The Forged Legion operates this online store and website (the “Services”) to offer a personalized shopping experience for limited-run collectible figurines and accessories. Our store is powered by Shopify. This Policy explains how we collect, use, disclose, and safeguard personal information when you use the Services, make a purchase, or interact with us. If this Policy conflicts with our Terms of Service, this Policy governs for privacy matters.
By using the Services, you acknowledge you’ve read and understand this Policy.
1) Personal information we collect
-
Contact details: name, email, phone, billing/shipping addresses
-
Payment & transactions: order details, amounts, payment method (processed by our payment processors), refunds/chargebacks
-
Account data: login/email, password, preferences, wishlists
-
Device & usage data: IP, device IDs, browser/OS, pages viewed, timestamps, referral/UTM, cookie IDs, on-site actions
-
Support content: messages and attachments (e.g., damage-claim photos)
-
Inferences: interests/preferences derived from the above
Sources: directly from you; automatically via cookies/pixels/SDKs; service providers (payments, analytics, fulfillment); advertising/fraud-prevention partners, as permitted by law.
2) How we use personal information
-
Provide & improve Services: process orders/payments, ship items, handle returns/exchanges, personalize experience, remember cart/preferences, maintain accounts
-
Support & communications: respond to inquiries; send transactional notices (order/shipping)
-
Marketing & ads: send promos (where permitted) and show ads on our site/others (including retargeting) based on your interactions
-
Security & fraud prevention: authenticate, protect the Services, detect/prevent fraud/misuse
-
Compliance & legal: meet legal obligations; enforce terms; defend rights
3) How we disclose personal information
-
Service providers/processors: Shopify, payment processors, fulfillment/shipping, cloud hosting, analytics, support, email/SMS tools
-
Advertising & analytics partners: to deliver/measure ads and understand audiences (including cross-context behavioral advertising where permitted)
-
Business transfers: in mergers, acquisitions, financings, or sale of assets
-
Legal/safety: to comply with law or protect rights/safety
-
With your direction/consent: e.g., social logins/widgets
We do not receive or store full payment card numbers; payment processors handle that securely.
4) Cookies & similar technologies
We use cookies/pixels to run the store, keep you signed in, remember your cart, analyze performance, and personalize/measure ads. Manage cookies via your browser and any on-site controls. Disabling some cookies may affect checkout.
5) Children’s data
The Services are not for children. We don’t knowingly collect data from individuals under 13 (or under the age of majority where you live). If you believe a child provided data, contact contact@theforgedlegion.com so we can delete it. We don’t knowingly “sell” or “share” minors’ data (as defined by US state laws).
6) Security & retention
We use commercially reasonable safeguards. No method is 100% secure. We retain data as needed for the purposes in this Policy—e.g., to provide Services, maintain records, comply with law, resolve disputes, and enforce agreements.
7) Your privacy rights (US)
Depending on your state (e.g., CA/VA/CO/CT/UT and others), you may have rights to access/know, delete, correct, port, and opt-out of “sale”/“sharing” and targeted advertising. We do not use “sensitive” data to infer characteristics.
How to exercise: email contact@theforgedlegion.com from the address used at checkout/account. We’ll verify your identity (and any authorized agent) as required. We won’t discriminate for exercising rights. If we deny a request, you may appeal by replying to our decision.
Marketing choices: unsubscribe at any time via the link in marketing emails; we may still send transactional messages.
8) Shopify’s role
Our store uses Shopify, which processes personal information to operate and improve services (including analytics, security, fraud prevention). Shopify may process data across merchants to provide enhanced services. See Shopify’s consumer privacy resources for details and how to exercise rights with respect to data Shopify controls. Your information may be transferred to Canada, the United States, and other countries where Shopify and providers operate.
9) International transfers
If you access from outside the US, your data may be processed in countries with different laws. Where required, we rely on appropriate safeguards.
10) Third-party links
We’re not responsible for third-party privacy/security practices. Review their policies before engaging.
11) Changes
We may update this Policy; we’ll post updates here and revise the “Last updated” date. Material changes will be noticed as required by law.
12) Contact
Questions or requests: contact@theforgedlegion.com
(No public address for privacy requests—email us first so we can authenticate and assist.)
