Legal

Privacy Policy

Version 2026-10-31

1. Who is responsible for your data

The controller of your personal data is Emil Cychylik, trading as Room Jack Heroes (Casecore Games), ul. Michała Kmiecika 25, 70-809 Szczecin, Poland, VAT ID PL9552404869. Contact for any privacy matter: hello@casecoregames.com.

2. What we process, why, and on what legal basis

  • Orders: name, company name, VAT number, email, phone, billing and delivery addresses, ordered products and order history — to review your order, conclude and perform the contract, arrange delivery and contact you about the order (GDPR art. 6(1)(b)). Contacting you about your order needs no separate consent.
  • Invoices and accounting records — to meet tax and accounting obligations (art. 6(1)(c)).
  • VAT number check in the EU VIES system, and the VIES consultation number — to apply the correct VAT (art. 6(1)(c)).
  • Checkout evidence: time of acceptance of the Terms, the Terms version, your consent choices, IP address and browser identifier — to prove the contract and consents and to prevent fraud (art. 6(1)(f), our legitimate interest).
  • Marketing by email and marketing by phone: only if you tick the matching optional box at checkout (art. 6(1)(a) GDPR and the Polish Electronic Communications Law). You can withdraw consent at any time via the unsubscribe link or by email; this does not affect earlier processing.
  • Support tickets: the data you give in the support form — to handle your request and warranty claims (art. 6(1)(b) and (f)).
  • Website analytics and cookies: only as chosen in the cookie banner (art. 6(1)(a)).

3. Who receives your data

  • Our hosting provider and our email provider (Google Workspace).
  • Stripe Payments Europe Ltd., if you choose online payment: Stripe processes your payment details on its own pages; we never see full card numbers.
  • Courier and logistics companies, for delivery.
  • Our accounting office and, where required by law, public authorities.
  • Some providers (Google, Stripe) may transfer data outside the EEA; they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

4. How long we keep it

  • Order and invoice data: 5 years from the end of the calendar year in which the tax obligation arose (Polish tax law), and longer if needed for a pending claim.
  • Orders that were cancelled before acceptance: up to 3 years, for possible claims and fraud prevention.
  • Marketing data: until you withdraw consent.

5. Your rights

You have the right to access, correct, delete or restrict your data, to data portability, to object to processing based on legitimate interest, and to withdraw consent. Write to us at the address above. You may also complain to the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Giving your data is voluntary, but without the order data we cannot accept and deliver an order. We do not make automated decisions with legal effect about you.

6. Children

The store is not intended for persons under 16.