Privacy Policy

1. What we collect

Account details: name, email, phone and password (stored as a salted hash — we can never read it). Delivery details: your address, used to generate courier waybills and quotes. Bank details: if you add them, used solely by TradeSafe (our licensed escrow partner) to pay your card sales directly into your bank account. Marketplace activity: listings, photos you upload, offers, purchases, valuations and notifications. Technical data: standard server logs (IP address, timestamps) used for security and rate limiting.

2. How we use it

To operate the marketplace: showing your listings, connecting buyers with sellers, processing escrow-protected purchases and paying sellers out, sending notifications you'd expect (offers, messages, account alerts), verifying your email, preventing fraud, and meeting legal obligations. We do not sell your personal information. We only use advertising and retargeting tools (see section 6) if you give consent, and you can decline or withdraw that consent at any time.

3. Who we share it with

Only the operators needed to serve you: TradeSafe (our licensed escrow partner — it processes buyer payments and pays sellers out, and to do so receives the buyer's and seller's names and contact details and the seller's bank details for payout), PayFast (subscription payments — we never see or store your card number), Anthropic (the card photos you submit for AI scanning/valuation), and our email provider (your address, to send transactional email). If you consent to marketing cookies (section 6), Meta (Facebook) receives limited event data via its advertising pixel so we can measure and target ads — you can decline this and nothing is shared. When you buy a card, your delivery details are shared with the seller solely to fulfil that order. Otherwise, buyers and sellers see each other's display name only.

4. Storage and security

Data is stored in our database and protected with industry-standard measures: hashed passwords, signed payment notifications, HTTPS in production, security headers and rate limiting. Listing photos are stored on our servers and are publicly visible by design (they're your shop window). We keep transaction records as required by South African tax and financial law.

5. Your rights (POPIA)

You may request access to, correction of, or deletion of your personal information — most details you can edit yourself on the account page. Account deletion removes your profile and personal details; transaction and ledger records we must retain by law are kept but de-linked where possible. To exercise any right, email us and we'll respond within a reasonable time. You may also lodge a complaint with the Information Regulator (South Africa).

6. Cookies and local storage

To understand how the site is used, we use privacy-friendly, cookieless analytics (Umami) that counts visits and shows which pages and referrers are popular — it sets no cookies, doesn't track you across sites, and doesn't collect information that identifies you personally. This always runs and needs no consent.

We also offer a marketing pixel from Meta (Facebook) that helps us measure our ads and show relevant ones to people who've visited — but it only loads after you accept on our cookie banner. If you decline (or ignore it), the pixel never loads and no data goes to Meta. You can change your mind any time by clearing your browser's site data. Your browser's local storage also holds your sign-in token and display name so you stay logged in — signing out clears them.

7. Contact

This website and marketplace are operated by Sportscard Trading (Pty) Ltd (registration number 2026/492510/07), 39 Delport Avenue, Oatlands, Krugersdorp, South Africa · Tel/WhatsApp: 076 408 8247 — the responsible party for your personal information under POPIA.

Information Officer: Anandré Groenewald — info@sportscard.co.za.