Information We Collect
We collect information that you provide directly and information collected automatically. This includes:
- Contact and Account Data: Your name, email, billing and shipping address, phone number, account credentials and preferences.
- Payment and Transaction Data: Payment methods (credit card or PayPal details) and purchase/submission history (orders placed, services requested). Payment details are collected by our secure processor (we do not store full card numbers).
- Card Submission Details: Information about the cards you submit – descriptions, condition, prior grades, estimated value, and photographs/images of the cards. When we receive your cards for grading, we may record additional details (photos, condition notes, certification numbers, etc.).
- Device and Usage Data: Technical data from your device/browser (IP address, device type, browser) and usage data (pages viewed, interactions) collected via cookies or similar tech.
- Communications: Information from your communications with us (support inquiries, emails, event registrations), including any content you submit.
We may also obtain information from third parties (e.g. identity verification services, publicly available sources) to verify your information or assess collectibles. In all cases, providing this information is voluntary but may be necessary for certain services; if you withhold it, we may be unable to provide some services.
How We Use Your Information
We process personal information for purposes including:
- Service Delivery: To operate and provide our grading and authentication services. This includes receiving, storing, authenticating and grading your cards, shipping them back to you, facilitating any transactions, and managing your account.
- Communication and Support: To contact you about your orders or inquiries (via email or phone), send confirmations and updates, and respond to requests.
- Fraud Prevention and Security: To verify identities, detect and prevent fraudulent or unauthorized activities, and protect the integrity of our services.
- Analytics and Improvement: To analyze and improve our services, website functionality, and business operations (e.g. tracking performance, understanding usage patterns).
- Marketing (with Consent): To send you promotional offers, newsletters, or interest-based marketing if you have opted in. You may unsubscribe from marketing emails at any time via the “Unsubscribe” link or by contacting us.
- Legal Compliance: To comply with legal obligations (e.g. tax record keeping), enforce contracts, and respond to legal requests (court orders, subpoenas).
- Business Operations: Any other purpose notified to you or to which you consent.
Legal Bases for Processing
While Rise Grading is U.S.-based (and not primarily subject to EU law), when required we rely on lawful bases similar to GDPR principles. We process data under the basis of contract performance (necessary to deliver our services and fulfill orders), legitimate interests (e.g. fraud prevention, improving our services, analytics) and consent (for optional activities like marketing emails). You consent to this processing by using our services and agreeing to this policy (e.g. “by accessing or using our Services, you consent to the terms of this Privacy Notice”). Where required by law, we will also comply with legal obligations (e.g. financial record keeping).
Data Sharing and Disclosure
We share personal information only as needed:
- Service Providers and Partners: With trusted third parties who perform services on our behalf, such as shipping carriers (to deliver graded cards), payment processors (to charge your card), authentication partners/labs (if needed for verification), IT and hosting providers, and marketing/analytics platforms. These parties are authorized to use your data only as needed to provide these services and are contractually bound to protect your information.
- Affiliates: With our corporate affiliates and subsidiaries for internal business purposes (account management, support, analytics).
- Legal and Compliance: When required by law or to protect rights, we may share data with law enforcement or regulators (e.g. responding to subpoenas or fraud investigations). We may also disclose data in connection with legal claims or to enforce our policies.
- Business Transactions: In the event Rise Grading (or its assets) is acquired or merged, user data may be transferred to the new owner – we will notify you and your rights in that event.
- User-Directed Sharing: With your consent or at your direction (for example, if you choose to share your collectible listings on a public forum, or if you authorize a third party to act on your behalf).
We do not sell your personal information to advertisers. We also avoid “targeted advertising” sharing under CPRA standards, though we may use ad networks to display Rise Grading content; you can opt out of interest-based advertising if you wish.
Cookies and Tracking
Rise Grading uses cookies and similar technologies to operate our website and analyze traffic. We employ:
- Essential Cookies: Necessary for basic site functions (logins, shopping cart, security).
- Performance/Analytics Cookies: To collect information about site usage and performance (e.g. Google Analytics).
