PRIVACY POLICY & COOKIE POLICY

**Last updated: 25 August 2026**

## 1. Introduction

**THE CARDEN respects your privacy and is committed to protecting your personal data.**

This Privacy Policy and Cookie Policy explains how we collect, use, disclose, store and protect personal data when you:

– visit **thecarden.ch**;
– create a customer account;
– place an order;
– make or attempt to make a payment;
– contact us;
– subscribe to updates or marketing communications;
– submit trading cards for evaluation or sale;
– participate in events, tournaments, promotions or other services offered by THE CARDEN;
– otherwise interact with our Website or services.

This Privacy Policy applies to the Website **thecarden.ch**, including its online store and related services.

By using the Website, you acknowledge that your personal data may be processed as described in this Privacy Policy.

Where consent is required for the use of cookies or other technologies, you may provide, refuse or withdraw that consent through the cookie consent tools available on the Website.

## 2. Data Controller and Business Information

The controller responsible for the processing of personal data through the Website is:

**Homo Novus SAGL**
Via Franco Zorzi 10
6900 Paradiso
Switzerland

Email: **info@homonovus.ch**

Homo Novus SAGL operates the online store and brand:

**THE CARDEN**
Store location: Bellinzona, Canton of Ticino
Switzerland

Telephone: **+41 78 614 36 73**
Email: **info@thecarden.ch**
Website: **thecarden.ch**

For questions relating specifically to THE CARDEN, orders, the Website or customer services, you may contact us at **info@thecarden.ch**.

For corporate or data-protection matters concerning Homo Novus SAGL, you may also contact **info@homonovus.ch**.

## 3. Applicable Data Protection Laws

We process personal data in accordance with applicable Swiss data protection legislation, including the Swiss Federal Act on Data Protection (FADP) and its implementing regulations.

Where the European Union or United Kingdom General Data Protection Regulation (GDPR) or another data protection law applies to a particular processing activity, we will also comply with that law to the extent required.

The applicable legal requirements may depend on the location of the individual, the nature of the processing and the services involved.

## 4. Personal Data We Collect

Depending on how you interact with the Website, we may collect the following categories of personal data.

### 4.1 Identification and Contact Information

This may include:

– first and last name;
– billing address;
– shipping address;
– telephone number;
– email address;
– customer account details;
– company name, where relevant;
– other information you voluntarily provide to us.

### 4.2 Order and Transaction Information

This may include:

– products ordered;
– products added to the shopping cart;
– order number;
– order date;
– purchase value;
– discounts and promotional codes;
– shipping method;
– billing and delivery details;
– order status;
– payment status;
– transaction references;
– returns;
– refunds;
– cancellations;
– customer service history.

### 4.3 Payment Information

Card payments on the Website are currently processed using **Stripe**.

Depending on the selected payment method and transaction, Stripe may process information including:

– cardholder name;
– payment card details;
– billing information;
– transaction identifiers;
– payment amount and currency;
– payment authentication information;
– device and technical information;
– fraud-prevention information;
– information necessary for 3D Secure or other authentication procedures.

THE CARDEN and Homo Novus SAGL do not normally receive or store complete payment card numbers when card information is submitted directly through Stripe’s payment infrastructure.

Stripe may independently process certain information in accordance with its own privacy documentation and legal obligations.

Information relating to the status and identification of a transaction may be received by THE CARDEN and stored with the corresponding WooCommerce order.

This may include payment status, transaction identifiers, payment method and information required for refunds, accounting and customer service.

### 4.4 Account Information

When you create an account, we may process:

– login credentials;
– account preferences;
– saved addresses;
– order history;
– wishlist information, where available;
– communication preferences;
– other information associated with your customer account.

Passwords are intended to be stored using appropriate cryptographic hashing mechanisms and should not be accessible to THE CARDEN in readable form.

### 4.5 Communications

When you contact us, we may process:

– the content of your message;
– your contact details;
– correspondence history;
– telephone communications;
– information submitted through customer service forms;
– information relating to orders or products;
– photographs and details of trading cards submitted for evaluation or sale.

