such as transaction information, payment information, IP address and other relevant information, for fraud prevention and security purposes.
This processing helps us protect Sacred Realm and our customers from fraudulent transactions, payment disputes and other unlawful activity.
Customer service
We use your information to respond to enquiries, resolve problems and provide assistance relating to your orders or our products and services.
Reviews and feedback
Where you choose to provide a review or feedback, we may use the information you provide to administer and display your review or feedback.
We use Trustpilot to collect and manage customer reviews.
(https://uk.trustpilot.com/review/www.sacred-realm.co.uk)
Marketing
If you have given us permission to send you marketing communications, we may use your email address to send information about:
New products
New Pokémon and trading card releases
Offers and promotions
Stock updates
News and other information relating to Sacred Realm
Our marketing emails are sent using Mailchimp.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link contained in our marketing emails or by contacting us at sales@sacred-realm.co.uk.
We do not send abandoned-cart marketing emails.
5. Our lawful bases for using your information
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on the following lawful bases:
Contract
We may process your information where it is necessary to enter into or perform a contract with you, including processing and fulfilling an order.
Legal obligation
We may process and retain information where necessary to comply with legal, accounting, tax, regulatory or other legal requirements.
Legitimate interests
We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Examples may include:
Protecting our business against fraud
Maintaining website security
Improving our website and services
Managing customer relationships
Keeping appropriate business records
Consent
Where required by law, we will ask for your consent before processing personal information for a particular purpose.
For example, we may rely on consent when sending certain marketing communications or when using non-essential cookies or similar technologies.
You can withdraw consent at any time where consent is our lawful basis.
6. Marketing communications
Where appropriate, we will only send marketing communications in accordance with applicable electronic marketing and data protection laws.
Where consent is required, we will obtain it through an appropriate opt-in process.
You can unsubscribe from marketing communications at any time.
Unsubscribing from marketing will not prevent us from sending essential communications relating to an order, payment, delivery, account or other service you have requested.
7. Cookies and analytics
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function properly. For example, cookies may be required to maintain your shopping basket, process transactions, maintain your account or provide security.
We also use Google Analytics to help us understand how visitors use our website and to help us improve its performance.
Where applicable, non-essential cookies and similar technologies will only be used where the necessary consent has been obtained.
You can manage cookies through your browser and, where provided, our website's cookie-consent controls.
Please note that disabling certain cookies may affect the functionality of the website.
8. Who we share your information with
We may share personal information with trusted third parties where necessary to operate our business, provide our services or comply with legal obligations.
These may include:
Square
We use Square to operate our website, process payments and provide fraud-prevention and payment-security services.
Square may process information relating to customers and transactions when providing these services. Square also states that its services can involve fraud-prevention providers and other payment ecosystem partners.
Mailchimp
We use Mailchimp to manage our marketing email list and send marketing communications to customers and subscribers who have agreed to receive them.
Royal Mail and DPD
We may provide delivery information, such as your name, delivery address, email address and telephone number where appropriate, to Royal Mail and DPD so that they can deliver your order and provide relevant delivery services or updates.
Trustpilot
Where applicable, we may share relevant customer information with Trustpilot in order to invite customers to provide reviews or otherwise administer our review process.
Google Analytics
We use Google Analytics to help us understand website traffic and usage.
Professional and legal advisers
Where necessary, we may disclose personal information to professional advisers, accountants, insurers, legal advisers or other service providers where reasonably required to operate our business or comply with our legal obligations.
Law enforcement and legal authorities
We may disclose personal information where required by law, court order, regulatory requirement or where necessary to protect our legal rights, customers, business or property.
We do not sell your personal information to third parties.
9. International transfers
Although Sacred Realm only sells to customers within the UK, some of the third-party services we use may process or store personal information outside the United Kingdom.
Where this occurs, we will take appropriate steps to ensure that your personal information receives a level of protection required by applicable UK data protection law.
This may include using an adequacy decision, appropriate contractual safeguards or other legally recognised transfer mechanisms.
10. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.
The length of time we keep information depends on the type of information and why we need it.
For example:
Order and transaction information may be retained for as long as necessary to fulfil legal, accounting and tax obligations.
Customer account information may be retained while your account remains active and for a reasonable period afterwards where necessary.
Marketing information may be retained while you remain subscribed, subject to our need to maintain appropriate records of consent or objections.
Information relating to customer enquiries may be retained for as long as reasonably necessary to resolve the enquiry and maintain appropriate business records.
When information is no longer required, we will securely delete it or anonymise it where appropriate.
11. Keeping your information secure
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
We use established third-party providers such as Square for payment processing and security. Square states that payment information is encrypted and that its systems use security controls designed to protect payment information.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. Your data protection rights
Under UK data protection law, you may have a number of rights in relation to your personal information.
Depending on the circumstances, these include the right to:
Ask what personal information we hold about you
Request a copy of your personal information
Ask us to correct inaccurate or incomplete information
Ask us to delete your personal information in certain circumstances
Ask us to restrict how we process your information in certain circumstances
Object to certain types of processing
Object to direct marketing
Withdraw consent where we rely on consent
Request certain information in a portable format
These rights are subject to certain legal exceptions and limitations.
To exercise your rights, please contact:
We may need to verify your identity before fulfilling certain requests.
We will normally respond to a valid request within the timeframe required by applicable data protection law.
13. Marketing opt-out
You can stop receiving marketing emails at any time by:
Clicking the unsubscribe link at the bottom of one of our marketing emails; or
Contacting us at sales@sacred-realm.co.uk.
Please note that opting out of marketing does not stop essential service communications, such as order confirmations, delivery information or account-related messages.
14. Children's privacy
Our website is intended for general consumers and is not specifically directed at children.
We do not knowingly collect personal information from children where doing so would require parental consent under applicable data protection law.
If you believe that a child has provided us with personal information without appropriate consent, please contact us so that we can review and, where appropriate, delete the information.
15. Third-party websites and services
Our website may contain links to third-party websites, including social media platforms and other services.
We are not responsible for the privacy practices or content of third-party websites.
We recommend reviewing the privacy policies of any third-party website you visit.
16. Social media
Sacred Realm maintains a presence on social media platforms including Facebook and Instagram.
If you interact with us through social media, the relevant platform may collect and process information about you in accordance with its own privacy policy.
We may receive information that you choose to provide to us through these platforms.
17. Data breaches
If we become aware of a personal data breach, we will assess the breach and take appropriate steps in accordance with applicable data protection law.
Where legally required, we will notify the Information Commissioner's Office and/or affected individuals.
18. Complaints
If you have concerns about how we have handled your personal information, please contact us first at:
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
The ICO provides information about data protection rights and how to make a complaint.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.
The latest version will always be published on our website.
The date at the top of this Privacy Policy indicates when it was last updated.
20. Contact us
If you have any questions about this Privacy Policy or how Sacred Realm handles your personal information, please contact us:
Sacred Realm
Maylands Business Centre
Redbourn Road
Hemel Hempstead
HP2 7ES
United Kingdom
Email: sales@sacred-realm.co.uk
Website: www.sacredrealm.co.uk