Privacy Policy – GCA Grading
Last updated: 16 October 2024.
1. Introduction
Welcome to GCA Grading (“we”, “our”, or “us”).
We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Spanish data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit www.gcagrading.com or use our grading services.
2. Company Information
Company Name: GCA Grading
Address: C. Cacín 3, 18300 Loja, Spain
Email: [info@gcagrading.com]
Website: [www.gcagrading.com]
3. Data We Collect
We may collect and process the following types of personal data:
-
Contact information: name, email address, phone number, and postal address
-
Order details: items submitted for grading, grading results, serial numbers, and payment details (through secure third-party processors)
-
Account information: username and password (if you create an account)
-
Communication data: messages or inquiries sent to our customer support
-
Technical data: IP address, browser type, device information, and website usage statistics (via cookies or analytics tools)
-
Media data: photographs or scans of graded items created during the grading process
4. How We Use Your Data
We use your personal data for the following purposes:
-
To process grading submissions and manage your account
-
To communicate with you regarding orders, grading results, or inquiries
-
To handle billing, invoicing, and payments
-
To comply with legal obligations such as tax or accounting requirements
-
To improve our website, services, and customer experience
-
To use anonymized grading data and photographs for commercial, promotional, or educational purposes — for example, publishing graded card images or population reports on our website or social media
All data used for promotional or commercial purposes will never include personally identifiable information such as your name, address, or payment data.
5. Legal Basis for Processing
We process your personal data under the following legal bases:
-
Contractual necessity: to fulfill your order or service request
-
Legal obligation: to comply with applicable laws and regulations
-
Legitimate interest: to improve services, prevent fraud, and promote our brand
-
Consent: when you opt in to newsletters or non-essential marketing communication
6. Data Storage and Retention
Your personal data is securely stored within the European Union (EU).
We retain your data only as long as necessary to fulfill the purposes described in this policy or to meet legal requirements — typically up to 5 years for accounting and tax obligations.
Media such as photographs or scans of graded items may be stored indefinitely for documentation, verification, or promotional use unless you request their removal.
7. Data Sharing
We only share your personal data with trusted partners necessary to operate our services, such as:
-
Shipping and logistics companies
-
Payment service providers
-
IT, hosting, and marketing providers
-
Legal or governmental authorities (only when required by law)
All third parties are contractually obligated to process your data securely and in accordance with GDPR.
8. Use of Media and Grading Data for Commercial Purposes
During the grading process, GCA Grading may create high-resolution images, scans, or digital representations of submitted items.
We may use these images and anonymized grading data (e.g. grade level, serial number, and item type) for:
-
Website galleries or population reports
-
Marketing materials or advertisements
-
Social media and promotional campaigns
-
Educational or reference purposes
We ensure that such materials never include personal information about the card owner.
If you wish to request removal of your item’s image or data from public or promotional content, you can contact us at [info@gcagrading.com], and we will process your request promptly.
9. Cookies and Analytics
Our website uses cookies to provide essential functionality and improve user experience.
Cookies help us analyze website traffic, remember your preferences, and measure performance.
For more details, please see our separate Cookie Policy.
10. Your Rights
Under the GDPR, you have the right to:
-
Access – obtain a copy of your personal data
-
Rectification – correct inaccurate or incomplete information
-
Erasure – request deletion of your data (“right to be forgotten”)
-
Restriction – limit data processing in certain cases
-
Objection – object to data processing based on legitimate interest or for marketing purposes
-
Data portability – request transfer of your data to another provider
-
Withdraw consent – withdraw previously given consent at any time
To exercise these rights, please contact us at [info@gcagrading.com].
We will respond within 30 days of receiving your request.
11. Data Security
We use appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, loss, or misuse.
These include:
-
Secure HTTPS encryption
-
Limited data access by authorized personnel only
-
Regular backups and software updates
-
EU-based secure servers
12. International Data Transfers
All data is processed and stored within the European Economic Area (EEA).
If data is transferred outside the EEA, we ensure GDPR compliance through Standard Contractual Clauses or equivalent legal safeguards.
13. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our operations, services, or legal requirements.
The latest version will always be available on www.gcagrading.com, with a new “Last Updated” date shown above.
14. Contact Us
If you have any questions or concerns regarding this Privacy Policy or the handling of your personal data, please contact us at:
GCA Grading
C. Cacín 3, 18300 Loja, Spain
[info@gcagrading.com]
[www.gcagrading.com]