Please do not send unnecessary sensitive personal information through contact forms, email or ordinary communications.

### 4.6 Information Concerning Card Evaluations

When you ask THE CARDEN to evaluate or assist with the purchase, consignment or sale of collectible cards, we may process:

– photographs of the cards;
– card names;
– editions;
– card conditions;
– grading information;
– certification or serial information;
– proof of ownership where reasonably necessary;
– requested valuation;
– correspondence relating to a possible purchase, consignment or sale;
– shipping or handover details.

Submitting photographs or information does not automatically create an obligation for THE CARDEN or Homo Novus SAGL to purchase, list, consign or sell the cards.

Any preliminary valuation provided remotely may be revised following physical inspection.

### 4.7 Technical and Usage Information

When you use the Website, technical information may be collected automatically, including:

– IP address;
– browser type and version;
– device type;
– operating system;
– language and regional settings;
– referring website or traffic source;
– pages visited;
– date and time of access;
– approximate geographic location derived from an IP address;
– shopping cart activity;
– session identifiers;
– cookie identifiers;
– technical logs;
– error logs;
– security information;
– information required for fraud prevention.

### 4.8 Cookies and Similar Technologies

The Website uses cookies and may use comparable technologies such as local storage or similar browser technologies.

These technologies may be used to:

– operate the shopping cart;
– maintain customer sessions;
– remember cookie consent preferences;
– secure the Website;
– process payments;
– prevent fraud;
– identify changes to shopping cart contents;
– understand traffic sources;
– analyse Website usage where permitted;
– support Website functionality;
– remember preferences;
– manage consent;
– support marketing technologies if such technologies are introduced in the future and appropriate consent is obtained.

Detailed information concerning the cookies currently identified on the Website is provided in the Cookie Policy contained in Section 15 below.

## 5. How We Collect Personal Data

We may collect personal data:

– directly from you;
– when you place an order;
– when you create an account;
– when you add products to your shopping cart;
– when you make or attempt to make a payment;
– when you complete a contact or subscription form;
– when you contact us by email or telephone;
– when you submit cards for evaluation;
– when you participate in events or tournaments;
– automatically through the Website;
– through cookies and similar technologies;
– from payment providers;
– from delivery and technology providers;
– from fraud-prevention and security services;
– from publicly available sources where legally permitted.

## 6. Purposes of Processing

We may process personal data for the following purposes.

### 6.1 Processing and Fulfilling Orders

We use personal data to:

– receive and confirm orders;
– verify product availability;
– process payments;
– authenticate transactions;
– prepare and dispatch products;
– provide delivery information;
– provide tracking and delivery updates where available;
– issue invoices and confirmations;
– manage cancellations;
– manage returns and refunds;
– communicate about an order;
– prevent fraudulent transactions.

### 6.2 Customer Accounts

We use account information to:

– create and maintain customer accounts;
– authenticate users;
– provide access to previous orders;
– save customer preferences;
– save addresses where requested;
– simplify future purchases;
– secure account access.

### 6.3 Customer Service

We process communications to:

– answer questions;
– respond to complaints;
– resolve delivery or payment issues;
– provide information about products;
– manage warranty or defect claims;
– assist with returns and refunds;
– investigate transaction problems;
– respond to account-related requests.

### 6.4 Card Valuation and Collection Services

We may process submitted card information to:

– evaluate collectible cards;
– provide preliminary estimates;
– assess authenticity or condition where possible;
– discuss purchase opportunities;
– discuss consignment opportunities;
– arrange delivery, inspection or collection;
– facilitate a possible purchase or sale.

Any preliminary online valuation may change following physical inspection.

### 6.5 Events and Tournaments

Where THE CARDEN organises events or tournaments, we may process personal data to:

– register participants;
– communicate event information;
– manage attendance;
– create pairings or rankings;
– administer prizes;
– document the event;
– communicate results;
– comply with venue and safety requirements.

Additional notices may be provided for specific events where appropriate.

