Privacy notice

Who we are

Jungle Cards & Games is run by [REGISTERED BUSINESS NAME], registration number [REGISTRATION NUMBER], [BUSINESS ADDRESS], Brunei Darussalam.

If you have a question about your personal information, contact the store's Data Protection Officer at [EMAIL].

What we collect

When you order online

• your name, email address and phone number
• your delivery address, if you choose delivery
• what you ordered, what you paid and how your order is going
• the payment receipt you upload. Receipts can show your name, your bank and part of your account number. When you upload one, we strip out hidden details such as where the photo was taken.

When you buy at our counter

• what you bought, what you paid and how you paid
• your name, only if you choose to give it

When you browse our site

• your IP address, which we scramble before storing it, so it can't be turned back into the original address. We use it to keep the site safe, for example to stop automated orders.
• one essential cookie that remembers your cart. We don't use advertising or tracking cookies.

We never ask for card details, because we don't take card payments.

Why we use it

• to process your order, hold your cards while you pay, check your payment and get your order ready
• to contact you about your order
• to stop abuse, for example by limiting how many unpaid orders one email address or phone number can have open
• to keep the business and accounting records we're required to keep

We won't send you marketing unless you've asked us to, and you can stop it at any time.

Who we share it with

We use a few service providers to run the store, and each one only gets what it needs to do its job:

• Hosting. Our website and its data are stored on servers in Singapore, so your information is kept outside Brunei. We only use providers that protect it to a standard comparable to the PDPO.
• Bot checking. When you place an order, a security service checks that it comes from a real person. It sees technical details from your browser, not your order.
• Email delivery. An email service delivers our emails to you, such as your order confirmation and pickup notices.

We don't sell your personal information to anyone.

How long we keep it

• Orders (what was bought, prices, and your name): at least 7 years, for our accounts.
• Payment receipts, and the orders they belong to: permanently, as part of our business records, so we can answer payment questions later.
• Contact details on orders that were never paid and had no receipt uploaded: deleted 90 days after the order ended.

How we protect it

• Only our staff can see orders, and each person signs in with their own account.
• What each staff member can see depends on their role.
• Receipts are stored encrypted and are never available at a public web address. Every time a staff member opens one, it's recorded.
• Our website uses an encrypted connection (HTTPS).

If a data breach is likely to cause you significant harm, we'll tell you and AITI, as the PDPO requires.

Your rights

You can ask us to:

• show you the personal information we hold about you
• correct anything that's wrong
• stop using information you gave with your consent. If an order is still open, this may mean we can't complete it.

Contact the store's Data Protection Officer at [EMAIL]. We'll reply within 30 days. If you're not happy with our answer, you can complain to AITI, the Authority for Info-communications Technology Industry of Brunei Darussalam.

Changes to this notice

If we change this notice, we'll update the date at the top. If the change is significant, we'll also show a note on our site.