Privacy

Card Gremlin is a small independent business, and is responsible for your details. Questions or requests: contact@cardgremlin.co.uk.

What we collect, and why

• Your name, email, phone (if given) and address when you order, so we can post your cards and keep you updated. This is needed to carry out your order.
• The cards you send, plus the photos we take and the grades we give them, to run the Gremlin Registry.
• Payment is handled by Stripe. We never see or store your card details; we just get told that you've paid.
• A scrambled version of your IP address, kept for up to a day, to stop people guessing registry codes or spamming orders.

Who sees it

Only us, Stripe (to take payment) and the postal service (your address, on the parcel). Our website and email are hosted by Namecheap in our account. We don't sell your details or use them for marketing.

How long we keep it

Order details are kept for six years, because that's how long we're required to keep business records. Registry pages stay up so your card's grade can always be checked. If you'd like a card's page taken down, just ask.

Cookies

The public site doesn't set any cookies. Our page fonts load from Google Fonts. There's a login cookie for our own admin pages, and Stripe uses its own cookies on its checkout page.

Your rights

You can ask to see, correct or delete the details we hold about you, or object to how we use them. Email us and we'll respond within a month. If you're unhappy with how we've handled your details, you can complain to the Information Commissioner's Office.