Privacy policy.

When you create an account or submit a quote, we collect your name, email address, and address details. When you accept a quote, we also collect your bank account details (account name, sort code, account number) so we can pay you, and photos you upload for photo quotes. We collect information about the cards you sell (game, type, quantity, condition) to process your quote.

We use your information to: price and process quotes, generate shipping labels, pay you by bank transfer, communicate about your sends, and improve our service. We'll only send marketing updates if you opt in, and you can opt out anytime.

We don't sell your data. We share information only with the processors needed to run the service: Wise (paying you by bank transfer), Resend (sending transactional emails), Google Analytics (anonymised usage statistics, only with your consent), and Supabase/Vercel (database and hosting). Each receives only the data needed for its job.

All data is encrypted in transit (TLS) and at rest. Your bank details (sort code and account number) are additionally encrypted at the application level with a key that is not stored in our database, so they cannot be read from the database alone. Access is further restricted by row-level security — only you and authorised staff can retrieve them, and they're used solely to send your payout. Photo uploads live in private storage only you and our verification team can access.

Under UK GDPR, you can request access to, correction of, or deletion of your personal data at any time. Email privacy@webuybulk.cards and we'll respond within 30 days.

We use essential cookies for authentication and session management — these are always on. With your consent, we also use Google Analytics to understand how the site is used; those cookies are only set after you accept in the cookie banner, and you can decline. We use no advertising or third-party marketing cookies.

We keep your account data for as long as your account is active. Quote and transaction history is retained for 6 years for tax and legal compliance. Your bank details are held only while needed to pay you — they're automatically deleted after 12 months of inactivity, or when you close your account. You can request deletion of your account at any time.

We'll email you about any material changes. The current version was last updated June 2026.