### 6.6 Website Security and Fraud Prevention

We may process technical and transaction data to:

– prevent unauthorised access;
– identify suspicious transactions;
– detect misuse;
– protect customers;
– protect THE CARDEN and Homo Novus SAGL;
– maintain security logs;
– investigate security incidents;
– prevent payment fraud;
– authenticate transactions;
– protect the Website against malicious activity.

### 6.7 Legal and Administrative Obligations

We may process and retain personal data to:

– maintain accounting records;
– comply with tax and commercial obligations;
– respond to lawful requests from authorities;
– establish, exercise or defend legal claims;
– enforce our Terms and Conditions;
– document transactions;
– document customer communications;
– comply with applicable legal obligations.

### 6.8 Marketing Communications

Where permitted by applicable law, we may send information about:

– new products;
– restocks;
– special releases;
– pre-orders;
– promotions;
– discounts;
– store events;
– tournaments;
– community activities;
– other THE CARDEN news.

Where consent is legally required, marketing communications will be sent only after obtaining the required consent.

You may unsubscribe from electronic marketing communications at any time through the unsubscribe mechanism provided or by contacting us at **info@thecarden.ch**.

Service messages relating to active orders, payments, security or customer accounts are not marketing communications and may still be sent when necessary.

### 6.9 Website Analytics and Traffic Attribution

Where permitted and, where required, after obtaining consent, we may process technical information to understand:

– how visitors reach the Website;
– the source of Website traffic;
– entry pages;
– browsing sessions;
– Website usage;
– campaign attribution.

Optional analytics technologies are controlled through the Website’s cookie consent system where required.

## 7. Grounds for Processing

Depending on the circumstances and applicable law, personal data may be processed because:

– processing is necessary to enter into or perform a contract;
– processing is necessary to fulfil an order;
– processing is necessary to process or secure a payment;
– processing is necessary to comply with legal obligations;
– processing is necessary for legitimate business purposes;
– processing is necessary for security or fraud prevention;
– you have voluntarily provided the information;
– you have given consent where consent is required;
– processing is necessary to establish, exercise or defend legal claims.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

## 8. Disclosure of Personal Data

We may share personal data with service providers that assist us in operating the business, including:

– Website hosting providers;
– WordPress-related service providers;
– WooCommerce-related service providers;
– Stripe and other payment service providers;
– banks and financial institutions;
– shipping and delivery companies;
– fulfilment providers;
– IT support providers;
– cybersecurity providers;
– customer support providers;
– accounting providers;
– legal and professional advisers;
– analytics providers;
– cookie and consent-management providers;
– marketing and newsletter providers, where used;
– fraud-prevention services;
– public authorities where disclosure is legally required.

These recipients should receive only the information reasonably necessary to perform the relevant service or comply with applicable obligations.

We do not sell personal data as an independent commercial product.

## 9. Payment Provider – Stripe

THE CARDEN currently uses **Stripe** to process card payments made through the Website.

Stripe may process personal and technical information necessary to:

– process transactions;
– verify payment methods;
– authenticate payments;
– perform 3D Secure authentication where required;
– detect and prevent fraud;
– manage disputes;
– process refunds;
– comply with financial and regulatory obligations;
– protect the security of its payment infrastructure.

Stripe may place cookies or use similar technologies for security, payment processing and fraud-prevention purposes.

THE CARDEN does not normally receive complete card numbers, card security codes or other complete payment credentials when these are entered directly into Stripe’s payment infrastructure.

THE CARDEN may receive transaction information such as:

– payment status;
– payment amount;
– transaction identifier;
– payment method type;
– refund status;
– information required to associate the payment with an order.

Stripe’s processing of personal data is also governed by Stripe’s applicable privacy documentation.

## 10. WooCommerce

The Website uses **WooCommerce** to provide e-commerce functionality.

WooCommerce is used to manage functions including:

– products;
– shopping carts;
– checkout;
– customer sessions;
– orders;
– order history;
– customer accounts;
– shipping information;
– transaction-related information.

