Privacy Policy

1. Who we are

Shinyverse P.C. (“we”, “us”, “our”) operates this website and provides trading card marketplace and related services, including card grading and TCG sales. We are committed to protecting your privacy and handling your personal data responsibly in compliance with the GDPR and Greek Law 4624/2019.

2. Information we collect

• Account data: Name, Email, Password (securely hashed and inaccessible), and profile preferences.
• Order data: Billing and shipping address, items purchased, transaction totals, payment confirmation, and shipping details. We do not store credit or debit card numbers.
• Uploads: Photos or images you submit (e.g., cards for AI grading or sale listings).
• Usage data: Logs, device information, browser type, IP address, and cookies used for authentication, analytics, and security.
• Communication data: Messages or inquiries sent via forms, email, or social media.

3. How we use your data

• To process and fulfill your orders and payments.
• To manage your account, preferences, and customer experience.
• To provide AI grading and card marketplace features.
• To prevent fraud, protect security, and comply with tax and legal obligations.
• To send marketing communications only with your explicit consent (you may opt out at any time).

4. Legal bases for processing

• Contract: processing orders, payments, and services you request.
• Legal obligation: accounting, invoicing, and consumer protection laws.
• Legitimate interests: fraud prevention, service improvement, and website security.
• Consent: newsletters, promotions, and optional cookies (which you may withdraw anytime).

5. Data sharing

We do not sell or rent personal data. We only share it when necessary with:

• Payment processors (e.g., Stripe, PayPal) for secure payment handling.
• Shipping partners (e.g., FedEx, DHL, ELTA) to deliver your orders.
• Analytics and hosting providers under GDPR-compliant agreements.
• Accountants and legal advisors for tax and regulatory compliance.
• Authorities if required by law, court order, or tax inspection.

6. Cookies

We use cookies and similar technologies to make our site function properly, enhance security, and improve performance.

• Essential cookies: required for authentication, checkout, and site security.
• Analytics cookies: collect anonymous usage statistics to improve services.
• Marketing cookies: used with your consent for personalized promotions.

You can disable or adjust cookies through your browser settings or our cookie banner.

7. Data retention & security

We retain data only as long as necessary to fulfill the purposes described above and to meet legal requirements:

• Order records: up to 7 years (per Greek tax law).
• User accounts: while active, and up to 2 years after last activity.
• Marketing subscriptions: until you unsubscribe.

All personal data is stored securely using encryption (HTTPS/TLS), limited access, and firewall protection. Passwords are stored as cryptographic hashes.

8. International transfers

If data is transferred outside the EU/EEA, we ensure protection through EU-approved safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Your rights

Under the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete information.
• Request deletion (“right to be forgotten”).
• Restrict or object to data processing.
• Request data portability (receive your data in machine-readable format).
• Withdraw consent at any time (without affecting prior lawful processing).

To exercise your rights, email us at info@shinyverse.eu. We may require identity verification.

If you believe your data rights have been violated, you may contact the Hellenic Data Protection Authority (HDPA).

10. Data breaches

In case of a personal data breach, we will notify the HDPA and affected users within 72 hours, as required by law, and take all necessary remedial measures.

11. Children’s privacy

Our website and services are not intended for users under 16 years old. We do not knowingly collect data from minors. If you believe we hold such data, please contact us for immediate removal.

12. Third-party links

Our website may contain links to external websites (e.g., social media, affiliate stores). We are not responsible for their content or privacy practices—please review their policies before providing any information.

13. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new “Last updated” date. Continued use of the site after updates indicates acceptance of the revised policy.

14. Contact

For questions, privacy concerns, or data requests, please contact:
Shinyverse P.C.
Email: info@shinyverse.eu
Address: Agathoupoleos 8, 11257, Athens, Greece