Privacy Policy

Our website address is: https://www.infinitecollector.com.

Last Updated: August 13, 2026

At The Infinite Collector, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit or use our website, place an order, create an account, contact us, or otherwise interact with our online store.

The Infinite Collector is operated by Ascendant Studio s.r.o., a company registered in the Czech Republic. As the operator of the online store, Ascendant Studio s.r.o. is the data controller for the personal data processed through the website, unless otherwise stated.

1. Data Controller

Ascendant Studio s.r.o.
Rybná 716/24
110 00 Prague 1
Czech Republic

Website: www.infinitecollector.com
Email: store @ infinitecollector.com
Company ID (IČO): 05192200
VAT ID (DIČ): CZ05192200

For privacy-related questions or requests concerning your personal data, please contact us using the email address above.

2. What Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal information:

Customer and contact information

This may include:

Full name
Billing address
Shipping address
Email address
Telephone number
Company name
VAT identification number
Customer account information

Order information

When you place an order, we may collect:

Products purchased
Order number
Order date
Order value
Payment status
Shipping information
Delivery address
Billing information
Return and refund information

Payment information

Payments may be processed by third-party payment providers.

We generally do not store complete payment card numbers or security codes on our own systems. Payment information may instead be processed directly by the relevant payment provider according to its own privacy and security policies.

Technical information

When you visit our website, certain technical information may automatically be collected, including:

IP address
Browser type and version
Operating system
Device information
Date and time of access
Pages visited
Referring website
Website interaction information
Approximate geographic information derived from IP address

The exact information collected depends on the technologies and services used on our website.

3. How We Use Your Personal Data

We process personal data only for legitimate and defined purposes.

These purposes may include:

Processing and fulfilling orders

We use your information to:

process your order;
confirm your purchase;
prepare and ship your products;
communicate with you regarding your order;
process returns and refunds;
provide customer support.

This processing is necessary for the performance of the contract between you and us.

Legal and accounting obligations

We may process and retain information where necessary to comply with applicable legal obligations, including:

accounting requirements;
tax requirements;
invoicing requirements;
consumer protection obligations;
responding to lawful requests from authorities.

Processing for these purposes is based on our legal obligations.

Customer support

We may use your contact information and previous order information to respond to questions, complaints, returns, warranty claims, and other customer-service requests.

Fraud prevention and security

We may process information to:

detect fraudulent transactions;
prevent abuse of our website;
protect our customers and business;
investigate suspicious activity;
maintain website and payment security.

This processing may be based on our legitimate interests in protecting our business, customers, and systems.

Website improvement

Where permitted and where appropriate consent has been obtained, we may use technical and analytical information to understand how visitors use our website and improve its functionality, performance, and user experience.

4. Legal Bases for Processing

Depending on the purpose, we process personal data under one or more of the legal bases provided by the GDPR.

These may include:

Performance of a contract — for example, processing and delivering an order you have placed.

Legal obligation — for example, retaining accounting and tax records.

Legitimate interests — for example, fraud prevention, website security, customer-service administration, and certain forms of direct marketing to existing customers where permitted by applicable law.

Consent — for example, certain marketing communications or non-essential cookies where consent is required.

The Czech Data Protection Authority specifically recognizes that e-commerce businesses generally do not need consent to process information necessary to fulfill an order or comply with mandatory accounting and tax obligations.

5. Marketing Communications

If you subscribe to our newsletter or otherwise provide consent to receive marketing communications, we may use your email address to send information about:

new products;
Pokémon and Magic: The Gathering releases;
collectibles;
promotions;
special offers;
store news.

You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us.

Where permitted by Czech law, we may also send marketing communications concerning our own similar products and services to existing customers without separate consent, provided that the customer has been given a clear and simple opportunity to object or unsubscribe.

We will not use your personal data for direct marketing where you have validly objected to such processing.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

essential website functionality;
shopping cart functionality;
customer login;
security;
remembering preferences;
analytics;
advertising and marketing.

Essential cookies may be used where they are necessary for the operation of the website.

Non-essential analytics, advertising, and marketing cookies will be used in accordance with applicable law and, where required, only after obtaining your consent. The Czech Data Protection Authority states that consent is generally required for non-essential cookies, while technically necessary cookies do not require consent.

