Privacy policy

Effective date: May 1st, 2023

CCGCastle, LLC registered at 2 Craftsman Road, East Windsor, CT 06088, United States (“CCGCastle”, "us", "we", or "our") operates the TCG Bulk application (hereinafter referred to as the "Service").

This page informs you of our policies regarding the collection, use and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and service.

Definitions

  • Service: Service is the TCG Bulk application operated by CCGCastle, LLC
  • Personal Data: Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
  • Usage Data: Usage Data is data collected automatically either generated using the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Cookies: Cookies are small files stored on your device (computer or mobile device).
  • Data Controller: Data Controller means the natural or legal person who (either alone or jointly with others) determines the purposes for which and the manner in which any personal information are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.
  • Data Processors: Data Processor means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
  • Data Subject (or User): Data Subject is any living individual who is using our Service and is the subject of Personal Data.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.


Safeguarding User Communications and Privacy

We prioritize the security and privacy of our users. To maintain the integrity of our platform, we employ advanced automatic detection systems and, where necessary, manual review of messages sent through our messaging tools. This includes chat messages and emails within the TCG Bulk system. These measures are meticulously designed to prevent fraudulent or suspicious activity and ensure compliance with our User Agreement and other policies, including the enforcement of prohibitions against off-platform transactions.

Our detection system automatically scans messages for any sharing of personal information that could be potentially dangerous. This proactive approach helps safeguard our community by identifying and mitigating risks before they escalate. Additionally, we may review messages (along with any attachments) exchanged between members to detect and prevent instances of fraud, abuse, spam, illegal content, and other policy violations.

All communications are securely retained and may be reviewed to assist in these efforts. By detecting and preventing the sharing of contact information, our system ensures that all interactions remain within the TCG Bulk platform, thereby providing users with the full protection of our policies and security measures. This approach not only enhances user safety but also fosters a trusted and reliable marketplace environment.

Your trust and safety are paramount to us, and we are committed to continuously improving our security measures to provide you with the best possible experience on TCG Bulk.

Types of Personal Data Collected

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

  • First name and last name
  • Username
  • Email address
  • Country od residence
  • Shipping address
  • Usage Data (see definition below)
  • The time you use our service and duration of your session
  • The type of products you attempted to or did sell or buy
  • Your account balance
  • Information required to identify your payment service account and to use the payment service (such as Paypal, Stripe, etc.)
  • Your age, and if needed, consent of your parents or guardian to use our service
  • Your capacity as a representative of a company or holder of a power of attorney
  • Information we collect from the publicly available resources to be able to approve your account
  • The content of any claims, opinions, complaints, inquiries or suggestions

When you access the Service, we may collect certain information automatically, including, but not limited to, the type of device you use, your device unique ID, the IP address of your device, your operating system, the type of Internet browser you use, unique device identifiers and other diagnostic data ("Usage Data").

The Purposes and Legal Basis for Collecting Personal Data

We collect your personal data for the following purposes:
  • To identify and authenticate you to enable you to securely use our Services.
  • To provide and maintain our Service. The Service collects your personal data in order to:
    • put you in contact with the Buyer/Seller, so that you conclude the Contract of sale; and
    • ensure that the Contract of sale is exectued and fulfilled, i.e. that payment is made and that the Product is delivered;
  • To notify you about changes to our Service or its terms.
  • To comply with applicable statute and regulatory provisions and to provide mandatory disclosures to law enforcement.
  • Direct marketing purposes
  • For operating, evaluating, and improving our Services (including analytics and internal reporting);
  • To maintain adequate security measures (including fraud detection, preventing unauthorised access to electronic communications networks, the spread of malicious code, denial-of-service attacks and damage to computer and electronic communications systems);
  • To provide customer support (respond to your requests, instructions and inquiries);
  • To draft and to defend ourselves against legal claims;
  • To ensure the security of the premises and property of the Controller.
  • Direct marketing purposes (to the extent permitted by law).
We process your personal data on the following legal basis:
  • The performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article6(1)(b) of the GDPR).
  • To comply with a legal obligation to which we are subject (Article 6(1)(c) of the GDPR).
  • The data subject’s consent to the processing for one or more specific purposes (Article 6(1)(a) of the GDPR).
  • To promote our business interests (legitimate interest) (Article 6(1)(f) of the GDPR).
Which personal data do we process:
  • Your contact information (first name and last name, email address, shipping address, phone number, username);
  • Usage data;
  • The type of products you attempted to or did sell or buy;
  • Your account balance;
  • Information required to identify your payment service account and to use the payment service (such as Paypal, Stripe, etc.);
  • Your age, and if needed, consent of your parents or guardian to use our service;
  • Your capacity as a representative of a company or holder of a power of attorney;
  • Information we collect from the publicly available resources to be able to approve your account.
  • Your contact information (first name and last name, email address, shipping address, phone number, username);
  • Information about you to meet compliance requirements, including those related to identity verification, anti-money laundering controls, and sanctions screening as required by applicable laws.
  • Your contact information (first name and last name, email address, shipping address, phone number, username);
  • Information on purchases made, Contracts of sale concluded.
  • Your contact information (first name and last name, email address, shipping address, phone number);
  • Usage data
  • Information on purchases made, Contracts of sale concluded;
  • The content of any claims, opinions, complaints, inquiries or suggestions.

Cookies

When you use the application, cookies may be automatically placed on your device. You can find more information about cookies in our Cookie Policy

Data Users

We will only disclose your information to the following entities (only for the purposes described above):

  • Service providers (acting as data controllers or data processors), e.g. services that process payments, perform risk assessment, compliance checks and provide shipment tracking services;
  • Public authorities upon their reasoned written request.

Retention of Data

CCGCastle will retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy.

Where the data is processed for the purpose of providing the Service, we will process the data until your user account is deleted. Despite the deletion of a user account, we may continue to process personal data as long as we have a valid legal basis, such as our overriding legitimate interest.

Personal data may also be retained after the purpose for which they are processed has been fulfilled, until the expiry of the applicable limitation period, if further retention is necessary to deal with legal claims, or for a longer period, if a longer period of retention is necessary to comply with a legal obligation or a decision of a competent authority.

After these periods have elapsed, the personal data will be anonymised or deleted.

Your rights

If you are a resident of the EEA, Brasil, California, or Hong Kong, you may be subject to the following rights:

  • he right to access, update or delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
  • The right to object. You have the right to object to our processing of your Personal Data.
  • The right of restriction. You have the right to request that we restrict the processing of your personal information.
  • The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format.

Please note that these rights may to some extent be limited or subject to certain conditions, based on applicable law.

To make a request or submit a question concerning your rights, please contact us using the details specified in the Need more help? section.

If you believe that our processing of your personal data violates applicable law, you may lodge a complaint with the relevant supervisory authority. Contact details for all supervisory authorities in the European Union can be found here.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Updates to this Privacy Policy

This Privacy Policy may be updated to let you know about changes in how we collect and process your information in the Services or changes in related laws. The date when the document was last updated is shown at the top of this Privacy Policy.