Privacy Policy

Last updated: 27 October 2026

Who we are

This website is operated by Trading Card Exchange Limited. If you have any questions about this policy or how we handle your data, contact us at info@tcexchange.co.uk.

What personal data we collect

When you submit a quote request, we collect:

  • Full name
  • Email address
  • Phone number (optional)
  • Postal address
  • Details of the trading cards you wish to sell (card names, conditions, quantities)
  • Estimated quote value

When you buy from our shop, we collect:

  • Full name
  • Email address
  • Delivery address
  • What you ordered, what you paid, and the order's delivery and refund status
  • The type and last four digits of the card you paid with. Your full card details are entered on Stripe's secure payment page and are never seen or stored by us.

You don't need an account to buy from us. Your basket is kept only in your own browser until you check out.

Why we collect it

We collect this information solely to process your quote request and, if accepted, to arrange collection of your cards and payment, and to take payment for, send and support orders you place in our shop (including emailing your receipt, dispatch updates and any refund). The legal basis for processing is the performance of a contract (or steps taken at your request prior to entering into a contract) under UK GDPR Article 6(1)(b). We keep order and payment records to meet our legal obligations for tax and accounting (Article 6(1)(c)). We do not send you marketing.

Who we share it with

We do not sell your personal data. We share it only with the following service providers who process it on our behalf:

  • Supabase — our database provider, used to store quote and order data securely.
  • Resend — our email delivery provider, used to send your confirmation, receipt and dispatch emails.
  • Stripe — our payment provider. Stripe processes your payment and card details on its own secure checkout page and acts as an independent controller for fraud prevention and its own legal obligations; see Stripe's privacy policy.
  • Royal Mail — receives your name and delivery address to deliver your order.
  • Ideal Postcodes — used to look up your address from your postcode during the quote form.

Each of these providers is contractually obligated to process your data only as directed by us and in accordance with applicable data protection law.

How long we keep it

Quote records and associated personal data are retained for 12 months after the quote is marked as completed or rejected. After this period, records are permanently deleted. If your quote remains in draft or pending status, data will be deleted 12 months after submission.

Shop order records (including your name, address and what you bought) are kept for [RETENTION PERIOD — e.g. 6 years from the end of the financial year of the order], as required for tax and accounting records. If you start a checkout but don't pay, we don't receive your name, email or address.

Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Erasure — request that we delete your personal data.
  • Rectification — request that we correct inaccurate data.
  • Portability — request your data in a machine-readable format.
  • Objection — object to processing in certain circumstances.

To exercise any of these rights, use our Data Request form or email us at info@tcexchange.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

This website uses only essential cookies and browser storage required for the site to function (for example, to keep admin users logged in, and to remember the items in your shop basket on your own device). We do not use tracking or advertising cookies. No cookie consent is required for essential cookies and storage under UK GDPR and PECR.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related queries, contact info@tcexchange.co.uk.