SCALPER TCG — PRIVACY POLICY

Last updated: September 16, 2026

SCALPER TCG operates this store and website, including all related information, content, features, tools, products and services, to provide customers with a curated shopping experience (the “Services”).

Our store is powered by Shopify, which enables us to provide the Services. This Privacy Policy explains how we collect, use, process and disclose your personal information when you visit, use or make a purchase through the Services, create an account or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing or disclosure of personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described below.

Personal Information We Collect or Process

“Personal information” means information that identifies you or can reasonably be linked to you. It does not include anonymous or properly de-identified information.

Depending on how you interact with the Services, where you reside and what applicable law permits or requires, we may collect or process the following categories of personal information:

• Contact details, including your name, billing address, shipping address, telephone number and email address.

• Payment and financial information, including payment method, payment confirmation, transaction details and information processed by Shopify or our payment providers.

• Account information, including your email address, customer-account identifier, preferences and settings.

• Transaction information, including products you view, add to your cart or wishlist, purchase, return, exchange or cancel, as well as your transaction history.

• Communications with us, including information provided when contacting customer support or submitting a request.

• Device information, including information about your device, browser, network connection, IP address and other online identifiers.

• Usage information, including how and when you access, interact with or navigate the Services.

• Marketing and preference information, including your communication preferences, consent choices and interactions with marketing communications.

Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, place an order, contact us, subscribe to marketing communications or otherwise provide information.

• Automatically through the Services, including from your device and through cookies and similar technologies.

• From Shopify and our service providers, when they provide technology, payments, shipping, analytics, customer support, hosting or other services on our behalf.

• From business partners or other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us, we may use personal information for the following purposes:

• Providing and managing the Services: to process payments, fulfil and deliver orders, manage customer accounts, remember preferences, provide order notifications, arrange shipping, process returns or exchanges and provide products or services requested by you.

• Improving and personalising the Services: to understand how customers use our store, improve functionality and recommend products that may be relevant to you.

• Marketing and advertising: to send promotional communications where permitted, measure marketing performance and display advertising based on your consent, preferences and applicable law.

• Security and fraud prevention: to authenticate accounts, provide a secure shopping experience, detect and investigate potentially fraudulent, unlawful, unsafe or malicious activity and protect our customers, business and Services.

• Customer communication: to provide support, respond to requests, communicate about transactions and maintain our relationship with you.

• Legal and regulatory purposes: to comply with applicable law, respond to valid legal requests, maintain required business records, resolve disputes and enforce our terms and policies.

Legal Bases for Processing

If you reside in the European Economic Area or the United Kingdom, we process your personal information under one or more of the following legal bases:

• Performance of a contract: to process payments, fulfil and deliver orders, manage returns, provide customer accounts and supply the products or services you request.

• Compliance with legal obligations: to comply with tax, accounting, consumer-protection, fraud-prevention and other applicable legal requirements.

• Legitimate interests: to operate, secure and improve our store, prevent fraud, provide customer support and understand how customers use the Services, provided that these interests do not override your fundamental rights and freedoms.

• Consent: where required, for marketing communications, non-essential cookies, personalised advertising and other processing for which you have provided consent. You may withdraw your consent at any time.

Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to operate the store, remember preferences, understand use of the Services, measure performance and, where permitted, provide personalised marketing or advertising.

Essential cookies may be used because they are necessary for the store, checkout, security and customer-account functions to operate.

Where required by applicable law, analytics, personalisation and advertising cookies will only be used after you provide consent. You can manage your choices through the cookie banner or privacy controls available on our website. You may also control cookies through your browser settings, although disabling essential cookies may affect the functionality of the Services.

How We Disclose Personal Information

We may disclose personal information to third parties for legitimate business purposes and subject to applicable law, including:

• Shopify, payment providers, technology vendors, hosting providers, analytics providers, customer-support services, fulfilment providers and shipping carriers that perform services on our behalf.

• Business and marketing partners that help us advertise or promote the Services, subject to applicable consent and privacy choices.

• Third parties when you direct us, request the disclosure or provide consent, including social-media integrations and external login services.

• Affiliates or companies within our corporate group, where applicable.

• Professional advisers, public authorities or other parties where reasonably necessary to comply with legal obligations, respond to valid requests, protect rights or resolve disputes.

• Parties involved in a business transaction such as a merger, acquisition, restructuring, financing or sale of assets.

