Last updated: [20/8/25]
This Privacy Policy explains how Ringside Cards (“we”, “us”, “our”) collects, uses and protects your personal data when you use our website https://www.ringsidecards.co.uk (the “Site”), buy from us, or sell cards to us.
We are the Data Controller for the personal data described here.
1) What data we collect
When you browse the Site
- Device and usage data (IP address, browser type/version, pages viewed, time on site), cookies and similar technologies.
When you purchase from us
- Identity & contact: name, email, phone, billing and delivery address.
- Order details: items purchased, prices, order notes.
- Payment details: taken securely by our payment providers (we do not store full card numbers).
When you sell cards to us
- Contact details: name, email, phone.
- Images/information about the cards you’re selling (including serial numbers, grading certs).
- Optional: proof of ownership/ID for high-value deals (anti-fraud/AML checks).
When you contact us
- Any information you send via forms, email, social DMs, or live chat.
Marketing
- Email address and preferences if you opt-in to our mailing list.
2) How we use your data (and lawful bases)
| Purpose | Data | Lawful basis |
|---|---|---|
| Process and deliver your order | Identity, contact, order details, delivery address | Contract |
| Take/verify payment | Payment details via processors | Contract; Legitimate interests (fraud prevention) |
| Provide customer support | Order and contact info | Contract |
| Buy cards from you | Contact, card details/photos, proof of ownership/ID (when needed) | Contract; Legitimate interests (prevent fraud) |
| Send service emails (order updates, returns) | Contact, order info | Contract |
| Marketing emails (optional) | Email, preferences | Consent (you can withdraw anytime) |
| Improve the Site, prevent abuse | Usage data, logs, cookies | Legitimate interests |
| Legal, taxation and accounting | Order records, invoices | Legal obligation |
3) Who we share data with
We share only what’s necessary to run our business:
- E-commerce & hosting: WordPress & WooCommerce (Automattic), our web host.
- Payment processors: PayPal; Stripe / WooCommerce Payments (may also enable Apple Pay/Google Pay).
- Marketplaces & sync: eBay (if you buy via eBay); M2E Multichannel Connect to sync listings/orders.
- Shipping & logistics: Royal Mail (and any other couriers we may use).
- Email / notifications: WooCommerce transactional mail or our email service provider.
- Analytics/performance/CDN: [LiteSpeed/QUIC.cloud and/or your analytics provider, if any].
- Professional services: accountants, legal advisors, fraud-prevention tools where proportionate.
These processors may store data in the UK, EEA, or (for some providers) the US or other countries. Where data leaves the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses.
We do not sell your personal data.
4) Cookies & similar technologies
We use cookies to make the store work, keep your cart, measure performance and (only if you consent) run marketing/retargeting.
Types we use
- Essential: cart/session, checkout, security, cache (e.g., WooCommerce session cookies, LiteSpeed cache).
- Analytics/performance: to understand site usage.
- Marketing (optional): only if you accept in our cookie banner.
You can manage cookies via our cookie controls and your browser settings. Blocking essential cookies may break parts of the Site.
5) Data retention
- Orders & invoices: kept for 6 years (tax and accounting).
- Customer accounts: kept while active; inactive accounts reviewed every 24 months.
- “Sell your cards” enquiries: normally 12 months, or longer if a transaction proceeds.
- Marketing list: until you unsubscribe.
- Support emails/forms: up to 24 months.
We’ll keep data longer if required by law or to establish/defend legal claims.
6) Your rights (UK GDPR)
You have the right to:
- Access a copy of your data.
- Rectify inaccurate data.
- Erase data (where we can, e.g., not overriding tax rules).
- Restrict or object to processing in certain cases.
- Port data to another provider (where technically feasible).
- Withdraw consent for marketing at any time (unsubscribe link in every email).
To exercise your rights, contact sales@ringsidecards.co.uk. We’ll respond within one month.
You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk or 0303 123 1113.
7) Security
We use technical and organisational measures appropriate to the risk, including HTTPS, access controls, activity logging, and secure payment providers. No method is 100% secure, but we work to protect your information.
8) Children
Our Site is not intended for children under 13 and we do not knowingly collect their data.
9) Third-party links
Our Site may link to external pages (e.g., eBay, social platforms). Those sites have their own privacy policies.
10) Changes to this policy
We may update this policy from time to time. We’ll post the new version here and update the “Last updated” date.
11) Contact
Questions or requests about privacy?
Email: sales@ringsidecards.co.uk
Practical notes for your site
- Add a cookie banner and list your analytics/ads cookies if you use them.
- Make sure checkout links to this policy and your Returns Policy.
- If you ever start email marketing, store proof of consent (time, source) and include an unsubscribe link.
If you share your business address/email and which analytics (if any) you’re using, I’ll fill those in and deliver a final, ready-to-publish version.