1. Who We Are
Swapmycards ("we", "us", "our") operates a service through which we buy Pokémon and other trading cards from members of the public. Swapmycards is a trading name of Swapmycards Ltd.
For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Swapmycards is the "data controller" responsible for your personal data. Our contact details are in section 12.
2. Data We Collect
We collect and process the following categories of personal data when you use our service:
| Category | Examples |
|---|---|
| Identity data | Your name |
| Contact data | Email address, phone number |
| Payment data | Bank sort code and account number, or PayPal email address |
| Transaction data | Details of the cards you sell, order references, quotes and payments |
| Technical data | Basic information about how you access our website |
We do not intentionally collect any special category data (such as health, ethnicity or political views). Please do not send us this kind of information.
3. How We Collect It
We collect data directly from you when you:
- Submit an order through our website;
- Provide your payment details to receive a payout;
- Contact us by email or through the website.
4. How We Use Your Data
We use your personal data to:
- Process your order and assess the cards you send us;
- Contact you about your order, including any revised offers;
- Make payment to you for your cards;
- Keep records of our transactions for accounting and legal purposes;
- Respond to your enquiries and provide customer support;
- Prevent fraud and comply with our legal obligations.
5. Our Lawful Basis
Under the UK GDPR, we rely on the following lawful bases for processing your data:
- Performance of a contract — to process your order and pay you for your cards;
- Legal obligation — to keep financial records and comply with tax and anti-fraud requirements;
- Legitimate interests — to run and improve our service, and to prevent fraud, in a way that does not override your rights.
6. Who We Share It With
We do not sell your personal data. We only share it where necessary to run our service, including with:
- Payment providers — to make your payout (e.g. our bank or PayPal);
- Service providers — trusted third parties who help us operate our website and store data securely, acting on our instructions;
- Authorities or advisors — where required by law, or to establish, exercise or defend legal claims.
Some of our service providers may process data outside the UK. Where they do, we take steps to ensure your data is protected to a standard consistent with UK data protection law.
7. How Long We Keep It
We keep your personal data only for as long as necessary for the purposes we collected it for. Transaction and payment records are typically retained for a period consistent with our legal and accounting obligations (generally up to six years). After this, we securely delete or anonymise your data.
8. How We Protect It
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Access to your data is limited to those who need it to run our service.
While we take reasonable steps to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your Rights
Under the UK GDPR, you have the right to:
- Request access to the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your data in certain circumstances;
- Object to, or request restriction of, our processing;
- Request transfer of your data (data portability);
- Withdraw consent, where we rely on it.
To exercise any of these rights, please contact us using the details in section 12. We will respond within the timeframes required by law. Please note some rights may not apply where we are required to keep data for legal reasons.
10. Cookies
Our website may use a limited number of cookies or similar technologies necessary for the site to function. We do not use cookies to build advertising profiles or sell your data. Where we use any non-essential cookies, we will seek your consent first.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We recommend reviewing it periodically.
12. Contact & Complaints
If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact us:
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. We'd appreciate the chance to address your concerns first, so please do contact us before approaching the ICO.