Our business and marketing partners process information in accordance with their own privacy notices. Depending on where you reside, you may have the right to object to or opt out of targeted advertising or certain disclosures of personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services to provide and improve Shopify’s services.

Information submitted through our store may be transmitted to Shopify and service providers located in countries other than your country of residence.

We may use Shopify features that incorporate information from your interactions with our store, other merchants and Shopify. In these circumstances, Shopify may be responsible for processing personal information and responding to requests relating to that specific processing.

You can learn more through the Shopify Consumer Privacy Policy and exercise certain Shopify-related privacy rights through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a third-party service, you should review its privacy policy, security practices and terms. We are not responsible for the privacy, security, accuracy or availability of third-party websites or services.

Information posted in public or semi-public spaces, including third-party social networks, may be visible and used by other users or third parties.

The inclusion of a link does not necessarily imply endorsement of the third-party platform, its content or its operator.

Children’s Data

The Services are not intended for children to make purchases without the involvement and permission of a parent or legal guardian.

We do not knowingly collect personal information from children in violation of applicable law. If you are a parent or guardian and believe that a child has provided us with personal information improperly, please contact us so that we can investigate and, where appropriate, delete it.

We do not knowingly sell or share, as those terms are defined under applicable law, the personal information of individuals under 16 years of age.

Security and Retention of Personal Information

We use reasonable administrative, technical and organisational safeguards designed to protect personal information.

However, no security system is completely secure, and we cannot guarantee absolute security. Please avoid sending sensitive or confidential information through unsecured communication channels.

We retain personal information only for as long as reasonably necessary to:

• Provide and manage the Services.

• Maintain your account.

• Complete transactions and provide customer support.

• Comply with tax, accounting and other legal obligations.

• Prevent fraud and protect security.

• Resolve disputes and enforce our agreements.

The applicable retention period depends on the category of information, the purpose for which it was collected and any legal or regulatory requirements.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Right of access: to request information about the personal information we process and obtain a copy.

• Right to correction: to request correction of inaccurate or incomplete personal information.

• Right to deletion: to request deletion of personal information in applicable circumstances.

• Right to portability: to receive certain personal information in a structured, commonly used and machine-readable format or request its transfer to another organisation.

• Right to object: to object to certain processing based on legitimate interests or direct marketing.

• Right to restrict processing: to request that certain processing be limited.

• Right to withdraw consent: to withdraw consent at any time where processing is based on consent, without affecting processing lawfully carried out before withdrawal.

• Right to complain: to lodge a complaint with the competent data-protection authority.

These rights are not absolute and may be subject to exceptions under applicable law.

To exercise a right, contact us using the details provided below. We may request information reasonably necessary to verify your identity and protect your account.

Where permitted by law, you may appoint an authorised representative. We may require evidence of that authorisation and may ask you to confirm your identity directly.

We will not discriminate against you for exercising your privacy rights.

Communication Preferences

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the communication.

After unsubscribing, we may still send non-promotional communications relating to your account, transactions, orders, security or customer-service requests.

Automated Decision-Making

We do not currently use solely automated decision-making that produces legal effects or similarly significant effects concerning customers.

If this changes, we will update this Privacy Policy and provide any information required by applicable law.

Complaints

If you have a complaint about how we process personal information, please contact us first using the details below so that we can attempt to resolve it.

Depending on where you live, you may also lodge a complaint with your local data-protection authority.

Customers in Spain may contact the Agencia Española de Protección de Datos.

A list of supervisory authorities within the European Economic Area is available through the European Data Protection Board.

International Transfers

We may transfer, store or process personal information outside your country of residence.

When personal information is transferred outside the European Economic Area or the United Kingdom, we rely on recognised safeguards where required, such as an adequacy decision or the European Commission’s Standard Contractual Clauses and equivalent United Kingdom transfer mechanisms.

You may contact us for additional information about the safeguards applicable to an international transfer.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, Services, legal obligations or other operational requirements.

We will publish the updated policy on this website, revise the “Last updated” date and provide any additional notice required by applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise any data-protection rights, contact us at:

SCALPER TCG

Email: support@scalpertcg.com

Website: https://scalpertcg.com

Business address: Calle Luis Morote 48, 35007 Las Palmas de Gran Canaria, Las Palmas, Spain

Legal company name and tax identification number: XXX — INSERT BEFORE LAUNCH

For the purposes of applicable data-protection laws, the legal entity identified above is the controller of your personal information.