WooCommerce uses cookies and session technologies necessary to maintain shopping cart contents and customer sessions.

Further details about these cookies are provided in Section 15.

## 11. Shipping Providers

THE CARDEN currently intends to deliver orders primarily within Switzerland, subject to the shipping options made available during checkout.

To complete a delivery, we may provide the selected carrier with information including:

– recipient name;
– delivery address;
– telephone number;
– email address where necessary;
– order or parcel reference;
– delivery instructions;
– information reasonably necessary to deliver the parcel.

Where local pickup or hand delivery is offered, personal information may also be processed to coordinate collection or delivery.

Shipping providers may independently process information in accordance with their legal obligations and privacy practices.

## 12. International Data Transfers

Although THE CARDEN operates from Switzerland, some technology, hosting, payment, analytics, security or software providers may process personal data outside Switzerland.

Where personal data is transferred to another country, appropriate measures will be taken where required by applicable law.

Depending on the destination and provider, such measures may include:

– selecting providers located in countries recognised as providing adequate data protection;
– using appropriate contractual safeguards;
– applying supplementary technical or organisational safeguards;
– relying on another lawful transfer mechanism;
– obtaining consent where legally appropriate.

The Internet may involve transmission of data through infrastructure located in multiple countries.

## 13. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose or as required by applicable law.

Retention periods may depend on:

– the duration of the customer relationship;
– contractual obligations;
– accounting requirements;
– tax requirements;
– commercial record-keeping requirements;
– warranty periods;
– dispute and limitation periods;
– fraud-prevention requirements;
– payment-provider requirements;
– technical and security needs.

Order, payment and invoice information may be retained for the period required by applicable commercial, accounting and tax laws.

Customer account information may generally be retained while the account remains active and for an appropriate period thereafter where necessary.

Security and fraud-prevention information may be retained where reasonably necessary to protect the Website and business.

Information that is no longer required will be deleted, anonymised or securely archived where immediate deletion is not legally or technically appropriate.

## 14. Data Security

We use reasonable technical and organisational safeguards designed to protect personal data from:

– unauthorised access;
– loss;
– misuse;
– alteration;
– disclosure;
– destruction;
– unauthorised modification.

Measures may include:

– encrypted HTTPS connections;
– access controls;
– software updates;
– backups;
– secure hosting;
– authentication controls;
– restricted administrative access;
– payment security measures;
– fraud-prevention measures.

Payments are processed through specialised payment infrastructure provided by Stripe.

No online system can guarantee absolute security.

Customers are responsible for keeping their account passwords and access credentials confidential and should notify us if they suspect unauthorised use of their account.

## 15. COOKIE POLICY

**Last updated: 25 August 2026**

### 15.1 What Are Cookies?

Cookies are small text files that are stored on a user’s device when visiting a website.

Cookies may be used to:

– enable essential Website functions;
– maintain shopping sessions;
– remember preferences;
– operate shopping carts;
– improve security;
– securely process payments;
– prevent fraud;
– remember cookie consent choices;
– understand how visitors reach and use a Website where permitted.

THE CARDEN may also use similar technologies where necessary for the operation, security and improvement of the Website.

### 15.2 How THE CARDEN Uses Cookies

THE CARDEN uses cookies and similar technologies for purposes including:

– operating the online store;
– maintaining the shopping cart;
– maintaining customer and checkout sessions;
– remembering cookie consent preferences;
– processing payments securely;
– preventing fraud;
– protecting transactions;
– maintaining Website security;
– understanding traffic sources and Website usage where the user has provided any consent required by applicable law.

Cookies are classified according to their purpose.

### 15.3 Necessary Cookies

Necessary cookies are required for the Website and online store to function correctly.

They support functions such as:

– cookie consent management;
– shopping cart operation;
– customer sessions;
– checkout;
– payment security;
– fraud prevention.

These cookies may remain active where they are technically necessary to provide a service requested by the user or to ensure the security and proper functioning of the Website, subject to applicable law.

