YGO SuperPro LTD (“YGO SuperPro,” “we,” “us,” “our”) is committed to protecting your personal information and being transparent about how we use it. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have.
This policy applies to personal information collected through our website (ygo.superpro.games), our email communications, our point-of-sale system in our physical store, our buylist programme, and our event-management activities.
This policy should be read alongside our Terms & Conditions and Cookie Policy.
Last updated: [insert date when published]
YGO SuperPro LTD is a New Zealand company. We operate the website ygo.superpro.games, sell Yu-Gi-Oh! trading cards and accessories online and through our physical store, run community events, and develop the Woo-Gi-Oh! WordPress plugin.
For privacy questions or to exercise your rights, email [email protected].
Depending on how you use our services, we may collect the following categories of personal information.
We do not store full card numbers or CVV codes.
We use your personal information for the following purposes:
| Purpose | Examples |
|---|---|
| Fulfilling your orders | Processing payments, packing and shipping, providing tracking, handling returns |
| Managing your account | Authentication, password recovery, address book, store-credit balance, customer-tier and cashback |
| Operating the buylist | Quoting, accepting, paying out for cards offered to us |
| Running events | Ticketing, registration, communication, prize distribution |
| Customer support | Responding to enquiries, resolving issues, processing claims |
| Marketing (opt-in) | Sending newsletters and promotions you have agreed to receive |
| Measuring and improving the website | Analytics, error monitoring, A/B testing |
| Preventing fraud and abuse | Risk-scoring orders, detecting credential stuffing, defending chargebacks |
| Complying with legal obligations | Tax records, consumer-protection records, anti-money-laundering checks where applicable |
We process your personal information on the following bases:
You may withdraw consent for any consent-based processing at any time, without affecting processing already carried out.
We share personal information only as necessary to operate our services or comply with law. We do not sell your personal information.
| Category | Examples | Why |
|---|---|---|
| Payment processors | Stripe, WooPayments, PayPal, Afterpay, Laybuy, Klarna | To take and refund payments, prevent fraud |
| Shipping carriers and fulfilment | Domestic and international couriers / postal services | To deliver your order |
| Cloud hosting and email infrastructure | Our website hosting, transactional and marketing email delivery | To run the website and send emails |
| Analytics and advertising | Google Analytics 4; Meta (Facebook) Pixel — including server-side conversion APIs | To understand site usage and measure ad performance, subject to your cookie preferences |
| Security and abuse prevention | Google reCAPTCHA | To prevent bot abuse |
| Professional advisers | Accountants, auditors, lawyers | To meet our legal and financial obligations |
| Authorities | Tax authorities, law enforcement, regulators | Where required by law or to protect our legal rights |
| Acquirers | Any acquirer of our business | In the event of a merger, sale, or restructure, subject to equivalent privacy commitments |
Each third-party processor handles your information under their own privacy terms in addition to our instructions.
Some of the third parties we work with are located outside New Zealand and Australia, including in the United States and the European Union. Where we transfer personal information overseas, we take reasonable steps to ensure the recipient is subject to privacy protections comparable to those required by the New Zealand Privacy Act 2020.
We retain personal information for as long as needed for the purposes set out in Section 3, plus any period required by law (for example tax record retention, typically 7 years). When personal information is no longer required and there is no legal reason to retain it, we delete or anonymise it.
Indicative retention periods:
Our website uses cookies and similar technologies. For full details, see our Cookie Policy. In summary:
You can manage your cookie preferences through your browser, or through the cookie-preferences mechanism on our website where one is provided.
We send marketing communications only to people who have opted in. Every marketing email includes a one-click unsubscribe link. You can also withdraw consent at any time by adjusting your account preferences or by emailing [email protected]. Unsubscribing does not affect transactional or service emails (order confirmations, shipping updates, etc.).
For more detail see Terms & Conditions Section 11.
Subject to applicable law, you have the right to:
To exercise any of these rights, email [email protected]. We will respond within the period required by law (generally 20 working days under New Zealand law, 30 days under Australian law). We may need to verify your identity before acting on a request.
Some rights are subject to exceptions — for example we may need to retain certain order records for tax-compliance purposes.
Our website is intended for users aged 14 and over. Customers under 18 should use the website with the involvement of a parent or legal guardian, particularly for purchases or buylist submissions.
We do not knowingly collect personal information from children under 14. If you believe a child under 14 has provided personal information through our website, please contact us at [email protected] and we will take reasonable steps to delete it.
We use reasonable technical and organisational measures to protect your personal information, including:
No system is perfectly secure. You play an important role in your account’s security:
If we suffer a personal-information breach that meets the threshold for notification under the New Zealand Privacy Act 2020 or, where applicable, the Australian Privacy Act 1988 (Cth), we will notify the relevant regulator and affected individuals as required by law, including a description of what happened, what data was affected, and what we are doing in response.
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be notified by a banner on the website and, where you have an account, by email. Continued use of the website after a change constitutes acceptance of the updated policy.
If you are not satisfied with how we have handled your personal information, please contact us first at [email protected] — we’d like the chance to put things right. If you remain unsatisfied, you have the right to complain to your local privacy regulator:
For privacy questions, to exercise your rights, or to report a concern:
Email: [email protected]