Privacy policy
Privacy Policy
Last updated: 15 September 2026
This Privacy Policy explains how Shinobi Vault collects, uses, stores and protects personal data when you visit our website, create an account, join our Launch List, purchase products or services, contact us, or otherwise interact with Shinobi Vault.
We process personal data in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation (GDPR).
1. Who Is Responsible for Your Personal Data?
The data controller responsible for the processing described in this Privacy Policy is:
Superdealz
Trading as: Shinobi Vault
Legal form: Sole proprietorship (eenmanszaak)
Aramstraat 32
1336 HS Almere
The Netherlands
Chamber of Commerce (KvK): 75062135
VAT ID: NL001226683B78
Email:
info@shinobivault.com
Phone:
+31 36 203 6403
2. Personal Data We May Collect
Depending on how you interact with Shinobi Vault, we may collect and process the following categories of personal data.
Identity and contact information
- first and last name;
- email address;
- telephone number;
- billing address;
- shipping address; and
- country or region.
Customer account information
- customer account details;
- order history;
- account status;
- Vault Access status;
- store credit balance and transactions; and
- customer tags or internal account classifications used to provide our services.
Order and transaction information
- products or services ordered;
- order number;
- order value;
- payment status;
- refund and return information;
- delivery and fulfilment information; and
- limited payment transaction information provided to us by payment providers.
Full payment card details are generally processed by our payment service providers and are not directly stored by Shinobi Vault.
Launch List and marketing information
- name;
- email address;
- Launch List registration;
- marketing preferences;
- consent records; and
- interaction with emails or communications where this functionality is used.
Communications
We may process information you provide when you contact customer service, send us an email, submit a form, request a return or refund, make a complaint, or otherwise communicate with us.
Technical and usage information
When you use our website, certain technical information may be collected automatically, including:
- IP address;
- browser and device information;
- operating system;
- website activity and interactions;
- session information;
- cookie identifiers; and
- security, diagnostic and fraud-prevention information.
3. How We Collect Personal Data
We may collect personal data:
- directly from you when you place an order, create an account or contact us;
- when you join the Shinobi Vault Launch List;
- when you purchase or use Vault Access;
- automatically when you visit or interact with our website;
- through Shopify, which provides the ecommerce platform used by Shinobi Vault;
- from payment, shipping and fulfilment providers involved in your transaction;
- from fraud-prevention, security and technical service providers; and
- from other sources where permitted by applicable law.
4. Why We Process Your Personal Data
We use personal data only where we have a valid purpose and an appropriate legal basis under applicable data protection law.
Performing our contract with you
We may process personal data to:
- process and manage your orders;
- take and administer payments;
- deliver products;
- provide customer accounts;
- activate and administer Vault Access;
- issue and administer store credit;
- manage pre-orders and allocation access;
- process returns, refunds and withdrawals;
- communicate about your order or account; and
- provide customer service.
Compliance with legal obligations
We may process and retain personal data where necessary to:
- comply with tax and accounting obligations;
- comply with consumer protection requirements;
- respond to legally valid requests from authorities;
- maintain legally required business records; and
- establish, exercise or defend legal claims.
Our legitimate interests
Where permitted by law, we may process personal data where necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
These interests may include:
- protecting Shinobi Vault and our customers against fraud and abuse;
- maintaining website and account security;
- preventing duplicate or abusive use of limited-access services;
- improving our website, products and customer experience;
- maintaining accurate business and customer records;
- responding to customer enquiries;
- managing allocation and demand fairly; and
- protecting and enforcing our legal rights.
Your consent
Where consent is required, we may rely on your consent for activities such as:
- email marketing;
- certain Launch List communications;
- non-essential cookies;
- analytics technologies; and
- advertising or marketing technologies where used.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Launch List
If you join the Shinobi Vault Launch List, we use the information you provide to send relevant information about the NARUTO CARD GAME launch, product availability, pre-orders and related Shinobi Vault updates.
Joining the Launch List does not guarantee product availability or allocation.
You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism in the relevant email or by contacting us.
6. Vault Access
When you purchase Vault Access, we process information necessary to administer the service.
This may include:
- recording that Vault Access is active on your customer account;
- providing priority access to eligible launch or pre-order opportunities;
- managing allocation priority;
- preventing duplicate Vault Access purchases where applicable;
- adding and administering associated store credit; and
- displaying Vault Access status and current store credit information within your account.
Vault Access status and store credit information are linked to the relevant customer account.
7. Store Credit
Where store credit is issued, we process information relating to the credit balance, credits, debits and eligible use of that balance.
Store credit information may be displayed within your Shinobi Vault customer account and may be adjusted where a related order is refunded, cancelled or otherwise corrected in accordance with our applicable policies and the law.