The Website currently uses the following identified necessary cookies:

Blocking necessary cookies through browser settings may prevent certain Website functions, including the shopping cart, checkout or payment functionality, from operating correctly.

### 15.4 Analytics Cookies

With the user’s consent where required, THE CARDEN may use analytics and attribution cookies to understand how visitors reach and interact with the Website.

The following analytics/attribution cookies have been identified on the Website:

Where consent is required, these optional cookies should not be activated unless the visitor accepts the relevant cookie category.

### 15.5 Functional Cookies

Functional cookies may provide enhanced Website functionality and personalisation beyond functions that are strictly necessary for operation of the Website.

At the date of this Policy, **THE CARDEN does not currently list any separate functional cookies in its active cookie configuration.**

If functional services are introduced in the future, this Cookie Policy and the Website’s cookie preference interface may be updated accordingly.

### 15.6 Performance Cookies

Performance cookies may be used to measure Website performance, identify technical problems and understand how Website functionality performs.

At the date of this Policy, **THE CARDEN does not currently list any separate performance cookies in its active cookie configuration.**

If such technologies are introduced, they will be disclosed and, where required, made subject to the visitor’s consent.

### 15.7 Advertisement Cookies

Advertising cookies may be used for:

– advertising;
– conversion measurement;
– remarketing;
– campaign measurement;
– creation of advertising profiles.

At the date of this Policy, **THE CARDEN does not currently list any advertising cookies in its active cookie configuration.**

If advertising, tracking or remarketing technologies are introduced in the future, this Cookie Policy and the Website’s cookie preference interface will be updated as appropriate.

Where required by applicable law, such technologies will be activated only after the visitor has provided the required consent.

### 15.8 Stripe and Payment Security Cookies

THE CARDEN uses Stripe as a payment service provider for card payments.

Stripe may use cookies and other technical information for purposes including:

– secure payment processing;
– payment authentication;
– fraud detection;
– fraud prevention;
– transaction security.

The identified Stripe cookies currently include:

– `__stripe_mid`;
– `__stripe_sid`.

Payment information submitted through Stripe may be processed directly by Stripe.

THE CARDEN does not normally receive or store complete payment card numbers when payment information is submitted directly through Stripe’s payment infrastructure.

### 15.9 WooCommerce Cookies

The Website uses WooCommerce to operate its online store.

WooCommerce uses necessary session and shopping-cart cookies to:

– identify customer shopping sessions;
– determine when shopping cart contents change;
– identify whether products are in the shopping cart;
– maintain cart contents while users navigate the Website.

The identified WooCommerce cookies currently include:

– `woocommerce_cart_hash`;
– `woocommerce_items_in_cart`;
– `wp_woocommerce_session_*`.

These cookies support core e-commerce functionality and may therefore remain active when the visitor rejects optional cookies.

### 15.10 CookieYes and Consent Management

THE CARDEN uses **CookieYes** to manage cookie consent preferences.

CookieYes stores the visitor’s consent choices so that the Website can remember whether optional cookie categories have been accepted or rejected.

The identified consent cookie is:

– `cookieyes-consent`.

Visitors may choose between the consent options made available through the Website’s cookie banner, including:

– accepting optional cookies;
– rejecting optional cookies;
– customising cookie preferences.

Rejecting optional cookies does not necessarily disable cookies that are required for:

– the shopping cart;
– checkout;
– security;
– payment functionality;
– fraud prevention;
– remembering the user’s cookie choice.

### 15.11 Managing and Withdrawing Cookie Consent

Visitors may manage their cookie preferences through the cookie consent banner and preference centre available on the Website.

Where processing is based on consent, consent may be withdrawn or preferences may be changed at any time through the Website’s cookie settings.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Users may also configure their browser to:

– delete cookies;
– block cookies;
– restrict cookies;
– notify them when cookies are placed.

Browser controls vary between browsers, providers and devices.

Blocking necessary cookies through browser settings may cause parts of the Website, including the shopping cart or checkout, to stop functioning correctly.

