PULLMANCER CARD COMPANY

Privacy notice

Policy updated: 27 September 2026. You can print this page or save it as a PDF for your records.

Who is responsible

P Cain Limited trading as Pullmancer Card Company. 32 Far Hey Close, Radcliffe, Manchester, M26 3GL Privacy enquiries: orders@pullmancer.co.uk

Information used by the store

We use basket contents, order details, contact information, delivery addresses and payment references to process and fulfil orders. Payment card details are handled by Stripe and are not stored in this store. Administrative sign-in uses ChatGPT; the store receives the signed-in account identity to check staff access.

Contact and trade-in enquiries

We use your name, email, optional phone number, message and attached photographs to respond to enquiries and assess proposed purchases. Enquiries are emailed through Resend to our business inbox, which forwards to Gmail. Photographs are held in private website storage and accessed by authorised store staff through signed-in administration links. They are not public product images. Do not include payment details or unrelated personal information. We retain enquiry messages and photographs while responding, valuing items or resolving a related transaction or dispute. Retention is reviewed when the enquiry is resolved; records no longer needed for those purposes or a legal obligation are deleted, including associated uploads. A keyed, non-readable network identifier and request counts are held for up to 25 hours to prevent form abuse; raw IP addresses are not saved by this form.

Why we use it

Order processing and customer support are needed to perform our contract with you. Accounting records are kept to meet legal duties. Access controls, security logs and fraud prevention serve our legitimate interest in protecting customers and the business.

Services involved

The site uses OpenAI Sites and Cloudflare to operate the website and store its records and photographs. Stripe processes payments. Resend sends transactional messages. Delivery details are shared with the carrier when fulfilling an order. Service providers may process data outside the UK under their applicable transfer safeguards.

Cookies & retention

A necessary basket cookie remembers your basket for up to 30 days. Staff authentication also uses necessary sign-in cookies. The store does not use advertising cookies. To improve the shop, we collect daily aggregate counts of public page and product views, same-site link and button clicks, search and filter actions, basket changes, failed basket actions, checkout clicks, public form starts, submit attempts and browser validation errors, scroll depth and time on pages. Anonymous aggregate records contain only a UK date, event type and public page, product or action category with counts and quantities. They do not contain IP addresses, visitor IDs, search terms, full referring URLs, campaign labels, order identifiers or links between actions; form totals never contain entered information. Anonymous totals continue when you choose “No thanks”; choose “Turn off all statistics” in the banner or Privacy settings to object and stop these totals. Anonymous records are retained for up to 90 days and are not used for advertising. If you choose “Allow session analytics”, we also link permitted events within a tab session to report journeys, search terms, broad referral categories and campaign labels. We do not store names, payment details or private order links in these analytics, and search terms resembling an email address or phone number are redacted. Session records are retained for up to 90 days. Your statistics preference is remembered for six months and can be changed using Privacy settings in the footer. A staff-browser exclusion cookie lasts one year. Hosting providers may process ordinary request metadata to deliver and secure the website. Statistics are processed using our existing website hosting and database services. Order and accounting records are retained for applicable accounting and tax obligations and for any unresolved refund, dispute or legal claim. Retention depends on the transaction date, the legal record-keeping requirement and whether a matter remains open. Customer information is accessible only to authorised staff and service providers who need it for these purposes. Email requests to the privacy contact above to ask for access or deletion; we check identity before releasing records and explain any legal reason we must retain them. We do not subscribe enquiry senders or buyers to marketing emails.

Your rights

You can ask to access, correct or delete your information, restrict or object to relevant processing, or receive a portable copy where applicable. Some records must be retained to meet legal obligations. Contact the operator above. You may also raise a concern with the Information Commissioner’s Office.