Data protection
Privacy Policy
How JPCARDHIT uses personal information for enquiries, orders, product sourcing and collection valuations.
Last updated / Última actualización: 2 August 2026
Controller
Jordi José Medina Palau, NIF 07104240T, Carrer de Collblanc 102 bis, 5.º, 08028 Barcelona, España, trading as JPCARDHIT. Privacy contact: privacidad@jpcardhit.com.
Data and purposes
- Contact and request data to answer enquiries and source products.
- Identification, order, delivery and payment references to perform purchases.
- Collection descriptions, photos, grading numbers and ownership information to evaluate items offered to us.
- Technical and security information necessary to operate and defend the website.
Legal bases
Processing is based, as applicable, on steps requested before a contract, performance of a contract, compliance with tax, accounting, consumer and fraud-prevention obligations, legitimate interests in securing and improving the service, and consent when required for optional communications.
Aggregated website activity
The site counts daily browser sessions, page views, checkout interest and approximate visible time by country, including Spain. Only known public page paths are recorded; query strings, form content, IP addresses and individual browsing histories are not stored in these totals. Timing pauses when a tab is hidden and is approximate: a visible tab does not prove attention. Session storage limits repeated session counts within the same browser tab and UTC day.
Recipients and international processing
Data may be shared only as necessary with hosting and email providers, payment processors, carriers, professional advisers, fraud-prevention services and competent authorities. Some providers may process data outside the EEA under an adequacy decision, approved safeguards or another lawful transfer mechanism.
Retention
Enquiries and unsuccessful valuations are retained only as reasonably needed for follow-up and dispute prevention. Contract, invoice and transaction records are retained for the periods required by tax, accounting, consumer and anti-fraud law. Data is then deleted or anonymised unless a claim requires preservation.
Your rights
You may request access, rectification, erasure, restriction, portability or objection, and withdraw consent without affecting prior lawful processing. Write to privacidad@jpcardhit.com; identity verification may be requested. You may complain to the Spanish Data Protection Agency (AEPD).
Minors and third-party data
The commercial service is directed to adults. Do not send another person's personal data, identification or photographs unless authorised and necessary. Do not include payment-card data in ordinary email.
These policies are written for the initial JPCARDHIT operation in Spain and should be reviewed by a qualified Spanish adviser before processing the first live order.