### 15.12 Third-Party Cookies and Services

Certain cookies or similar technologies may be provided by third-party services used by THE CARDEN, including payment, security, hosting, analytics or other technology providers.

Third-party providers may process information according to their own privacy policies and legal obligations.

THE CARDEN periodically reviews technologies used on the Website and may update this Cookie Policy when services or cookie practices change.

### 15.13 Changes to Cookies Used by the Website

The cookies and technologies used by the Website may change as THE CARDEN introduces, removes or modifies Website functionality, plugins and third-party services.

The current cookie list available through the Website’s cookie preference interface may therefore be updated periodically.

This Cookie Policy may also be updated to reflect such changes.

## 16. Data Breaches

If a personal data breach occurs, Homo Novus SAGL will assess the nature and potential consequences of the incident.

Where notification is required by applicable law, we will notify the competent authority and, where necessary, affected individuals.

## 17. Your Data Protection Rights

Subject to applicable law and any lawful limitations, you may have the right to:

– request confirmation as to whether we process your personal data;
– request access to your personal data;
– request correction of inaccurate or incomplete data;
– request deletion or destruction of data where applicable;
– object to certain processing where applicable;
– withdraw consent;
– request restriction of processing where applicable;
– request delivery or transfer of certain data where applicable;
– lodge a complaint with the competent data protection authority.

We may need to verify your identity before responding to a request.

Certain information cannot necessarily be deleted immediately where retention is required for:

– accounting;
– taxation;
– contractual obligations;
– payment processing;
– fraud prevention;
– security;
– establishment or defence of legal claims;
– other legal obligations.

Requests relating to personal data may be submitted to:

**info@thecarden.ch**

or:

**info@homonovus.ch**

You may also contact us by telephone at:

**+41 78 614 36 73**

## 18. Third-Party Links and Embedded Content

The Website may contain links to third-party websites or services.

THE CARDEN and Homo Novus SAGL are not responsible for the privacy practices, security or content of independent third-party websites.

Users should review the privacy information provided by those third parties before submitting personal information directly to them.

Where third-party embedded content or services use non-essential tracking technologies, they may be subject to the Website’s consent mechanism where required.

## 19. Social Media

If the Website links to social media platforms, those platforms may process personal data independently when users interact with their services.

THE CARDEN and Homo Novus SAGL do not control data-processing activities independently carried out by social media providers.

Users should consult the relevant provider’s privacy information when interacting with external social media services.

## 20. Children’s Privacy

The Website and online store are not intended to collect personal data directly from young children without the involvement of a parent or legal guardian.

Customers who are not legally capable of entering into a binding purchase contract should place orders only with the consent and involvement of a parent or legal representative.

If we become aware that personal data has been improperly submitted by a child, we may delete the information or request appropriate confirmation from a parent or legal representative.

## 21. Changes to This Privacy Policy and Cookie Policy

We may update this Privacy Policy and Cookie Policy to reflect:

– legal developments;
– changes to the Website;
– changes to payment providers;
– changes to shipping providers;
– new services;
– new Website functionality;
– changes to cookies;
– changes to third-party technologies;
– changes to data-processing practices;
– changes to our business operations.

The current version will be published on **thecarden.ch** together with its revision date.

Material changes may also be communicated through the Website or another appropriate method where appropriate.

## 22. Contact

Questions concerning this Privacy Policy, Cookie Policy, personal data or THE CARDEN’s privacy practices may be addressed to:

**THE CARDEN**
Store location: Bellinzona, Canton of Ticino
Switzerland

Telephone: **+41 78 614 36 73**
Email: **info@thecarden.ch**
Website: **thecarden.ch**

THE CARDEN is operated by:

**Homo Novus SAGL**
Via Franco Zorzi 10
6900 Paradiso
Switzerland

Email: **info@homonovus.ch**

For Website, customer or THE CARDEN-related privacy enquiries, please contact **info@thecarden.ch**.

For corporate or data-protection enquiries concerning Homo Novus SAGL, you may also contact **info@homonovus.ch**.