Privacy policy
Privacy Policy
Last updated: April 16, 2026
1. Introduction
CastForge is an online retailer of resin model kits and hobby accessories, operated by TheTreasureHubLLC ("CastForge", ("us", "our"). This Privacy Policy explains how we collect, use, and disclose your personal information when you visit our website, make a purchase, or otherwise interact with our Services. Our store is powered by Shopify.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
We may collect the following categories of personal information depending on how you interact with us:
Information you provide directly: your name, email address, shipping and billing addresses, phone number, payment information, account credentials, and any messages you send us through our contact form or email.
Transaction information: the items you view, add to cart, purchase, return, or exchange, your order history, and payment confirmations.
Information collected automatically: your IP address, browser type, device information, operating system, referring URLs, pages visited, time spent on pages, and other usage data collected through cookies and similar technologies.
Information from third parties: we may receive information from our service providers, marketing partners, and Shopify in connection with providing and improving the Services.
3. How We Use Your Information
We use your personal information for the following purposes:
Fulfilling orders: processing payments, arranging shipping, managing returns and exchanges, and sending order confirmations and updates.
Providing and improving the Services: maintaining your account, remembering your preferences, personalising your shopping experience, and improving our website and product offerings.
Communicating with you: responding to enquiries, providing customer support, and sending important notices about your account or orders.
Marketing: sending promotional emails and displaying relevant advertisements, where you have opted in or where permitted by law. You can opt out of marketing emails at any time using the unsubscribe link in any email.
Security and fraud prevention: detecting and preventing fraudulent transactions, securing our Services, and protecting our customers.
Legal compliance: complying with applicable laws, responding to legal requests, and enforcing our Terms of Service.
4. How We Share Your Information
We do not sell your personal information. We share your data only in the following circumstances:
Service providers: with Shopify and other third parties who perform services on our behalf, including payment processing, shipping, data analytics, customer support, and cloud hosting. These providers are contractually required to protect your information.
Marketing partners: to help us deliver relevant advertising. You may opt out of targeted advertising (see Section 8 below).
Legal requirements: when required by law, in response to legal process, or to protect the rights, safety, or property of CastForge, our customers, or the public.
Business transfers: in connection with a merger, acquisition, bankruptcy, or sale of assets.
With your consent: when you direct us to share information, such as when using social media integrations.
5. Relationship with Shopify
Our Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. Information you submit may be transmitted to Shopify and third parties located in countries other than where you reside. Shopify may also use data from your interactions with our store and other Shopify merchants to provide enhanced features and improve its platform.
For information processed by Shopify in its capacity as a data controller, Shopify is responsible for responding to your privacy rights requests. You can review Shopify's Consumer Privacy Policy at privacy.shopify.com.
6. Cookies and Tracking
We use cookies and similar technologies to remember your preferences, analyse site traffic, and support advertising. You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features on our site.
We recognise the Global Privacy Control (GPC) opt-out signal. If you visit our website with GPC enabled, we will treat it as a request to opt out of the sale or sharing of your personal information for the device and browser you are using. We do not respond to other "Do Not Track" signals.
7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we securely delete or anonymise it.
8. Your Rights
Depending on where you live, you may have some or all of the following rights:
Access: request a copy of the personal information we hold about you.
Deletion: request that we delete your personal information.
Correction: request that we correct inaccurate information.
Portability: request a copy of your data in a structured, machine-readable format.
Opt out of targeted advertising: opt out of the sale or sharing of your personal information for targeted advertising purposes.
Withdraw consent: where we rely on your consent to process information, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
Object to processing: if you reside in the UK or EEA, you may object to certain processing or request that we restrict it.
To exercise any of these rights, contact us at support@castforge.shop. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request. We will never discriminate against you for exercising your privacy rights.
9. Children
Our Services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.
10. International Transfers
Your personal information may be transferred to and processed in countries other than your own, including the United States. Where we transfer data outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses.
11. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.
12. Security
We take reasonable measures to protect your personal information, including encryption of payment data and secure hosting. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. We will post the revised policy on this page and update the "Last updated" date.
14. Complaints
If you have concerns about how we handle your personal information, please contact us first. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority. For EEA residents, a list of supervisory authorities is available at edpb.europa.eu.
15. Contact
For any privacy-related questions or to exercise your rights:
TheTreasureHubLLC, 30 N Gould St, Sheridan, WY 82801, USA Email: support@castforge.shop
For the purpose of applicable data protection laws, we are the data controller of your personal information.