1. Who We Are

PokeOutpost ("we", "us", "our") respects your privacy and is committed to protecting your personal information.

For the purposes of applicable UK data protection legislation, including the UK GDPR and Data Protection Act 2018, PokeOutpost is the data controller for the personal information described in this Privacy Policy.

2. Information We Collect

Depending on how you use PokeOutpost, we may collect:

• Full name
• Billing address
• Delivery address
• Email address
• Telephone number
• Account information
• Order information
• Payment-related information
• Card grading submission information
• Card details and descriptions
• Card photographs
• Certificate numbers
• Submission numbers
• Contact form information
• Customer support communications

3. Information Collected Automatically

When you visit our website, certain technical information may be collected automatically.

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Links clicked
• Date and time of visits
• Referring website
• Cookie information
• Website activity

4. Orders and Purchases

When you purchase products or services from PokeOutpost, we collect information necessary to process and fulfil your order.

• Name
• Billing information
• Delivery information
• Email address
• Telephone number
• Products purchased
• Services purchased
• Order number
• Payment status
• Delivery information

5. Payment Information

Payments made through our website may be processed by third-party payment providers such as Stripe.

Where possible, PokeOutpost does not store complete payment card numbers or CVV/security codes on our own systems.

We may receive limited transaction information such as payment status, transaction reference, amount and date.

6. Customer Accounts

If you create a PokeOutpost account, we may process:

• Name
• Email address
• Username
• Password
• Account preferences
• Order history
• Submission history
• Grading information
• Certificate information
• Saved addresses

7. Card Grading Submissions

If you submit cards to PokeOutpost for grading, authentication or verification, we may collect information necessary to administer your submission.

• Your name
• Contact information
• Return address
• Submission number
• Card information
• Card photographs
• Grading information
• Service selected
• Certificate number
• Order and payment information

This information allows us to process and track submissions, provide grading services, generate certificates and return cards to customers.

8. Public Certificate Verification

PokeOutpost may provide a public certificate verification service allowing a certificate number to be checked.

Public verification information may include:

• Certificate number
• Card name
• Set
• Card number
• Grade
• Verification status
• Grading information
• Card or certificate images where applicable

9. Selling Cards or Products to PokeOutpost

If you contact PokeOutpost about selling cards, collections or other products to us, we may collect information needed to evaluate and process the transaction.

• Name
• Contact details
• Address
• Item descriptions
• Photographs
• Valuation information
• Offer information
• Payment information
• Transaction records

10. How We Use Your Information

• Provide products and services
• Process orders
• Process payments
• Process refunds
• Deliver products
• Process grading submissions
• Track submissions
• Provide certificate verification
• Manage customer accounts
• Provide customer support
• Prevent fraud
• Protect our website
• Maintain business records
• Meet legal and accounting requirements
• Improve our website and services
• Send marketing where legally permitted

11. Lawful Bases for Processing

Contract

We may process information where necessary to provide a product or service you have requested.

Legal Obligation

We may process information where necessary to comply with legal, tax and accounting requirements.

Legitimate Interests

We may process information for legitimate business purposes such as website security, fraud prevention and improving our services.

Consent

Where consent is required, we will request it before processing your information for that purpose.

12. Marketing

We may send information about PokeOutpost products, services, promotions and grading services where legally permitted.

You can unsubscribe from marketing communications at any time.

Essential communications relating to orders, payments and grading submissions may still be sent where necessary.

13. Cookies

Our website uses cookies and similar technologies.

• Essential website functionality
• Shopping cart functionality
• Account functionality
• Login sessions
• Security
• Website preferences
• Analytics
• Performance monitoring
• Marketing where applicable

Where required by law, consent will be requested before non-essential cookies are used.

14. Third-Party Services

We may use third-party services to help operate PokeOutpost, including:

• WordPress
• WooCommerce
• Payment providers
• Website hosting
• Email providers
• Security providers
• Analytics services
• Cookie management services
• Delivery providers
• Technical support providers

15. Who We Share Information With

Where necessary, information may be shared with trusted third parties such as payment processors, delivery providers, hosting providers, accountants, technical providers, professional advisers and authorities where legally required.

16. International Data Transfers

Some third-party providers may process information outside the United Kingdom.

Where required, appropriate safeguards will be used in accordance with applicable UK data protection legislation.

17. How Long We Keep Your Information

We only keep personal information for as long as reasonably necessary for the purposes for which it was collected.

Some information may need to be retained for longer periods because of legal, accounting, tax, fraud prevention or dispute-resolution requirements.

18. Security

We take reasonable technical and organisational measures to protect personal information.

• Secure website connections
• Password protection
• Access controls
• Security software
• Software updates
• Payment security provided by payment processors
• Backups

No internet transmission or electronic storage system can be guaranteed to be completely secure.

19. Your Data Protection Rights

Under UK data protection law, you may have rights including:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights relating to automated decision-making

Not every right applies in every situation and some rights are subject to legal exemptions or limitations.

20. Exercising Your Rights

To exercise your data protection rights, contact:

We may request information necessary to verify your identity before processing certain requests.

21. Complaints

If you have concerns about how PokeOutpost handles your information, please contact us first so that we can investigate.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

22. Children's Privacy

Our website is not intentionally designed to collect personal information from children without appropriate involvement or permission from a parent or guardian.

23. Third-Party Websites

Our website may contain links to third-party websites. PokeOutpost is not responsible for the privacy practices or security of those websites.

24. Fraud and Legal Compliance

We may process information where reasonably necessary to detect fraud, prevent misuse, protect customers, protect PokeOutpost, enforce our terms, comply with legal obligations and protect our legal rights.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time because of changes to our services, website, technology, third-party services or applicable legislation.

The "Last Updated" date at the top of this page will be changed whenever this policy is updated.

26. Contact PokeOutpost

If you have questions about this Privacy Policy or how PokeOutpost handles your personal information, contact us.