Privacy Policy.

1. Data Controller

For the purposes of applicable data protection laws, including the UK General Data Protection Regulation, SlabHub is the data controller of your personal information.

Contact: hello@slabhub.co.uk

2. Information We Collect

• Account information such as name, username, email address, profile details and preferences.
• Transaction information such as listings, orders, trades, offers, shipping details, tracking information and payment status.
• Communication information such as messages, support requests, reports, reviews and feedback.
• Card and content information such as card details, collection records, Wants, Chases, listings and photographs or scans that you upload to SlabHub.
• Image and file information associated with uploads, which may include file type, dimensions and embedded metadata where present. We may remove, ignore or avoid retaining metadata that is not needed for the service.
• Technical information such as device type, operating system, app version, IP address, crash reports and usage analytics.
• Notification information such as push notification tokens and notification preferences.

3. How We Use Your Information

• To create and manage user accounts.
• To organise collections, Wants, Chases and other Stockroom features.
• To facilitate buying, selling and trading.
• To provide Buyer Protection, Trade Protection and SlabHub Verified services.
• To process transactions, refunds and support requests.
• To provide messaging, reviews and notifications.
• To identify and match cards, variants and physical copies and to improve the accuracy and usefulness of the SlabHub catalogue.
• To review suitable uploaded card images for possible use as shared catalogue imagery.
• To prevent fraud, abuse, duplicate or inaccurate catalogue records and misuse of the platform.
• To improve platform functionality and user experience.
• To comply with legal obligations.

4. Legal Bases for Processing

Depending on the purpose, we process personal information where necessary to provide our services or perform a contract with you, where required to comply with legal obligations, where you have provided consent, or where processing is necessary for our legitimate interests.

Our legitimate interests may include operating, securing and improving SlabHub; maintaining an accurate and useful shared card catalogue; identifying and matching cards and variants; reducing duplicate or inaccurate catalogue information; preventing fraud and misuse; and handling support, safety and dispute matters. Where we rely on legitimate interests, we consider whether the processing is necessary and balance those interests against the rights and interests of the people affected.

5. Payments

SlabHub does not store full payment card information. Payments may be processed by authorised third-party payment providers such as Stripe, which may collect billing, payment, verification and fraud prevention information.

6. Uploaded Card Images & Catalogue Imagery

SlabHub may allow you to upload photographs or scans of cards, slabs and related collecting items. While an image is being uploaded, processed or used within your account, collection, listing or other SlabHub record, it may be associated with your account and may constitute personal information where it identifies you, is linked to you, or contains personal information.

Uploaded card images may be used to provide the feature you selected, help identify or match the correct card, set, parallel or variant, support catalogue quality checks, investigate duplicate or inaccurate records, and improve card-recognition and catalogue workflows.

SlabHub does not automatically turn every user upload into shared catalogue imagery. An uploaded image may be considered as a candidate for the SlabHub catalogue, but selection for shared catalogue use will be subject to human or administrator review.

Where an image is selected for shared catalogue use, we may create a catalogue copy and may crop, resize, compress or otherwise prepare it for consistent display. Where reasonably practicable, we will remove or disregard unnecessary embedded metadata and separate the catalogue copy from the identity or account of the person who originally uploaded it.

A catalogue image that has been reviewed, selected and de-identified may continue to be retained and used as part of the shared SlabHub catalogue after the original upload is removed or the originating account is closed. Account deletion does not by itself require removal of a catalogue image that is no longer personal information and is being retained as a shared catalogue asset.

If an image still contains personal information or remains linked to an identifiable user, applicable data protection rights and lawful-basis requirements continue to apply. We will consider requests relating to that personal information in accordance with applicable law.

Please avoid including unnecessary personal information in card images, such as faces, addresses, personal documents, shipping labels or other identifying material that is not required to show the collecting item.

Intellectual-property rights and permissions relating to uploaded content are addressed separately in the SlabHub Terms of Service.

7. SlabHub Verified Records

Where SlabHub Verified is used, we may collect verification photographs, shipping labels, tracking information, operator notes and resolution records for dispute resolution, fraud prevention, legal compliance and service improvement.

8. Messaging and Reviews

Messages, reviews and feedback may be stored to deliver platform features, investigate disputes, prevent fraud and enforce platform policies. Reviews and some profile information may be visible to other users.

9. Push Notifications

Where enabled, SlabHub may send notifications relating to offers, orders, trades, messages, verification updates and account activity. Users may manage notification preferences in the app or device settings.

10. Sharing Information

We may share information with service providers, payment processors, hosting providers, notification providers, analytics providers, other users where necessary to complete transactions, and legal authorities where required by law.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it is used, including providing the service, legal obligations, fraud prevention, dispute resolution, financial record keeping, operational requirements and platform safety. Retention periods may vary depending on the type of information and the reason it is held.

Ordinary card-image uploads may be retained while they are needed for the relevant account, collection, listing, identification or catalogue-review workflow. Images that are abandoned, unsuitable or no longer needed may be deleted or anonymised as part of normal data housekeeping.

Where an uploaded image has been reviewed and selected as shared catalogue imagery, a de-identified catalogue copy may be retained for the longer-term operation, consistency and quality of the SlabHub catalogue, including after the originating account has been closed. We do not use this as a reason to retain unrelated personal account information indefinitely.

12. Account Deletion

Users may request account deletion. Where applicable, SlabHub will delete or anonymise personal information associated with the account, subject to information that may need to be retained for legal compliance, fraud prevention, financial records, platform safety or ongoing disputes.

If an image uploaded through the account has already been reviewed, selected and separated from the account for use as de-identified shared catalogue imagery, that catalogue copy may remain in use after account deletion. If the retained image still constitutes personal information, any continued retention or use will remain subject to applicable data protection law and your relevant rights.

13. Your Rights

Depending on applicable law and the circumstances, you may have rights to access, correct or delete your personal information, restrict certain processing, object to certain processing, request data portability and withdraw consent where processing is based on consent.

Where we rely on legitimate interests to process your personal information, you have the right to object to that processing. We will consider an objection in accordance with applicable data protection law and will stop the relevant processing where required.

To exercise a privacy right or ask a question about personal information held by SlabHub, contact hello@slabhub.co.uk.

14. Security

We use reasonable technical and organisational measures to protect personal information. No system can be guaranteed to be completely secure.

15. Complaints

If you believe your information has been handled improperly, you may contact SlabHub. You may also have the right to complain to the Information Commissioner’s Office.

16. Contact

Questions about this Privacy Policy may be sent to hello@slabhub.co.uk.