1. Introduction

This Privacy Policy explains how Poke Spot (“Poke Spot,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit pokespotme.com, create an account, place an order, contact our support team, or otherwise interact with our services.

Poke Spot operates an e-commerce business offering Pokémon TCG products, collectibles, figures, plush, toys, and related merchandise, primarily serving customers in Egypt. By using our website or services, you agree to the practices described in this Policy. If you do not agree, please do not use the site.

2. Information We Collect

We collect information that you provide directly, information collected automatically as you use the site, and information from trusted service providers who help us run our business.

Contact Data

  • Name
  • Email address
  • Phone number
  • Delivery and billing address

Order Data

  • Purchased items and order history
  • Payment status (we do not store full card details — see Section 4)
  • Delivery details and tracking information
  • Refund, return, and exchange requests
  • Customer support communications

Account Data

  • Login credentials (stored in encrypted form)
  • Wishlists and saved items
  • Reward and wallet settings, where enabled
  • Saved addresses and preferences

Technical Data

  • IP address and approximate location
  • Browser type, device type, and operating system
  • Cookies and similar tracking technologies (see Section 7)
  • Site usage data, including pages visited, referral sources, and session timing

3. How We Use Your Information

We use personal data for the following purposes:

  • To create and manage your account
  • To process, deliver, and support your orders
  • To prevent fraud, misuse, and payment risk
  • To communicate with you about orders, stock issues, pre-orders, returns, and customer service matters
  • To send marketing messages where permitted and where you have opted in (you can unsubscribe at any time)
  • To improve our website, product pages, and overall customer experience
  • To comply with legal obligations and enforce our terms

4. Legal Bases for Processing

We process personal data on the following grounds:

  • Performance of a contract — when we need your data to process and deliver your order, manage your account, or respond to a service request.
  • Legitimate business interests — such as fraud prevention, analytics, service improvement, and customer support.
  • Consent — for certain marketing communications and non-essential cookies, where required by applicable law. You may withdraw consent at any time.
  • Legal obligation — when we are required to retain or share data to comply with applicable laws or respond to lawful requests.

5. How We Share Your Information

We do not sell your personal data. We share information only with parties that help us operate our business or where we are legally required to do so.

Service Providers

  • Payment providers, who process card and digital payments. Full payment card details are handled by the payment processor, not stored by Poke Spot.
  • Shipping and courier partners, who deliver orders to your address.
  • Website hosting and infrastructure providers.
  • Fraud prevention and security tools.
  • Customer support and helpdesk tools.
  • Email and SMS service providers used to send order updates and approved marketing messages.
  • Analytics providers, used to understand site performance and improve the experience.

Legal and Safety Disclosures

We may share information with public authorities, regulators, or legal advisers where required by law, to respond to lawful requests, to enforce our terms, or to protect the rights, property, or safety of Poke Spot, our customers, or others.

6. Data Retention

We keep personal data only for as long as necessary to:

  • Provide our services and fulfill your orders
  • Maintain accurate business and financial records
  • Resolve disputes, returns, or warranty claims
  • Comply with legal, tax, and accounting obligations
  • Enforce our agreements and protect against fraud

When personal data is no longer needed, we securely delete or anonymize it in line with our internal retention practices and applicable law.

7. Cookies and Tracking Technologies

Cookies are small files placed on your device when you visit our site. We use cookies and similar technologies to make the site work, understand how it is used, and personalize your experience.

Essential Cookies

These keep the site running. They support core functions such as keeping items in your cart, completing checkout, maintaining login sessions, and applying basic security protections. Essential cookies cannot be turned off without affecting how the site works.

Analytics Cookies

These help us measure site traffic, page performance, and customer journeys so we can improve speed, content, and usability.

Preference Cookies

These remember choices such as language, region, or saved preferences where available.

Marketing Cookies

If we run advertising, retargeting, or social media campaigns, marketing cookies may be used to show you relevant ads. These are enabled only in line with applicable law and your cookie choices.

Your Cookie Choices

Where required by law, you can accept, reject, or manage non-essential cookies through our cookie settings tool. You can also control cookies through your browser settings, but disabling some cookies may affect how the site works.

8. International Data Transfers

Some of our service providers may process or store personal data outside of Egypt. When this happens, we take reasonable steps to ensure your information is treated with an appropriate level of protection in line with the service involved and applicable law.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Deletion — ask us to delete personal data, subject to legal and contractual limits.
  • Restriction — ask us to limit how we process your data in certain situations.
  • Objection — object to certain types of processing, such as direct marketing.
  • Portability — request a copy of certain data in a structured, machine-readable format.
  • Withdraw consent — at any time, where consent is the basis for our processing.

To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before completing the request.

10. Security

We use reasonable technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, alteration, and disclosure. These measures include access controls, encryption in transit, secure payment processing through trusted providers, and regular review of our systems.

However, no online service can be guaranteed completely secure. You are responsible for keeping your account credentials confidential and for notifying us promptly if you suspect unauthorized use of your account.

11. Children’s Privacy

Poke Spot is intended for general audiences and is not directed to young children for direct data collection. We do not knowingly collect personal information from children in a way that requires parental consent under applicable law.

Parents and guardians should supervise minors who use the site. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can take suitable action.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this Policy and, where appropriate, notify you through the website or by email.

We encourage you to review this Policy periodically to stay informed about how we protect your information.