Privacy Policy

Jordi José Medina Palau, NIF 07104240T, Carrer de Collblanc 102 bis, 5.º, 08028 Barcelona, España, trading as JPCARDHIT. Privacy contact: privacidad@jpcardhit.com.

• Contact and request data to answer enquiries and source products.
• Identification, order, delivery and payment references to perform purchases.
• Collection descriptions, photos, grading numbers and ownership information to evaluate items offered to us.
• Technical and security information necessary to operate and defend the website.

Processing is based, as applicable, on steps requested before a contract, performance of a contract, compliance with tax, accounting, consumer and fraud-prevention obligations, legitimate interests in securing and improving the service, and consent when required for optional communications.

To plan delivery coverage, the site counts browser sessions and checkout interest by country using the country code supplied by our hosting edge. These daily totals do not store IP addresses, names, email addresses or individual browsing histories. Session storage prevents repeated counting during the same browser session.

Data may be shared only as necessary with hosting and email providers, payment processors, carriers, professional advisers, fraud-prevention services and competent authorities. Some providers may process data outside the EEA under an adequacy decision, approved safeguards or another lawful transfer mechanism.

Enquiries and unsuccessful valuations are retained only as reasonably needed for follow-up and dispute prevention. Contract, invoice and transaction records are retained for the periods required by tax, accounting, consumer and anti-fraud law. Data is then deleted or anonymised unless a claim requires preservation.

You may request access, rectification, erasure, restriction, portability or objection, and withdraw consent without affecting prior lawful processing. Write to privacidad@jpcardhit.com; identity verification may be requested. You may complain to the Spanish Data Protection Agency (AEPD).

The commercial service is directed to adults. Do not send another person's personal data, identification or photographs unless authorised and necessary. Do not include payment-card data in ordinary email.