LiquidTCGContact

Data Processing Addendum

Last updated: 2026-07-14

This Data Processing Addendum ("DPA") supplements the Terms of Service between TERROR LLC ("LiquidTCG") and a business customer ("Store") and describes how we process personal information on the Store's behalf.

1. Roles

For personal information that a Store's customers ("Sellers") submit through the Service, the Store is the controller / business and LiquidTCG is the processor / service provider. LiquidTCG processes that information only to provide the Service and on the Store's documented instructions (including as configured through the product), except where law requires otherwise.

2. Scope of processing

  • Subject matter: provision of the LiquidTCG buylist Service.
  • Duration: for the term of the Store's account, plus limited retention as described in the Privacy Policy.
  • Nature & purpose: receiving, storing, displaying, pricing, and communicating about buylist submissions.
  • Types of data: Seller contact details (name, email), submission contents, optional shipping address, and related metadata.
  • Data subjects: the Store's Sellers and end customers.

3. Our commitments

LiquidTCG will:

  • process personal information only as needed to provide the Service and on the Store's instructions;
  • ensure personnel with access are bound by confidentiality;
  • maintain appropriate technical and organizational security measures (including encryption in transit, access controls, and tenant isolation);
  • make available information reasonably necessary to demonstrate compliance; and
  • not "sell" or "share" personal information (as defined under U.S. state privacy laws).

4. Subprocessors

The Store authorizes LiquidTCG to engage the subprocessors listed at /subprocessors to help deliver the Service. We require subprocessors to provide a level of data protection consistent with this DPA and remain responsible for their performance. We will update the list before adding or replacing subprocessors.

5. Data-subject requests

If LiquidTCG receives a request from a Seller to exercise privacy rights regarding data processed for a Store, we will, where appropriate, direct the request to the Store and provide reasonable assistance so the Store can respond. See /data-request.

6. Security incidents

LiquidTCG will notify the Store without undue delay after becoming aware of a personal-data breach affecting the Store's data, and will provide information reasonably available to help the Store meet its notification obligations.

7. Return or deletion

On termination of the Store's account, LiquidTCG will delete or, where supported, return the Store's personal information within a reasonable period, except where retention is required by law.

8. Contact

For DPA questions or business data-protection requirements, contact privacy@liquidtcg.co.