Privacy Policy

1. Data controller

Dragon & Co. ApS, CVR no. 45295877, is the data controller for the personal data we receive via Slabbed.eu.

Contact: hello@slabbed.eu

About cookies and consent: see our cookie policy.

2. What information we process

When you fill in our forms (sell form, grading submission, contact or newsletter), we collect:

• Name and email (required)
• Phone number (optional)
• Address, postal code and city (optional)
• Information about your cards: card types, condition, quantity, weight and preferred payment method
• Photos of your cards, if you choose to upload them
• Any message you write yourself
• Order information, if you shop in the store

3. Purpose and legal basis

We process the information to assess your collection, send you an offer, complete the transaction, carry out grading services and deliver orders from the store. The legal basis is Article 6(1)(b) of the GDPR (performance of a contract or steps taken at your request prior to entering into a contract) and (f) (legitimate interest in operating a trading card business and communicating with customers and prospective sellers).

4. Retention

If we enter into a transaction, we retain the relevant information for up to 5 years after the end of the financial year pursuant to the Danish Bookkeeping Act. Enquiries that do not lead to a transaction are deleted no later than 12 months after the last contact. Uploaded photos are deleted together with the enquiry.

5. Recipients

We do not share your information with third parties for marketing purposes. We use data processors for hosting and email (Supabase/Cloudflare in the EU as well as Shopify for order handling). For grading services, cards and necessary information are shared with the chosen grading company (PSA, BGS, CGC or TAG). Data is primarily stored within the EU/EEA.

6. Your rights

Under the GDPR, you have the right to:

• Access the information we hold about you
• Have incorrect information corrected
• Have your information deleted (when there is no statutory retention period)
• Have the processing restricted or object to it
• Receive your information (data portability)
• Withdraw consent if the processing is based on consent

Write to hello@slabbed.eu, if you want to exercise your rights. You can also complain to the Danish Data Protection Agency, www.datatilsynet.dk.

7. Use of cards for marketing

When you submit cards for grading with us, we may take photos of the cards before, during and after grading - including the finished slabs - and use them to market Slabbed.eu, e.g. on the website, social media, newsletters and printed materials. This also applies to cards we buy or sell on consignment. We do not display your name, address or other personal information together with the cards unless we have your explicit consent. You can write to us at any time at hello@slabbed.eu if you do not want us to use your cards in marketing.

8. Cookies

We use necessary, technical cookies that make the site work (e.g. login session and shopping cart). Only if you give marketing consent, we load the Google Ads tag (Google is the recipient) and keep a Google ad click reference in your browser for up to 30 days and pass it to Shopify's checkout page, so Google Ads can measure whether the ad led to a purchase. We store the click reference ourselves only in your browser, never in your profile, on our server or in our reports. At checkout, Shopify's Google app measures the purchase (e.g. order value) and sends it to Google Ads with the click reference, under Shopify's and Google's terms. We do not use it for remarketing or personalised targeting. We use Google Analytics (Google is the recipient) for visit statistics. Without statistics consent it only sends limited measurement without cookies; with consent cookies are used for full statistics. Account areas are only measured as a general page type, and e-mail, account data or form contents are never sent; only campaign fields (UTM) and the Google click ID from the address you landed on are included. Google signals and ad personalisation are off. See the cookie policy.