Privacy policy

Last Updated: 4 January 2026

Quiet Yard Ltd, trading as Card & Loot (“we”, “us”, “our”) operates this store and website, including all related information, content, features, tools, products and services (the “Services”), in order to provide you, the customer, with a curated shopping experience. Card & Loot is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect or Process

“Personal information” refers to information that identifies or can reasonably be linked to you. It does not include anonymous or de-identified data. Depending on your interaction with the Services, we may collect:

  • Contact details: name, billing address, shipping address, phone number, email address
  • Financial information: payment card details, transaction data, payment confirmations
  • Account information: username, password, preferences
  • Transaction information: items viewed, added to basket, purchased, returned, exchanged, or cancelled
  • Communications: customer support enquiries
  • Device information: IP address, browser type, device identifiers
  • Usage information: how and when you interact with the Services

2. Personal Information Sources

We may collect personal information:

  • Directly from you
  • Automatically through the Services (including cookies and similar technologies)
  • From service providers acting on our behalf
  • From partners or other third parties

3. Cookies & Tracking

We use cookies, pixels, and similar technologies to operate our store, analyse traffic, personalise content, and deliver relevant advertising. You may manage cookie preferences through your browser settings, but blocking cookies may affect certain features or functionality of the Services.

4. How We Use Your Personal Information

We may use your personal information to:

  • Operate and improve the Services
  • Process payments and fulfil orders
  • Communicate about your account or orders
  • Provide customer support
  • Send marketing and promotional communications (you may opt out at any time)
  • Detect, prevent, and investigate fraud or unauthorised activity
  • Comply with legal and regulatory obligations

5. How We Share Personal Information

We may disclose your personal information:

  • To Shopify and service providers who help operate our business
  • To marketing or advertising partners, subject to applicable law
  • When you provide consent or direct us to do so
  • To affiliates within our corporate group
  • In connection with legal obligations, business transactions, or enforcement of our policies

References to “selling” or “sharing” personal information are included to comply with international privacy laws and may not apply in all jurisdictions.

6. Relationship with Shopify

The Services are hosted by Shopify. Shopify processes personal information to provide and improve the Services, and information may be transferred and processed outside your country of residence. For more details, see the Shopify Privacy Policy.

7. Third-Party Websites and Links

The Services may contain links to third-party websites or platforms. We are not responsible for the privacy practices, security, or content of those third parties. Review their privacy policies before providing personal information.

8. Children’s Data

The Services are intended for individuals legally able to enter into binding contracts. Purchases must be made by a parent, guardian, or other authorised adult. If a child has provided personal information, a parent or guardian may contact us to request deletion.

9. Security and Retention

We take reasonable steps to protect personal information; however, no system is completely secure. We retain personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our policies.

10. Your Rights

Depending on your location, you may have the right to:

  • Access, correct, delete, or transfer your personal information
  • Object to certain processing activities
  • Withdraw consent
  • Restrict processing

    UK and EEA residents may exercise additional rights. Requests can be made via email: contact@cardandloot.co.uk - Verification of identity may be required.

11. International Transfers

We may transfer, store, and process personal information outside your country of residence. Where required, we rely on recognised legal mechanisms, such as Standard Contractual Clauses.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. Any updates will be posted on this page with an updated “Last Updated” date.

13. Contact

Quiet Yard Ltd (trading as Card & Loot)
Email: contact@cardandloot.co.uk
Registered Office Address:
71–75 Shelton Street
London
WC2H 9JQ
United Kingdom

For applicable data protection laws, Quiet Yard Ltd is the data controller of your personal information.