Bible TCG Privacy Policy
Version 3.0 — September 18, 2026. Document ID: BTCG-PRIVACY-POLICY-R3.
1. Responsibility and contact. This Policy explains how the business identified in the Legal Center handles personal information under its control. Bible TCG operates from Ottawa, Ontario. Rocky Santangela is the privacy contact: rocky@bibletcg.com, 1 (833) KJV-ONLY, or Privacy Officer — Bible TCG, 1 Rideau St, Ottawa, ON K1N 8S7, Canada. References to an optional or planned feature apply when that feature is offered and you use it.
2. Information collected. Depending on your activity, we collect contact and delivery details; account and public display names; age-eligibility and guardian records; authentication, device, IP address, diagnostic and security information; orders, payment status, tax, refund and rewards records; support messages and forms; and content you choose to submit. Game features may require collections, Decks, Match results, progression and anti-cheat information. A course may record enrollment and progress. We do not require every category from every person.
Artist applications and commissions may involve portfolios, actual work location, contracts, authorship declarations, approved creation evidence, source files, rights records and earned compensation. Organizer and League activities may involve venue authority, approval records, enrollment, attendance, Deck registration, results, ratings, guardian permissions and incident reports. Provide only information relevant to the requested activity; do not send full payment-card details, passwords or unrelated private records through ordinary email.
3. Purposes. We use relevant information to operate and secure accounts and requested services; process orders and fulfillment; administer rewards; assess applications; document commissions and rights; run events and maintain accurate competitive records; provide support; investigate fraud, abuse or safety concerns; and meet applicable accounting, legal and dispute obligations. Necessary receipts and fulfillment, security and contract messages are separate from optional promotional messages. We obtain additional consent or another lawful basis where required for a materially new purpose.
4. Service providers and payments. Wix supplies website, Store and associated account, form or communication functions used on the site. Enabled payment providers process payment credentials and provide us transaction status, limited payment-method information and relevant billing or fraud details. Hosting, database, security, file-storage and fulfillment providers receive information necessary for their services. The provider displayed at checkout handles the particular payment. We generally do not receive complete payment-card numbers or security codes. Ask the privacy contact for the providers relevant to your information and their processing locations.
We have not added separate third-party advertising pixels or external advertising analytics to the services described in this version. This does not mean Wix, payment infrastructure, security tools or a feature you choose uses no cookies, logs or usage information. We do not sell personal information for money or authorize its disclosure for cross-context targeted advertising under this version. A change to those practices requires advance notice and the choices or consent required by law.
5. Other recipients. Relevant information may be disclosed to authorized reviewers and event officials; carriers and customs services; advisers or insurers where actually engaged for a relevant matter; authorities where legally required; or a genuine business successor under applicable safeguards. An independent retailer, venue or connected community platform may control information it collects for its own purposes. We explain the role relevant to your interaction. We do not give organizers general access to customer, artist or marketing databases.
6. Public records and publicity. Public community posts are visible to their stated audience. Artist credit uses the approved credit name. Public League standings use an approved competition name or alias and proportionate results information disclosed before enrollment. A permanent Play ID is used for internal administration; a minor's permanent identifier and precise live attendance or location are not published by default. Results can still reveal past participation, so we explain the actual public fields and applicable safeguards before activation.
Organizer map listings use authorized venue information. A pending listing is optional, clearly marked unapproved, and does not disclose private applications, screening records or precise residential coordinates. Identifiable promotional photos, livestreams, interviews, biographies and artist process footage require appropriate separate permission, including guardian involvement where required. Attending, applying or joining is not blanket publicity consent.
7. Consent and choices. We explain necessary information and optional uses at the relevant step. You may withdraw optional consent, unsubscribe from marketing, use available cookie controls, disconnect an optional integration or contact us. Withdrawal may prevent a feature that genuinely needs the information, but does not authorize unrelated penalties. It does not invalidate earlier lawful processing or require destruction of necessary legal records. We do not require a profession of faith for purchases or ordinary League participation, or infer a person's beliefs solely from participation. Avoid submitting sensitive religious, health or family details unless relevant to a specifically explained purpose.
8. Children and minors. We do not offer accounts or direct online submissions to children under thirteen. Higher local requirements and meaningful consent requirements still apply. A minor's guardian must complete the necessary permission process; a checkbox or an adult's presence alone does not establish authority or consent. If we learn of an underage account or submission, we restrict the affected processing and arrange deletion or another legally required response. A parent can contact us concerning a child's information. Offline learning arrangements do not authorize uploading younger children's information into the rated system.
9. International processing. Providers may process information in Canada, the United States or other countries. Foreign laws and lawful authority access may differ. We use the contractual, assessment and transfer safeguards applicable to the particular processing; ask us about the relevant arrangement. We do not promise Canada-only storage. Where EEA or UK law applies, processing must have an appropriate basis, such as necessary contract performance, a legal obligation, a properly assessed legitimate interest or consent. Sensitive information and restricted international transfers require their additional applicable conditions.
10. Retention. Identifiable information is retained only while needed for its purpose, applicable legal records or a documented claim. Account records support active service and necessary closure, recovery and integrity tasks. Transaction records generally follow applicable Canadian tax retention requirements, commonly six years from the end of the relevant tax year, with exceptions where law requires. Rights and commission records may remain necessary while acquired intellectual property is used and for relevant claims afterward. Unsuccessful applications, raw recordings and identity evidence are reviewed separately; retaining a signed agreement does not justify keeping all supporting personal material indefinitely. Marketing suppression records may be kept to honor an unsubscribe. Unneeded records are deleted, anonymized or appropriately isolated; a legal hold limits use to its necessary purpose.
11. Security and incidents. We apply safeguards proportionate to the sensitivity and risks, including appropriate access restrictions and provider controls. Private applications, guardian records and incident evidence are separated from public listings. No system is completely secure. Report suspected unauthorized access promptly. We investigate incidents, keep required records and make legally required notifications; we do not promise that every incident requires public disclosure.
12. Access, correction and complaints. Depending on applicable law, you may request access, correction, deletion, restriction, portability, withdrawal of consent, objection or review of certain processing. We verify identity proportionately and explain any lawful exception or refusal. Email "Privacy Request" to rocky@bibletcg.com with enough information to locate the relevant record. We respond within the applicable legal period. You may complain to the competent privacy regulator, including the Office of the Privacy Commissioner of Canada where applicable, without first surrendering a legal right.
13. Automated processing and changes. Tools may calculate results or assist with fraud, security and administration. You may request human review of a disputed eligibility, account or competitive decision. When applicable law requires notice or an explanation for a decision based exclusively on automated processing, we provide that notice and the applicable information and review opportunity. Material privacy changes receive appropriate notice and any necessary new consent; a policy update alone does not authorize an incompatible new use.