8. Marketing Communications
Where required by law, we send electronic marketing communications only with your consent or another valid legal basis.
You may unsubscribe from marketing emails at any time. Unsubscribing from marketing does not prevent us from sending transactional or service-related communications, such as:
- order confirmations;
- payment messages;
- shipping updates;
- return or refund information;
- security notices; and
- important customer account or Vault Access communications.
9. Cookies and Similar Technologies
Shinobi Vault and our service providers may use cookies and similar technologies to operate and secure the website, remember preferences, understand website usage and, where applicable, support analytics or marketing.
Cookies may include:
- Strictly necessary cookies required for core website, checkout, security and account functionality;
- Functional cookies used to remember preferences and improve website functionality;
- Analytics cookies used to understand how visitors use the website; and
- Marketing cookies used for advertising or measurement where such technologies are enabled.
Where applicable law requires consent, non-essential cookies and similar technologies will not be used until the required consent has been obtained.
You can manage available privacy and cookie choices using the privacy controls or cookie banner provided on our website where applicable.
10. Shopify
Our online store is hosted and powered by Shopify.
Shopify processes personal data required to provide ecommerce, checkout, customer account, payment-support, security, analytics and related platform functionality.
In many circumstances, Shopify processes customer personal data on our behalf as a service provider or processor. Shopify may also process certain information for its own purposes in accordance with its own legal obligations and privacy documentation.
Shopify operates internationally and may process data through affiliated companies and approved service providers located in different countries.
11. Other Service Providers and Recipients
We may disclose personal data where necessary to trusted third parties that help us operate Shinobi Vault, including:
- ecommerce and hosting providers;
- payment service providers;
- shipping and delivery providers;
- email and communications providers;
- IT, security and fraud-prevention providers;
- analytics providers where enabled;
- professional advisers such as accountants or legal advisers;
- government, regulatory or law-enforcement authorities where legally required; and
- other parties where you have authorised us or where disclosure is otherwise permitted by law.
We require service providers processing personal data on our behalf to handle that information appropriately and only for authorised purposes.
12. International Data Transfers
Some of our service providers operate internationally. Personal data may therefore be processed in countries outside the European Economic Area (EEA).
Where personal data is transferred internationally, we and our service providers use appropriate safeguards as required by applicable law. Depending on the circumstances, these safeguards may include adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules or other recognised transfer mechanisms.
13. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods depend on factors including:
- the nature of the data;
- whether you maintain a customer account;
- our contractual relationship with you;
- legal accounting and tax requirements;
- consumer warranty and dispute periods;
- fraud-prevention and security requirements; and
- the establishment, exercise or defence of legal claims.
Certain order, transaction and accounting records may need to be retained after an account is closed where this is required by law.
Where data is no longer required, we will delete, anonymise or otherwise cease using it, subject to applicable legal and technical retention requirements.
14. Security
We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.
We also rely on security measures provided by Shopify and other professional service providers used to operate the store.
No method of electronic storage or transmission can be guaranteed to be completely secure. You should therefore also protect access to your email account and devices used to access your Shinobi Vault account.
15. Your Privacy Rights
Depending on applicable law and the circumstances, you may have the right to:
- receive information about how your personal data is processed;
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- receive certain personal data in a portable, machine-readable format;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a competent data protection authority.
These rights are subject to the conditions and exceptions provided by applicable law. For example, we may need to retain certain information where we have a legal obligation to do so.
16. How to Exercise Your Privacy Rights
To make a privacy request, contact:
Email: info@shinobivault.com
Please provide enough information for us to understand your request. We may need to verify your identity before providing access to personal data or completing certain requests.
We will respond within the period required by applicable law.
17. Complaints
If you have concerns about how Shinobi Vault handles your personal data, we encourage you to contact us first so that we can investigate and try to resolve the matter.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
Our supervisory authority in the Netherlands is:
Autoriteit Persoonsgegevens
Dutch Data Protection Authority
18. Children and Minors
Shinobi Vault products may be of interest to younger customers. Purchases must, however, be made by a person legally capable of entering into the relevant transaction or with the involvement or permission of a parent or legal guardian where required.
We do not knowingly seek to collect more personal data from children than is necessary, and we do not knowingly rely on a child's consent where parental or guardian consent is legally required.
If you believe that personal data relating to a child has been provided to us improperly, please contact us.
19. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technology, legal obligations or data-processing practices change.
The latest version will be published on the Shinobi Vault website and the “Last updated” date at the top of this policy will be revised.
If a change materially affects how we process personal data, we will take additional steps to notify affected individuals where required by law.
20. Contact
For privacy-related questions or requests:
Shinobi Vault / Superdealz
Aramstraat 32
1336 HS Almere
The Netherlands
Email:
info@shinobivault.com
Phone:
+31 36 203 6403