Privacy Policy

Who we are

This website is operated by [YOUR BUSINESS NAME]. If you have any questions about this policy or how we handle your data, contact us at [YOUR EMAIL].

What personal data we collect

When you submit a quote request, we collect:

• Full name
• Email address
• Phone number (optional)
• Postal address
• Details of the trading cards you wish to sell (card names, conditions, quantities)
• Estimated quote value

Why we collect it

We collect this information solely to process your quote request and, if accepted, to arrange collection of your cards and payment. The legal basis for processing is the performance of a contract (or steps taken at your request prior to entering into a contract) under UK GDPR Article 6(1)(b).

Who we share it with

We do not sell your personal data. We share it only with the following service providers who process it on our behalf:

• Supabase — our database provider, used to store quote data securely.
• Resend — our email delivery provider, used to send your confirmation email.
• Ideal Postcodes — used to look up your address from your postcode during the quote form.

Each of these providers is contractually obligated to process your data only as directed by us and in accordance with applicable data protection law.

How long we keep it

Quote records and associated personal data are retained for 12 months after the quote is marked as completed or rejected. After this period, records are permanently deleted. If your quote remains in draft or pending status, data will be deleted 12 months after submission.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Erasure — request that we delete your personal data.
• Rectification — request that we correct inaccurate data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing in certain circumstances.

To exercise any of these rights, use our Data Request form or email us at [YOUR EMAIL]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

This website uses only essential cookies required for the site to function (for example, to keep admin users logged in). We do not use tracking or advertising cookies. No cookie consent is required for essential cookies under UK GDPR.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related queries, contact [YOUR EMAIL].