Privacy policy

Last updated: 9 August 2026

This Privacy Policy explains how Mythic Morrow, a trading name of PACKRIPPERZ LIMITED (“Mythic Morrow”, “we”, “us” or “our”), collects, uses, stores and shares your personal information when you visit our website, create an account, make a purchase, contact us, interact with our marketing or otherwise use our products, services, content, features and tools (collectively, the “Services”).

Our online store is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services to you.

For the purposes of applicable UK data protection law, PACKRIPPERZ LIMITED is the data controller for personal information that we determine how and why to process.

Please read this Privacy Policy carefully.

1. WHO WE ARE

Trading name: Mythic Morrow
Legal entity: PACKRIPPERZ LIMITED
Company number: 16830476
Registered in: England and Wales
Registered office: C/O QPS Accountancy, Holden House, Sandpiper Court, Chester Business Park, Chester, United Kingdom, CH4 9QU

For questions about this Privacy Policy or the way we process your personal information, please contact us using the details provided in the Contact Us section below.

 

2. PERSONAL INFORMATION WE COLLECT

“Personal information” means information relating to an identified or identifiable individual.

The personal information we collect depends on how you interact with Mythic Morrow and the Services.

We may collect and process the following categories of personal information.

Contact Information

This may include:

• your name;
• billing address;
• delivery address;
• email address; and
• telephone number.

Order & Transaction Information

This may include:

• products viewed;
• products added to your basket;
• products added to a wishlist;
• purchases;
• order history;
• order values;
• returns;
• refunds;
• exchanges;
• cancellations;
• discounts and promotions used;
• delivery information; and
• transaction records.

Payment Information

Payments may involve information such as:

• payment method;
• payment confirmation;
• transaction identifiers;
• billing information; and
• other information necessary to process or verify a payment.

Payment card information is generally processed by our payment providers rather than being directly stored by Mythic Morrow in full.

Account Information

If you create an account, we may process information such as:

• account username or identifier;
• account preferences;
• saved addresses;
• settings;
• order history; and
• authentication information.

Communications

When you contact us, we may process information contained in your communications, including:

• customer-service enquiries;
• emails;
• contact-form submissions;
• return and refund requests;
• complaints;
• product enquiries;
• payment disputes; and
• other correspondence.

Device & Technical Information

When you access our Services, information may automatically be collected about your device and connection, including:

• IP address;
• browser type;
• device type;
• operating system;
• network information;
• device or online identifiers;
• cookie identifiers; and
• similar technical information.

Usage Information

We may process information about how you interact with our website and Services, including:

• pages viewed;
• products viewed;
• browsing activity;
• interactions with website features;
• referring pages;
• approximate location derived from IP information;
• dates and times of visits; and
• other website usage information.

Fraud Prevention & Security Information

To protect Mythic Morrow, our customers, payment providers and stock from fraud and abuse, we may process information relevant to detecting, investigating and preventing suspected fraudulent or unlawful activity.

Depending on the circumstances, this may include:

• transaction information;
• account information;
• IP and device information;
• payment risk indicators;
• order history;
• delivery and tracking information;
• proof-of-delivery information;
• parcel weights;
• fulfilment records;
• product photographs or video;
• product identifiers;
• serial, batch or manufacturing information;
• return inspection records;
• communications;
• refund history;
• chargeback information; and
• evidence relating to suspected product substitution, resealing, theft or return fraud.

We only process this information where there is an appropriate lawful basis and where reasonably necessary for the relevant purpose.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

Directly From You

For example, when you:

• place an order;
• create an account;
• subscribe to marketing;
• contact us;
• submit a return;
• make a complaint;
• participate in a promotion; or
• otherwise provide information to us.

Automatically

We may collect information automatically when you use our website through technologies including:

• cookies;
• pixels;
• local storage;
• server logs; and
• similar technologies.

From Shopify & Service Providers

We may receive information from Shopify and organisations that provide services necessary for us to operate our business, including payment, delivery, fraud-prevention, analytics and technology providers.

From Other Third Parties

Where lawful and appropriate, we may receive information from:

• payment providers;
• banks and card issuers;
• delivery companies;
• fraud-prevention services;
• marketing and advertising partners;
• ecommerce applications;
• social media platforms;
• law-enforcement bodies;
• regulatory authorities; and
• other organisations involved in preventing or investigating fraud or unlawful activity.

4. HOW WE USE YOUR PERSONAL INFORMATION

We may use personal information for the following purposes.

