Privacy Policy

Last updated: August 21, 2026

Lotus & Legends operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer or seller, with our Services. Lotus & Legends is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit or use our website, make a purchase or other transaction, submit cards, collections, sealed products, or other items for evaluation or sale, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described below.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies you or can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably identify or be linked to an individual.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

• Contact details, including your name, address, billing address, shipping address, phone number, and email address.

• Financial information, including credit card, debit card, financial account information, payment information, transaction details, payment confirmation, and other payment-related information.

• Account information, including your username, password, security questions, preferences, and settings.

• Transaction information, including items you view, place in your cart, add to a wishlist, purchase, return, exchange, cancel, submit for evaluation, or sell to us, as well as information about past transactions.

• Seller submission information, including card lists, collection details, photographs, descriptions, quantities, condition information, printing or version information, ownership or authorization information, shipping information, payout information, and other information you provide when requesting an evaluation, submitting items, requesting an offer, or selling items to Lotus & Legends.

• Communications with us, including information you provide when contacting us, submitting a seller inquiry, requesting customer support, responding to an offer, or otherwise communicating with Lotus & Legends.

• Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.

• Usage information, including information regarding your interaction with the Services, including how and when you interact with or navigate the website.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, place an order, submit cards or collections for evaluation, communicate with us, or otherwise provide personal information to us.

• Automatically through the Services, including from your device when you use our products or services or visit our website and through cookies and similar technologies.

• From our service providers, including providers that enable technology, payments, website functionality, shipping, communications, analytics, or other business services.

• From our partners or other third parties, when permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

• Provide, Tailor, and Improve the Services. We use your personal information to provide the Services, including processing payments, fulfilling orders, remembering preferences, sending account or transaction notifications, processing purchases, returns, exchanges, or other transactions, managing accounts, arranging shipping, facilitating returns and exchanges, enabling reviews, and improving or customizing your experience.

• Evaluate and Purchase Cards, Collections, and Other Items. We may use information you provide to evaluate Magic: The Gathering cards, sealed products, collections, or other collectible items submitted to Lotus & Legends. This may include reviewing photographs, card lists, descriptions, quantities, versions, conditions, and other information; communicating with you regarding an evaluation or offer; confirming transaction details; arranging shipping or receiving; issuing payment; and maintaining records relating to items purchased from sellers.

• Marketing and Advertising. We may use your personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications by email, text message, or postal mail and displaying advertisements for products or services on our website or other websites, including advertisements based on your prior purchases, interests, or interactions with the Services.

• Security and Fraud Prevention. We may use personal information to authenticate accounts, provide a secure shopping and selling experience, detect and investigate possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, secure our Services, and protect Lotus & Legends and our customers or sellers. If you create an account, you are responsible for keeping your account credentials secure and should not share your username, password, or other access details with anyone else.

• Communicating with You. We use personal information to provide customer support, respond to seller inquiries and collection submissions, communicate regarding offers or transactions, respond to questions, and maintain our business relationship with you.

• Legal Reasons. We may use personal information to comply with applicable law or valid legal processes, respond to requests from law enforcement or government agencies, participate in civil discovery, litigation, or other legal proceedings, and enforce or investigate potential violations of our terms, policies, or agreements.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate business purposes and subject to this Privacy Policy. These circumstances may include:

• With Shopify, vendors, and other third parties that perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, shipping, and other business operations.

• With business and marketing partners that provide marketing services or advertising. For example, Shopify may support personalized advertising using information regarding your online activity across different merchants and websites. These partners will process information according to their own privacy notices.

Depending on where you reside, you may have the right to direct us not to share personal information for targeted advertising or similar purposes. You may exercise applicable opt-out rights here:

https://lotusandlegends.com/pages/data-sharing-opt-out

• When you direct, request, or consent to our disclosure of information to third parties, such as when information must be provided to a shipping carrier, payment provider, or other service provider in order to complete a transaction.

• With affiliates or entities within our corporate group, if applicable.

• In connection with a business transaction such as a merger, acquisition, restructuring, bankruptcy, or sale of assets; to comply with legal obligations, subpoenas, search warrants, or similar requests; to enforce applicable terms or policies; or to protect or defend Lotus & Legends, the Services, our customers and sellers, or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information regarding your access to and use of the Services in order to provide and improve those Services.

