Privacy Policy
Your trust is our top priority. Learn how we handle your data with transparency, care, and industry-leading security. Effective 14 May 2026.
1. Introduction
CardPop respects your privacy and is committed to protecting personal data. This policy explains how we collect, use, disclose and safeguard information when you use the platform, digital vault, or trading marketplace.
2. Information we collect
Personal identification (name, email, address, phone), payment information (card details, billing address and transaction history via our payment partners), browsing data (IP, browser, device identifiers, pages visited), and communication data (records of support and member interactions).
3. How we use your information
To deliver the service (manage your account, process orders, facilitate trades and support), improve the platform, send marketing and updates only with consent, prevent fraud, and comply with legal obligations.
4. Data sharing and disclosure
We do not sell personal data. We share it only with service providers (such as Stripe for payments and shipping carriers), where legally required, in a business transfer, or with your explicit consent.
5. Data security
Sensitive data is encrypted in transit via TLS and protected with role-based access controls. No method of internet transmission or storage is 100% secure.
6. Your privacy rights
You have rights to access and correct your data, request deletion (right to be forgotten), opt out of marketing, and request data portability. To exercise these rights, contact [email protected].
7. Cookies and tracking technologies
We use essential cookies required for the site to function and analytical cookies to understand interactions. Your browser can refuse cookies, though some functionality may be unavailable if essential cookies are declined.
8. Third-party links and services
The service may link to sites not operated by CardPop. We encourage you to review those sites’ privacy policies; we assume no responsibility for third-party content or practices.
9. Children's privacy
CardPop does not knowingly collect information from anyone under 18; the platform is intended for adult collectors and traders. Any minor data discovered is removed.
10. International data transfers
Your information may be transferred to and maintained on computers outside your jurisdiction. For EEA/UK users we ensure GDPR compliance using standard contractual clauses and compliant infrastructure partners.
11. Data retention
We retain personal data only as long as necessary for the stated purposes and to meet legal obligations. Account data is typically deleted within 30 days of a formal deletion request, barring disputes or legal holds.
12. Contact us
Privacy: [email protected]. Support: [email protected]. We aim to respond within 48–72 business hours.