Privacy policy

NAESIC TCG ENTERPRISE (business registration 202603223085 (CT0168389-M)). This page explains what Naesic collects about you, why, who else ends up seeing it, and how to get it back or deleted. It sits alongside our terms and conditions.

When you sign up: your name, email address and phone number, plus the date you accepted the terms. Your password is never stored as you typed it, only as a hash that cannot be turned back into the original.

When you buy something: what you bought, what you paid, and the reference the payment processor gives us. We never see or store your card or bank details. Those are entered on the payment provider's own page, not ours.

When you want something posted: the delivery address and phone number for the parcel. These are copied onto the order at the time, so editing your profile later does not rewrite where a parcel was actually sent.

When you verify your WhatsApp number: the number the message came from, and the time. We do not read, store or keep the rest of your WhatsApp messages.

When you arrive through a friend's invite link: the network address and the browser your account signed up from, the browser one stored as a hash rather than in full. This is used for exactly one thing, which is spotting one person signing up repeatedly to farm free entries. It is not used to advertise to you and it is not shared.

As you browse: a daily count of how many people opened each board. It is a number per board per day and nothing else. It records nothing about who you are, and there is no analytics or advertising tracker anywhere on this site.

To run your account and let you log in, to take payment and prove it was taken, to get prizes and orders to you, to contact you about something you entered or bought, and to keep the free-entry scheme honest.

We do not sell your details to anyone, and we do not send marketing you did not ask for.

These are the only outside services your details reach, and only the part each one needs:

• toyyibPay — takes the payment. They handle the card or bank step and tell us whether it succeeded.
• Meta (WhatsApp) — carries the message you send to verify your number. Meta sees that message the same way it sees any WhatsApp message.
• Brevo — sends our emails, such as a password reset. They see your email address and what the email said.
• Cloudflare — sits in front of the site to keep it up and to filter attacks, so requests to the site pass through them. Our encrypted database backups are also stored with them.
• The courier — gets the name, address and phone number on a parcel, because that is what a parcel is addressed with.

Beyond that, we hand your details to somebody else only where the law requires it.

Winners are announced with a shortened name. Your full name, phone number, email and address are never posted publicly. On a live stream a spot is confirmed with a short code or a member number, not by reading out your personal details.

Two, and neither is for tracking. One keeps you logged in after you sign in, and lasts 30 days or until you log out. The other remembers which friend's invite link you followed, so they get credited. There are no advertising or analytics cookies on this site.

Your account details stay for as long as the account exists. Records of completed orders are kept for as long as we are required to keep business records, because they are proof of a sale that has happened, and that applies even after an account is closed.

Backups are taken daily and older ones are rotated out, so anything deleted also works its way out of the backups over time rather than instantly.

Under the Personal Data Protection Act 2010 you can ask us to:

• show you what we hold about you
• correct anything that is wrong, which for most things you can do yourself in your account
• delete your account and the personal details on it
• stop contacting you

Ask and we will do it. The one thing we cannot remove is the record of orders already completed, for the reason above.

The site runs over an encrypted connection, passwords are stored hashed, backups are encrypted before they leave the server, and the admin side is reachable only by us. No system is perfect, and if something ever goes wrong in a way that affects you, we will tell you rather than quietly hope you do not notice.

We will update this page as things change, and the date at the top tells you when it last changed.

For anything on this page, including asking for your details or having them deleted, message us on WhatsApp. You can also email [email protected].