Information submitted through the Services may be transmitted to and shared with Shopify and third parties located in countries other than the country in which you reside in order to provide and improve the Services.

In addition, Lotus & Legends may use Shopify features that incorporate information obtained from your interactions with our store, other merchants, and Shopify. In those circumstances, Shopify may be responsible for processing certain personal information, including responding to requests relating to certain privacy rights.

You can learn more about how Shopify processes personal information through the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

You may also access Shopify's privacy portal at:

https://privacy.shopify.com/en

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow links to websites that are not affiliated with or controlled by Lotus & Legends, you should review the privacy policies, security policies, terms, and conditions of those third parties.

We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or platforms.

Information you provide in public or semi-public areas, including information shared on third-party social media platforms, may be viewable by other users and may be used by those third parties according to their own policies.

The inclusion of a link to a third-party website or platform does not necessarily constitute an endorsement by Lotus & Legends of that website, platform, its content, or its owners or operators.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority applicable in their jurisdiction.

If you are the parent or guardian of a child who has provided personal information to us, you may contact us using the information below to request that the information be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell," as those terms may be defined under applicable law, the personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security system is perfect or impenetrable, and we cannot guarantee absolute security.

Information transmitted over the internet or through other communication channels may not always be secure while in transit. We recommend that you do not send sensitive or confidential information through unsecured communication channels.

How long we retain personal information depends on a number of factors, including whether the information is necessary to maintain an account, provide Services, process purchases or seller transactions, maintain business and tax records, comply with legal obligations, resolve disputes, prevent fraud, or enforce applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information.

These rights are not absolute and may apply only under certain circumstances. In some cases, we may decline a request where permitted by applicable law.

• Right to Access / Know. You may have the right to request access to personal information we maintain about you.

• Right to Delete. You may have the right to request deletion of personal information we maintain about you.

• Right to Correct. You may have the right to request correction of inaccurate personal information.

• Right of Portability. You may have the right to receive a copy of certain personal information we maintain about you and, in certain circumstances, request that it be transferred to a third party.

• Right to Opt Out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have the right to opt out of the "sale" or "sharing" of personal information or the processing of personal information for targeted advertising purposes as those terms are defined under applicable law.

You can exercise applicable opt-out rights here:

https://lotusandlegends.com/pages/data-sharing-opt-out

If you visit our website using a Global Privacy Control opt-out preference signal, we may automatically treat that signal as an opt-out request for the device and browser you are using where required by applicable law. If Shopify is able to associate that device with a Shopify account, the request may also be applied to that account.

More information about Global Privacy Control is available at:

https://globalprivacycontrol.org/

Other than Global Privacy Control where applicable, we do not necessarily recognize other "Do Not Track" signals sent by browsers or devices.

• Managing Communication Preferences. We may send promotional emails or other marketing communications. You may unsubscribe from promotional emails using the unsubscribe option included in those communications. Even if you opt out of promotional communications, we may still send non-promotional communications regarding your account, purchases, seller submissions, offers, transactions, or other business matters.

You may exercise applicable privacy rights through the Services where available or by contacting us using the information provided below.

To learn more about how Shopify processes personal information and your rights relating to data processed by Shopify, visit:

https://privacy.shopify.com/en

We will not discriminate against you for exercising applicable privacy rights.

We may need to verify your identity before processing certain requests, as permitted or required by law. Where permitted, you may designate an authorized agent to submit a request on your behalf. We may require proof that the agent has authority to act for you and may also require you to verify your identity directly with us.

We will respond to valid requests within the period required by applicable law.

Complaints

If you have a complaint regarding how Lotus & Legends processes your personal information, please contact us using the information below.

Depending on where you reside, you may have the right to appeal certain decisions regarding privacy requests or submit a complaint to your local data protection authority.

International Transfers

Personal information may be transferred, stored, or processed outside the country in which you live.

Where required by applicable law, transfers of personal information outside the European Economic Area or United Kingdom may rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, equivalent agreements approved by the appropriate United Kingdom authority, or transfers to jurisdictions determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, Services, technology, legal requirements, or other operational reasons.

When we update this Privacy Policy, we will post the revised version on this website and update the "Last updated" date. Where required by law, we may also provide additional notice regarding material changes.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise any rights that may be available to you, please email us at:

contact@lotusandlegends.com