Privacy Policy
Last updated: January 12, 2026
1. Introduction
CardCollectables ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our website and services.
2. Information We Collect
When you submit a bulk card submission or request a quote, we collect:
- Personal Information: Full name, email address, PayPal email address
- Contact Details: House number/name, street name, town, postcode
- Submission Details: Card quantities, types, box dimensions and weight
- Technical Data: Browser type, IP address (collected automatically)
3. How We Use Your Information
We use your personal data to:
- Process your bulk card submissions and quotation requests
- Arrange collection and shipping of cards
- Process payments via PayPal
- Communicate with you about your submission
- Send you email notifications when you subscribe to updates (optional)
- Improve our services and website functionality
4. Legal Basis for Processing
We process your personal data based on:
- Contract Performance: To fulfill our service agreement with you
- Legitimate Interests: To operate and improve our business
- Consent: For email marketing communications (you can unsubscribe anytime)
5. Data Storage and Security
Your information is stored securely using:
- Encrypted HTTPS connections for all data transmission
- Secure third-party services (Formspree for form submissions, Brevo for email marketing)
- Browser local storage for submission ID tracking (stored locally on your device only)
We retain your data only for as long as necessary to fulfill our services and comply with legal obligations.
6. Third-Party Services
We use the following third-party services that may process your data:
- Formspree: Form submission processing
- Brevo: Email marketing (for subscribers only)
- PayPal: Payment processing
- Netlify: Website hosting
- Google Analytics: Website analytics (see our Cookie Policy for details)
These services have their own privacy policies and handle data in accordance with UK GDPR.
7. Browser Storage
Our website uses browser local storage to generate unique submission reference numbers and improve form functionality. This is strictly necessary for our service. For information about analytics cookies, please see our Cookie Policy.
8. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Object: Object to processing of your data
- Withdraw Consent: Unsubscribe from marketing emails anytime
9. Data Retention
We retain your personal data for:
- Active submissions: Until transaction is complete plus 6 months
- Email subscribers: Until you unsubscribe
- Accounting records: 6 years (legal requirement)
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: