Last updated: 25 Oct 2026
Blast Collection (“we”, “us”) sells trading cards and collectibles at blastcollection.com. This policy explains what personal data we collect, why we collect it, who we share it with and the choices you have. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA).
Personal data we collect
- When you order: your name, delivery and billing address, email address and phone number, and the items you buy.
- When you pay: payments are processed by Stripe. We never see or store your full card number; we only receive the payment status, the card brand and the last four digits.
- When you create an account: your login details and order history.
- When you contact us: what you write to us and your contact details.
- When you browse: technical information such as your device, browser, pages visited and how you reached the site, collected through cookies (see below).
How we use it
- To process, pack and deliver your order, and to send order confirmations and delivery updates.
- To take payment and prevent fraud.
- To answer your questions and handle returns or damaged-item claims.
- To keep the records we are required to keep, such as invoices for tax purposes.
- To understand how the site is used and improve it.
- To send you news and offers, only if you have opted in. You can unsubscribe at any time with the link in each email.
By placing an order or creating an account, you consent to us using your personal data for these purposes. You can withdraw consent at any time (see “Your choices and rights”), but we may then be unable to complete an order.
Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the shop, and only what they need:
- Stripe, to process payments.
- Delivery partners such as SingPost and SPX, to deliver your order (name, address and phone number).
- Hostinger, which hosts this website and its data.
- Google (Google Analytics, Google Search Console and Google Merchant Center / Google Ads), to measure site traffic and show our products on Google.
- Email services used to send order emails and, if you opted in, our newsletter.
We may also disclose personal data when the law requires it.
Cookies
We use cookies that the shop needs to work (your cart, checkout and login), cookies that remember how you found us so we know which channels work, and analytics cookies that help us understand how the site is used. You can block or delete cookies in your browser settings; the cart and checkout may not work without the essential ones.
Data stored outside Singapore
Some of our service providers store data outside Singapore. When that happens we make sure your data gets protection comparable to the PDPA, through the providers’ own data-protection commitments.
How long we keep it
We keep order records for as long as we need them for the purposes above and to meet legal and tax requirements (generally five years). Account data is kept until you ask us to delete your account. When we no longer need personal data, we delete or anonymise it.
How we protect it
The site uses encrypted connections (HTTPS), payments are handled by Stripe, and access to order data is limited to us. No method of storing or sending data is completely secure, but we take reasonable steps to protect your personal data.
Your choices and rights
- Ask for a copy of the personal data we hold about you and how it has been used in the past year.
- Ask us to correct personal data that is wrong or incomplete.
- Withdraw consent to our use of your personal data, or unsubscribe from marketing emails.
- Ask us to delete your account.
Email us at blast.toys@hotmail.com. We may need to confirm your identity first, and we will reply within 30 days.
Data Protection Officer
For any question or complaint about how we handle personal data, contact our Data Protection Officer at blast.toys@hotmail.com.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.