More information about the specific cookies used by our website can be provided in our Cookie Policy.

7. Who We Share Your Personal Data With

We may share personal data with trusted third parties where necessary to operate our business and provide our services.

These may include:

Payment providers

Payment information may be processed by third-party payment processors such as:

Stripe, PayPal, WooPayments, etc.

Shipping and delivery providers

We may provide your name, address, email address, telephone number, and other necessary information to postal and courier companies in order to deliver your order.

Examples may include:

Česká pošta
DHL
UPS
FedEx
DPD
GLS
Other shipping providers selected for your order

Website and hosting providers

Our website, databases, backups, and related infrastructure may be hosted or supported by third-party technology providers.

E-commerce and software providers

We may use third-party services for:

WooCommerce;
WordPress;
email delivery;
customer support;
analytics;
fraud prevention;
accounting;
inventory management;
marketing automation.

Such providers may process personal data on our behalf and are required to process it in accordance with applicable contractual and legal requirements. Under GDPR, processors must act on the controller’s documented instructions and appropriate contractual arrangements are required.

8. International Transfers

Because The Infinite Collector sells products worldwide and may use international service providers, your personal data may in some circumstances be transferred to or processed in countries outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data-protection law.

Depending on the circumstances, this may include relying on:

an EU adequacy decision;
Standard Contractual Clauses;
another legally recognized transfer mechanism;
other safeguards permitted under the GDPR.

9. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Examples include:

Order information: retained for the period necessary to process the transaction and handle related customer-service, warranty, accounting, tax, and legal obligations.

Accounting and tax records: retained for the periods required by applicable Czech accounting and tax legislation.

Customer support communications: retained for as long as reasonably necessary to resolve the matter and protect our legal interests.

Marketing information: retained until you unsubscribe or otherwise object, unless another lawful basis permits continued retention.

Customer accounts: generally retained while the account remains active and for an appropriate period afterward where necessary for legal or business purposes.

Specific retention periods may vary depending on the type of information and applicable legal requirements.

10. Your GDPR Rights

Subject to applicable legal conditions and limitations, you have the right to:

Right of access

You may request confirmation of whether we process your personal data and request access to that information.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where the legal requirements for erasure are satisfied.

This right is not absolute. For example, we may need to retain information where required by tax, accounting, consumer-protection, or other legal obligations.

Right to restriction

You may request restriction of processing in certain circumstances.

Right to data portability

Where applicable, you may request your personal data in a structured, commonly used, and machine-readable format.

Right to object

You may object to certain processing based on legitimate interests.

You have an absolute right to object to processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11. How to Exercise Your Rights

To exercise any of your privacy rights, contact us at:

Email: store @ infinitecollector.com

Please clearly describe your request and provide sufficient information for us to verify your identity where necessary.

We will generally respond to valid GDPR requests without undue delay and, in principle, within one month of receiving the request. This period may be extended where permitted by the GDPR, particularly for complex or numerous requests.

12. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data-protection supervisory authority.

As the company is established in the Czech Republic, the relevant supervisory authority is:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Czech Republic

You can find information about the authority and its complaint procedures on its official website.

Czech Office for Personal Data Protection

You may also have the right to lodge a complaint with the supervisory authority in your EU Member State of habitual residence, place of work, or place of the alleged infringement, where applicable.

13. Data Security

We take reasonable technical and organizational measures to protect personal data against:

unauthorized access;
accidental loss;
destruction;
alteration;
disclosure;
misuse.

These measures may include secure connections, access controls, authentication systems, backups, security monitoring, and appropriate restrictions on access to personal information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Children’s Privacy

Our website is intended for general consumers and is not specifically directed toward children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal information in circumstances where this should not have occurred, please contact us so that we can investigate and take appropriate action.

15. Automated Decision-Making and Profiling

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on customers unless such processing is clearly disclosed and carried out in accordance with applicable law.

Certain third-party services, such as fraud-prevention or advertising systems, may use automated analysis or profiling for their own purposes. The specific processing performed by such services is subject to their respective privacy policies.

16. Third-Party Websites

Our website may contain links to third-party websites, including manufacturers, grading companies, payment providers, social-media platforms, shipping companies, and other services.

We are not responsible for the privacy practices, content, or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.