Vaulted Cards UK
Privacy Policy
This policy explains how Fortivo Limited, trading as Vaulted Cards UK, handles personal data under the UK GDPR and the Data Protection Act 2018.
Last updated August 2026
1. Who we are
Vaulted Cards UK is a trading name of Fortivo Limited, registered in England & Wales (company no. 16020947), registered office 18 Albert Road C/O This Workspace, Bournemouth, Dorset, United Kingdom, BH1 1BZ. We are the data controller for the personal data described here. Contact us at hey@vaultedcards.uk.
2. What we collect
- Contact details you send us — name, email address, and postal address where you send or receive cards.
- Correspondence — the content of emails and eBay messages between us.
- Order information passed to us by eBay when you buy, such as your delivery address and order reference.
- Consignment records — the cards you send us, valuations, sale prices and payout details.
- Technical data — IP address, browser type and pages viewed, collected via cookies where you consent.
We do not take card payments on this website and never see your full payment card details. Payment is handled by eBay.
3. Why we use it and our legal basis
- To fulfil orders and consignment agreements — performance of a contract.
- To answer your questions and provide support — legitimate interests.
- To keep accounting and tax records — legal obligation (normally six years).
- To prevent fraud and resolve disputes — legitimate interests.
- To measure how the site is used and to send optional marketing — consent, which you can withdraw at any time.
4. Who we share it with
We share data only where necessary with: eBay (marketplace and payments), Royal Mail and other couriers (delivery), our website and email hosting providers, our bank and payment providers, and our accountant. We never sell your personal data.
5. International transfers
Some providers process data outside the UK. Where that happens we rely on UK adequacy regulations or the International Data Transfer Agreement / Addendum to keep your data protected to UK standards.
6. How long we keep it
Order, consignment and accounting records are kept for six years after the end of the relevant tax year. General correspondence is kept for up to two years. Analytics data is retained for up to 14 months.
7. Your rights
- Access a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Ask us to erase data where we no longer need it.
- Restrict or object to processing based on legitimate interests.
- Receive your data in a portable format.
- Withdraw consent at any time, including for cookies and marketing.
Email hey@vaultedcards.uk to exercise any of these. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Security
The site is served over HTTPS. Access to order and consignment records is limited to the two of us, protected by strong passwords and two-factor authentication where the provider supports it.
9. Children
This site is not aimed at children under 13. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes
We may update this policy from time to time. The date at the top shows when it was last revised.
