Legal
Privacy Policy
Last updated: 2 June 2026
1. Who is responsible for your data
This Privacy Policy explains how iskurajp collects and uses personal data when you use our website, waitlist, or shop.
Michael Williams trading as iskurajp (trading as iskurajp)
Business address: Greater London, United Kingdom
Email: help@iskurajp.co.uk
For UK data protection law, the data controller is the legal entity named above (or the operator identified there if the legal entity name is being finalised).
2. Personal data we collect
- Email address and name (when you sign in, join the waitlist, or place an order).
- Delivery name and UK address when you checkout.
- Order history, basket contents, condition tier choices, insurance selections, payment status, and Vault Shards balance and ledger history when you use our loyalty programme.
- Referral invite code (yours and any code you apply), referral link visits (cookie), manual referral code entry in your account, and attribution records between referrer and referred accounts.
- Stripe payment identifiers and amounts (we do not receive your full card number).
- Photos and optional card codes you submit for off-catalogue card requests, plus our quotes and status updates for those requests.
- Communications you send us (support emails).
- Technical data: IP address, browser type, device information, and cookie/consent choices.
- Optional waitlist fields such as main interest, if you provide them.
- If you leave a public review on Trustpilot, Trustpilot processes that content under its own policy.
3. How we use your data
- Provide the shop: accounts, checkout, order fulfilment, customer support, and the Vault Shards loyalty programme (balance, earn/redeem history, referral attribution, fraud prevention).
- Send transactional emails and account sign-in (Google OAuth or email magic links, order updates, sourcing milestones).
- Send optional service review invitations after UK delivery (via Trustpilot).
- Process card-request photos and, where enabled, automated catalogue-matching suggestions to prepare quotes.
- Send waitlist or marketing emails where you have agreed (you can unsubscribe).
- Improve the site and measure traffic when you consent to analytics cookies.
- Prevent fraud, abuse, and security incidents.
- Comply with law, tax, and accounting obligations.
4. Lawful bases (UK GDPR)
We process personal data on the following bases:
- Contract: to take steps at your request before checkout and to fulfil orders.
- Legitimate interests: to run and secure the site, improve services, send proportionate post-order review invitations, and handle complaints, balanced against your rights.
- Consent: for non-essential analytics cookies and optional marketing/waitlist communications where required.
- Legal obligation: where we must retain records for tax or regulatory purposes.
5. Service providers
We use trusted processors who handle data on our instructions:
- Stripe: payment processing.
- Resend: transactional and marketing email delivery.
- Trustpilot: service review invitations and hosting of public reviews you choose to publish.
- Google: Google Analytics (when you accept analytics cookies) and, when enabled, cloud AI services to assist with photo-based card-request identification.
- Hosting and infrastructure providers for the website and API.
6. International transfers
Our Japan partner receives only the information needed to source and handle your card (for example, card identity and condition tier). We do not send your full payment card details to Japan.
Some processors (for example Stripe, Google, Trustpilot, or email providers) may process data outside the UK. Where required, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
7. How long we keep data
We keep order and payment records for as long as needed to fulfil orders, handle disputes, and meet legal, tax, and accounting requirements, typically several years for financial records.
Waitlist and marketing data is kept until you unsubscribe or ask us to delete it, subject to any suppression records we must retain.
Card-request photos and related processing logs are kept for as long as needed to handle the request and any resulting order, then deleted or anonymised when no longer required.
Trustpilot may retain review-invitation and review data under its own retention policy.
Analytics data is kept according to Google Analytics configuration and our retention settings.
8. Your rights
Under UK GDPR you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability where applicable. You may withdraw consent at any time for processing based on consent.
To exercise your rights, email help@iskurajp.co.uk. We may need to verify your identity. We will respond within one month in most cases.
You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.
9. Service review invitations
After your order is marked delivered in the UK we may send you a one-off email inviting you to rate your experience with iskurajp on Trustpilot. We share your email address, name (or a reasonable display name), and an order reference with Trustpilot for this purpose. We do not send review invitations at checkout.
You can ignore the invitation. If you publish a review, Trustpilot is the platform controller for that public content. Contact Trustpilot to manage or delete a published review.
To opt out of future review invitations from us, email help@iskurajp.co.uk.
10. Marketing and waitlist
If you join the waitlist or subscribe to updates, we use your email to send launch and product news. We will not sell your personal data.
Every marketing email includes a way to unsubscribe. You can also contact help@iskurajp.co.uk to opt out.
12. Children
Our shop is not directed at children under 18. We do not knowingly collect personal data from anyone under 18.
13. Changes
We may update this policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes may also be highlighted on the site.
14. Contact
Privacy questions: help@iskurajp.co.uk.
Michael Williams trading as iskurajp (trading as iskurajp)
Business address: Greater London, United Kingdom
Email: help@iskurajp.co.uk
General notice
This information is provided for general guidance about how iskurajp operates. It is not legal advice. If you need advice for your own situation, consult a qualified solicitor.