Providing Our Services

We may process information to:

• process and fulfil orders;
• process payments;
• provide order confirmations;
• arrange delivery;
• provide tracking information;
• maintain customer accounts;
• process returns;
• process refunds and exchanges;
• provide customer support;
• respond to enquiries;
• administer promotions;
• provide requested services; and
• otherwise perform our obligations to you.

Operating & Improving Mythic Morrow

We may process information to:

• operate our website;
• understand how customers use our Services;
• improve website functionality;
• analyse business performance;
• improve our products and services;
• manage inventory;
• personalise aspects of the shopping experience; and
• administer our business.

Security & Fraud Prevention

We may process information to:

• protect customer accounts;
• secure our website and Services;
• detect suspicious transactions;
• prevent payment fraud;
• investigate suspected return fraud;
• investigate product substitution or resealing;
• investigate suspected theft;
• investigate false delivery or missing-item claims;
• prevent abuse of promotions or accounts;
• investigate chargebacks and payment disputes;
• establish, exercise or defend legal claims; and
• protect Mythic Morrow, our customers, our stock and third parties against fraudulent or unlawful activity.

Communications

We may process your information to:

• respond to questions;
• provide customer support;
• provide important information concerning your order;
• notify you about account or service matters;
• deal with complaints; and
• maintain our relationship with you.

Marketing

Where permitted by law, we may use your information to:

• send marketing emails;
• communicate promotions and new releases;
• provide information about products that may interest you;
• measure marketing performance; and
• personalise advertising.

You can unsubscribe from marketing communications at any time.

Unsubscribing from marketing does not prevent us from sending transactional or service communications necessary for orders, accounts, security or other non-marketing purposes.

Legal & Regulatory Purposes

We may process personal information where necessary to:

• comply with legal obligations;
• maintain legally required records;
• comply with tax and accounting requirements;
• respond to lawful requests from authorities;
• comply with court orders or legal proceedings;
• investigate potential breaches of our policies or agreements;
• establish, exercise or defend legal claims; and
• protect our legal rights.

5. OUR LAWFUL BASES FOR PROCESSING

UK data protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on one or more of the following bases.

Contract

We process information where necessary to enter into or perform a contract with you.

For example, we need information such as your name, delivery address and order details to process and deliver an order.

Legal Obligation

We process information where necessary to comply with a legal obligation that applies to us.

This may include obligations concerning:

• tax;
• accounting;
• consumer protection;
• fraud prevention;
• regulatory requirements; and
• responding to lawful requests from authorities.

Legitimate Interests

We may process personal information where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• operating and improving our business;
• securing our Services;
• preventing and detecting fraud;
• protecting our stock and assets;
• investigating fraudulent returns and product substitution;
• investigating chargebacks;
• protecting our customers;
• maintaining appropriate business records;
• understanding use of our Services;
• protecting and enforcing our legal rights; and
• establishing, exercising or defending legal claims.

Where required, we assess whether our legitimate interests are proportionate and appropriately balanced against your rights.

Consent

Where required, we may process personal information on the basis of your consent.

For example, consent may be used for certain:

• marketing communications;
• advertising technologies; and
• non-essential cookies or similar technologies.

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. SHOPIFY

Our ecommerce Services are powered by Shopify.

Shopify collects and processes personal information concerning your access to and use of our store in order to provide its ecommerce services and associated functionality.

Information you provide through our store may therefore be transmitted to and processed by Shopify and relevant service providers.

Shopify may also provide enhanced ecommerce features that use information obtained through interactions with our store, other Shopify merchants and Shopify's services.

For certain processing associated with these enhanced features, Shopify may determine the purposes and means of processing and may be responsible for responding to relevant requests concerning that processing.

You should review Shopify's applicable consumer privacy information for further information about how Shopify processes personal information and the privacy choices it provides.

7. HOW WE SHARE PERSONAL INFORMATION

We do not disclose personal information indiscriminately.

We may share personal information where reasonably necessary with organisations including the following.

Shopify

We share information with Shopify as necessary to operate our ecommerce store and Services.

Payment Providers

Information may be shared with payment processors, banks, card issuers and other payment-service providers to:

• process payments;
• issue refunds;
• verify transactions;
• prevent fraud; and
• deal with payment disputes or chargebacks.

Delivery & Fulfilment Providers

We may provide necessary information to:

• couriers;
• postal operators;
• fulfilment providers;
• warehouses; and
• logistics providers

so that orders can be processed, dispatched and delivered.

