Privacy Policy

CardSell operates an online platform where customers can sell eligible gift cards through a secure, verification-first process. You see the payout offer before you submit anything, every card is verified, and nothing is redeemed without your explicit authorisation.

CardSell provides services to customers in the United Kingdom. This policy is written with the principles of UK GDPR in mind where they apply to our handling of your personal information.

For any privacy matter, CardSell is the controller of the personal information described in this policy. You can reach us at support@cardsell.co.uk.

We collect only the information reasonably necessary to provide our services. Depending on how you use the website, this may include:

• Full name.
• Email address.
• Contact details, such as a telephone number where you provide one.
• Gift card submission information, including brand, balance, card number, PIN or redemption code, and any photographs you choose to upload.
• Payment details necessary for payouts, such as your bank account or e-money account details.
• Device information, such as device type and operating system.
• Browser information, such as browser type and language.
• IP address, including the approximate location it indicates.
• Usage analytics, such as pages viewed and actions taken on the website.
• Customer support communications, including emails and messages you send us.

We do not ask for information we do not need, and we do not require identity documents as a matter of course. Where additional verification is appropriate for a particular submission, we will explain what we need and why.

Personal information may be used to:

• Process your gift card submissions.
• Verify gift cards, including balance, validity and brand eligibility.
• Send authorisation requests and transaction updates.
• Complete approved payouts to your chosen payment method.
• Prevent, detect and investigate fraud.
• Respond to support enquiries and resolve disputes.
• Monitor and improve website performance and reliability.
• Comply with legal, regulatory and record-keeping obligations.
• Protect our customers, our partners and our business.

We do not use your information for automated decision-making that produces legal or similarly significant effects without human review, and we do not sell your data to advertisers.

Where UK GDPR applies, our processing may rely on one or more of these bases:

Personal information is only shared where reasonably necessary, and only with parties who are required to protect it. These may include:

• Payment providers, to send your payout.
• Identity or verification providers, where additional checks are appropriate.
• Fraud prevention partners and, where relevant, the retailer issuing the gift card.
• Technology service providers, such as hosting, database, email and analytics suppliers.
• Professional advisers, such as accountants and legal advisers.
• Government or regulatory authorities, where we are legally required to disclose information.

Because we are a UK business and use service providers in different locations, your information may be processed or stored in the United Kingdom or other countries outside the United Kingdom.

Where applicable, we use reasonable safeguards for international transfers in accordance with applicable data protection laws — for example contractual protections such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with supplier due diligence.

CardSell uses reasonable administrative, technical and organisational measures to help protect personal information. These include encrypted connections, access controls limiting card data to authorised personnel who need it, restricted database permissions, and logging of administrative activity.

Personal information is retained only for as long as reasonably necessary to:

• Provide our services and complete your transaction.
• Meet legal, tax and accounting obligations.
• Resolve disputes and handle complaints.
• Prevent fraud, including maintaining a register of submitted card codes so the same card cannot be submitted twice.
• Enforce our agreements and protect our legal rights.

When information is no longer needed for these purposes, it is deleted or anonymised. Records connected with completed payouts are typically retained for the period required by financial record-keeping obligations.

Where UK GDPR applies, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Restrict how we process your information.
• Object to certain processing, including processing based on legitimate interests.
• Request data portability in a structured, commonly used format.
• Withdraw consent where consent is the legal basis for processing.

To exercise a right, email support@cardsell.co.uk with details of your request. We may need to verify your identity before responding, and we aim to respond within one month.

Requests may be subject to legal exceptions — for example, we may need to keep certain transaction and fraud-prevention records even after a deletion request. If you are unhappy with how we have handled your information, you may complain to the UK Information Commissioner's Office.

Cookies and similar technologies may be used to:

• Improve website functionality, such as keeping you signed in.
• Remember your preferences, such as your selected brand or payout method.
• Analyse how the website is used, in aggregate.
• Improve performance, reliability and security.

You can control or delete cookies through your browser settings. Blocking some cookies may affect parts of the website, such as signing in or tracking a submission. Where we publish a separate Cookie Policy, it will be linked from the footer and should be read alongside this policy.

CardSell is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from children.

If you believe a person under 18 has provided us with personal information, please contact support@cardsell.co.uk and we will delete it and close any associated submission.

This Privacy Policy may be updated periodically to reflect changes in our services, our suppliers or our legal obligations. The latest version will always be published on the website with an updated "Last Updated" date.

Where a change materially affects how we use your personal information, we will take reasonable steps to bring it to your attention.