Privacy policy

Last updated: May 25, 2026

This Privacy Policy describes how Card Imports ("we," "us," or "our") collects, uses, shares, and protects personal information when you visit cardimports.com (the "Site") or place an order with us. Card Imports is a Wyoming limited liability company with operations in Texas.

1. Information We Collect

We collect the following categories of personal information:

  • Contact and order information. Name, shipping address, billing address, email address, phone number, and order history.
  • Payment information. Card-payment data is collected and processed by our payment processor (Shopify Payments, Stripe, and similar). We do not store full card numbers on our servers; we receive only a token and the last four digits for reconciliation.
  • Account information. If you create an account, your login credentials and saved preferences.
  • Device and usage information. IP address, browser type, operating system, referrer URL, time stamps, pages viewed, and other analytics data automatically collected when you browse the Site.
  • Cookies and similar technologies. Session cookies for cart functionality, analytics cookies (Google Analytics), advertising cookies (Google Ads, Meta Pixel, where used), and similar tracking technologies. See "Cookies" below.
  • Communications. Any messages you send to our support email or contact form, and any reviews or comments you post on the Site.

2. How We Use Personal Information

We use personal information for the following purposes:

  • Processing and fulfilling orders, including payment, shipping, customs clearance for international orders, and any accommodation we choose to provide.
  • Communicating with you about orders, shipping updates, support requests, and account matters.
  • Marketing and promotional communications by email, SMS or text message (only where you have provided express written consent), push notification, and similar means, where you have opted in or where otherwise permitted by law. You may opt out at any time by following the unsubscribe link in any email, by replying STOP to any text message, or by emailing support@cardimports.com. Standard message and data rates from your carrier may apply to any SMS communications.
  • Site analytics and product improvement, including measuring traffic, identifying technical issues, and optimizing the user experience.
  • Fraud prevention, anti-abuse, and security, including reviewing high-risk orders, blocking suspicious activity, defending chargebacks and other payment disputes, and protecting against fraudulent claims.
  • Legal compliance, including tax reporting, responding to subpoenas and lawful requests, and enforcing our Terms of Service.

3. How We Share Personal Information

We share personal information only with the following categories of recipients:

  • Service providers who perform services on our behalf, including Shopify (ecommerce platform), payment processors, shipping carriers (USPS, UPS, FedEx, DHL), email providers, fraud-screening services, and analytics providers. These providers are contractually limited to using personal information only for the purposes of providing services to us.
  • Card issuers and payment processors in connection with any chargeback, refund, or other payment dispute, as authorized by you under our Terms of Service.
  • Government and law-enforcement authorities when required by valid legal process, when reporting taxes, or when responding to a subpoena or court order.
  • Successors in the event of a merger, acquisition, or sale of all or substantially all of our assets, in which case personal information will be transferred subject to the receiving party's commitment to honor this Privacy Policy.

We do not sell or rent personal information to third parties for monetary consideration. To the extent any sharing of online identifiers with advertising platforms (such as Google Ads, Meta) constitutes a "sale" or "sharing" under California or other state privacy law, you have the right to opt out. See "State Privacy Rights" below.

4. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to function correctly, remember your preferences, measure traffic, and (where applicable) deliver targeted advertising. You can control cookies through your browser settings, but disabling certain cookies (such as session cookies for cart functionality) may impair Site performance. Specific tools we may use include Google Analytics, Google Ads conversion tracking, Meta Pixel, and Shopify's first-party analytics. Each of these has its own privacy policy and opt-out mechanisms; we honor the Global Privacy Control (GPC) signal where it is sent.

5. International Data Transfers

Card Imports operates from the United States and processes personal information in the United States. If you visit the Site from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. We use standard contractual clauses and other appropriate safeguards for transfers from the European Economic Area, the United Kingdom, and Switzerland where required by law.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations (including tax, accounting, and consumer-protection record-keeping), resolve disputes, defend representments and legal claims, and enforce our agreements. Order records and dispute-related records are typically retained for at least seven (7) years.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal information we hold about you.
  • Correction: request correction of inaccurate or incomplete information.
  • Deletion: request deletion of your personal information, subject to legal record-keeping requirements.
  • Portability: request a copy of your information in a portable, machine-readable format.
  • Opt out of marketing: unsubscribe from marketing emails at any time using the link in any marketing message, reply STOP to any SMS or text message from us, or email support@cardimports.com.
  • Opt out of sale or sharing for targeted advertising: see "State Privacy Rights" below.
  • Withdraw consent: where processing is based on your consent, you may withdraw consent at any time.

To exercise any of these rights, email support@cardimports.com with a description of your request. We may need to verify your identity before fulfilling the request.

8. State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or any other US state with a comprehensive consumer-privacy law in effect, you have certain rights regarding your personal information, which may include the right to:

  • Know the categories of personal information we collect, the sources of that information, and the purposes for which we use it.
  • Access, correct, or delete your personal information.
  • Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising (also called "targeted advertising").
  • Opt out of profiling that produces legal or similarly significant effects.
  • Designate an authorized agent to make a request on your behalf.
  • Be free from retaliation for exercising these rights.

To opt out, email support@cardimports.com with the subject line "Privacy Rights Request" and describe the right you wish to exercise. We honor the Global Privacy Control (GPC) signal as a valid opt-out. We do not sell personal information for monetary consideration. Categories of personal information we may share for cross-context behavioral advertising include online identifiers, device information, and browsing activity. The specific rights available depend on your state of residence and the applicable state law.

9. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, our lawful bases for processing personal information are: performance of a contract (order fulfillment), legitimate interests (fraud prevention, analytics, chargeback defense), consent (marketing communications, optional cookies), and legal obligation (tax records, consumer-protection records). You have the right to lodge a complaint with your local supervisory authority.

10. Children's Privacy

The Site is intended for adult purchasers only and is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under thirteen. If you believe we have collected personal information from a child under thirteen, contact us immediately and we will delete the information.

11. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. Payment data is handled by PCI-DSS-compliant processors. No system is perfectly secure, however, and we cannot guarantee absolute security.

12. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those third parties; their privacy policies govern their handling of personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through a notice on the Site or by email where appropriate.

14. Contact

Questions about this Privacy Policy, or to exercise any of the rights described above, can be sent to support@cardimports.com.