Technology & Service Providers

We may use third parties providing services such as:

• website hosting;
• ecommerce applications;
• cloud storage;
• customer support;
• email delivery;
• analytics;
• fraud prevention;
• cybersecurity;
• accounting;
• professional advice; and
• other business-support services.

Marketing & Advertising Partners

Where permitted by applicable law and subject to appropriate consent requirements, we may share or make information available to advertising, analytics or marketing partners.

Professional Advisers

Where necessary, information may be shared with professional advisers including:

• accountants;
• solicitors;
• insurers;
• auditors; and
• other professional advisers.

Fraud, Disputes & Law Enforcement

Where necessary and lawful, information may be disclosed to:

• payment providers;
• banks;
• card issuers;
• insurers;
• fraud-prevention services;
• delivery providers;
• legal advisers;
• courts;
• regulators;
• Trading Standards;
• law-enforcement authorities; and
• other appropriate parties

for the prevention, detection, investigation or prosecution of fraud, theft or other unlawful activity, or for establishing, exercising or defending legal claims.

Business Transactions

If Mythic Morrow or PACKRIPPERZ LIMITED undergoes a merger, acquisition, restructuring, financing, insolvency, sale of assets or similar corporate transaction, personal information may be disclosed as reasonably necessary in connection with that transaction and subject to applicable law.

8. FRAUD PREVENTION, RETURNS & CHARGEBACKS

Because Mythic Morrow sells trading cards, collectibles and other products that may be vulnerable to theft, resealing, product substitution and return fraud, we may maintain appropriate records to protect our business and customers.

Where necessary and proportionate, these records may include information relating to:

• the identity and condition of products dispatched;
• parcel weight;
• product packaging;
• factory seals;
• security or tamper-evident seals;
• serial or batch identifiers;
• fulfilment records;
• delivery information;
• returned product condition;
• return inspections;
• customer communications;
• disputed transactions; and
• suspected fraudulent activity.

We may use relevant records to investigate a return, missing-item claim, non-delivery claim, payment dispute or chargeback.

Where necessary, relevant information may be provided to a payment provider, bank, insurer, courier, legal adviser, court, regulator or law-enforcement authority.

We will not use fraud-prevention measures as a means of preventing customers from legitimately exercising their statutory consumer or data-protection rights.

9. MARKETING COMMUNICATIONS

We may send you marketing communications where we have a lawful basis and where the requirements of applicable electronic marketing law are satisfied.

For individuals, this will generally be where:

• you have consented to receive marketing; or
• the applicable existing-customer or “soft opt-in” conditions are satisfied.

Where we rely on the existing-customer exception, marketing will relate to our own similar products or services and you will have been given an appropriate opportunity to opt out.

You can unsubscribe from marketing emails at any time using the unsubscribe link contained in the message or by contacting us.

We may retain limited information necessary to record and respect your opt-out preference.

Transactional communications concerning your orders, payments, account, security, returns or other services are not marketing communications and may continue where necessary.

10. COOKIES & SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies.

These technologies may be used to:

• operate essential website functionality;
• remember your basket;
• maintain security;
• remember preferences;
• understand website performance;
• analyse website usage;
• measure marketing performance; and
• provide or measure personalised advertising.

Some cookies are necessary for the operation of the Services.

Where required by applicable law, non-essential cookies and similar technologies will only be used after the required consent has been obtained.

You can manage applicable cookie preferences through the consent controls made available on our website.

Withdrawing consent does not affect processing that occurred lawfully before consent was withdrawn.

Browser settings may also allow you to restrict certain cookies, although disabling essential functionality may affect how the website operates.

11. PERSONALISED ADVERTISING

Subject to applicable law and your privacy choices, we or our service providers may use information about your interactions with our Services to measure, personalise or deliver advertising.

This may include information concerning:

• products viewed;
• products purchased;
• interactions with our website;
• advertisements interacted with; and
• device or cookie identifiers.

Where consent is legally required for the technologies used for personalised advertising, we will seek that consent.

Shopify may separately provide privacy controls relating to certain processing carried out through its services.

12. THIRD-PARTY WEBSITES & SERVICES

Our Services may contain links to websites, applications or platforms operated by third parties.

We do not control the privacy practices of independent third parties.

If you follow a link to another website or use a third-party service, you should review that organisation's privacy information before providing personal information.

The inclusion of a link does not, by itself, mean that Mythic Morrow endorses the privacy or security practices of the relevant third party.

13. CHILDREN'S PRIVACY

Our online Services are intended for customers capable of entering into purchases and using the Services in accordance with applicable law.

Although some products we sell may be suitable for children, our ecommerce Services are not directed at children for the purpose of collecting their personal information.

We do not knowingly seek to collect personal information directly from children where doing so would be unlawful.

If you are a parent or guardian and believe that a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.

14. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• destruction;
• alteration; and
• unauthorised disclosure.

However, no internet transmission, website, database or electronic storage system can be guaranteed to be completely secure.

You should therefore avoid sending sensitive or confidential information to us through insecure communication channels.

If you create an account, you are responsible for keeping your login credentials secure and should not disclose your password to another person.

15. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal and business requirements.

The appropriate retention period depends on factors including:

• the nature of the information;
• the purpose for which it was collected;
• whether you maintain an account;
• whether an order or transaction remains active;
• applicable tax, accounting and legal requirements;
• applicable limitation periods;
• fraud-prevention requirements;
• whether a dispute or chargeback exists;
• whether information is relevant to actual or anticipated legal proceedings; and
• whether retention is necessary to establish, exercise or defend legal claims.

Where information is no longer reasonably required, we will delete, anonymise or otherwise securely dispose of it as appropriate, subject to applicable legal and technical requirements.

Certain limited information may be retained where necessary to maintain records of marketing opt-outs, prevent fraud, comply with law or establish or defend legal claims.

16. INTERNATIONAL TRANSFERS

Some of our service providers, including ecommerce and technology providers, may process information outside the United Kingdom.

Where personal information is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law.

Depending on the destination and circumstances, this may involve:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved Standard Contractual Clauses; or
• another lawful transfer mechanism.

Where required, additional safeguards may also be implemented.

17. YOUR DATA PROTECTION RIGHTS

Depending on the circumstances and subject to applicable legal conditions and exemptions, you may have the following rights concerning your personal information.

Right of Access

You may request confirmation of whether we process your personal information and request access to personal information we hold about you.

Right to Rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to Erasure

In certain circumstances, you may ask us to delete personal information.

This right is not absolute. We may be required or permitted to retain information for reasons including legal obligations, fraud prevention or the establishment, exercise or defence of legal claims.

Right to Restriction

In certain circumstances, you may ask us to restrict how we process your personal information.

Right to Data Portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format and/or have that information transmitted to another controller.

Right to Object

You may have the right to object to processing based on legitimate interests.

We will consider an objection in accordance with applicable data protection law.

You have the right to object at any time to the use of your personal information for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

18. EXERCISING YOUR RIGHTS

To exercise an applicable data-protection right, contact us using the details below.

We may need to request reasonable information to verify your identity before acting on a request.

This is intended to protect personal information against unauthorised disclosure.

We will respond within the time required by applicable law.

Some rights are subject to legal conditions and exemptions, meaning we may not always be required to fulfil a request in full.

Where we lawfully decline or restrict a request, we will provide appropriate information about our decision where required.

19. YOUR RIGHT TO COMPLAIN

If you have concerns about how we process your personal information, please contact us first so that we can investigate your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.

You can obtain current information about making a data-protection complaint directly from the ICO.

Your right to complain to the ICO is not affected by contacting us first.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes to our Services;
• changes to the technologies we use;
• changes to our service providers;
• changes to our business operations;
• changes in law or regulatory guidance; or
• other operational, legal or regulatory requirements.

When we update this Policy, we will update the “Last updated” date at the top of this page.

Where required by law, we will provide additional notice or seek consent to material changes.

21. CONTACT US

For questions about this Privacy Policy, our privacy practices or your personal information, or to exercise an applicable data-protection right, please contact:

Mythic Morrow / PACKRIPPERZ LIMITED

Email: sales@mythicmorrow.co.uk

Registered office:
C/O QPS Accountancy
Holden House
Sandpiper Court
Chester Business Park
Chester
United Kingdom
CH4 9QU

Company number: 16830476

For the purposes of applicable UK data protection law, PACKRIPPERZ LIMITED is the data controller for personal information where we determine the purposes and means of processing.

LEGAL INFORMATION

Mythic Morrow is a trading name of PACKRIPPERZ LIMITED, a private limited company registered in England and Wales under company number 16830476.

Registered office: C/O QPS Accountancy, Holden House, Sandpiper Court, Chester Business Park, Chester, United Kingdom, CH4 9QU.