- Marketing Cookies: To support personalized content or advertising. We do not activate marketing cookies until you consent.
You can manage or disable non-essential cookies via your browser settings or our cookie preference tool. Disabling cookies may limit functionality on our site. For more information, see our Cookie Statement.
Data Retention
We retain personal information only as long as needed to fulfill the purposes outlined above (service delivery, legal compliance, etc.). For example:
- Customer account and order data are generally kept while your account is active and for 3–7 years after last activity (to comply with financial record requirements).
- Grading submission records (including card images) are retained for several years after completion of service (for historical records and customer support).
- Support and communication records are kept for 1–3 years (to help resolve any disputes or inquiries).
- Cookies and logs are kept per typical web practices (session cookies expire when you close your browser; analytics data is stored up to 24 months).
Exact retention periods depend on statutory obligations (e.g. tax laws may require 7 years of financial records) and our business needs; in all cases we limit storage to what is strictly necessary.
Security Measures
We implement industry-standard administrative, technical, and physical safeguards to protect personal data. This includes encryption of sensitive data in transit (SSL/TLS) and at rest, firewalls, access controls, and employee training on data security. Only authorized personnel who need data to perform their job have access. However, no system can be 100% secure; in the event of a data breach, we will notify affected users as required by law.
International Data Transfers
Rise Grading is based in the United States. If you use our services from outside the U.S., you consent to the transfer and processing of your information to and in the U.S. as necessary to provide our services. We do not specifically target EU/EEA users; if we do collect data from individuals in countries without “adequacy” decisions, transfers are covered by your consent and by contractual safeguards. We will take reasonable measures (e.g. Standard Contractual Clauses) to ensure your data remains protected during transfers.
Children’s Privacy
Our services are intended for adult collectors (age 18 or older). We do not knowingly collect personal information from children under the age of 18. If a parent or guardian becomes aware that a child has provided us with personal data, please contact us at support@risegrading.com; we will promptly delete such information.
Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal data:
- Access & Portability: You can request a copy of your data or a summary of what we hold about you.
- Correction: You can ask us to correct inaccurate or incomplete information we maintain about you.
- Deletion: You can request deletion of your personal data, subject to legal exceptions (for instance, we may need to retain information to resolve disputes or comply with legal obligations).
- Opt-Out: You have the right to withdraw consent or opt out of certain uses (such as targeted advertising or marketing communications). You may unsubscribe from marketing emails via the link in the email or by emailing us.
- Objection and Restriction: In some cases, you may object to or request restrictions on our processing of your data (e.g., under certain state privacy laws or GDPR).
To exercise these rights, please contact us at support@risegrading.com or use any form provided on our website. We will verify your identity and respond within the timeframes required by applicable law. We will not discriminate against you for exercising your rights.
California and Other State Privacy Rights
If you are a resident of California (or certain other states like Colorado or Virginia), additional rights apply. California’s CPRA grants you the right to know, delete, and correct the personal data we’ve collected about you, and to opt-out of the “sale” or sharing of your data. (Rise Grading does not sell personal information, but does use cookies for targeted ads; California users can disable marketing cookies via our preference center.) Colorado, Connecticut, Virginia, Utah, and other states have similar provisions (for example, rights to access and delete data). We will honor all such state-based requests in accordance with applicable law.
EU GDPR Considerations
Although Rise Grading is U.S.-based and primarily serves U.S. customers, if you are in the European Economic Area or the UK, you may have additional rights under the GDPR. We do not actively market to EU residents or collect data beyond the scope of providing services to existing customers. If any EU personal data is processed, we rely on lawful bases (consent, contract, legitimate interest) and will comply with GDPR standards. Data transfers to the U.S. (where our servers are located) are based on your consent and appropriate safeguards (e.g. Standard Contractual Clauses). EU users have the right to access, rectification, erasure, and other rights under Articles 15–21 of the GDPR, which we will honor as required.
Cookies and Opt-Out
You can control cookies as noted above. You may also choose to opt out of interest-based ads via your browser or by visiting opt-out tools like youradchoices.com or networkadvertising.org. We do not respond to browser “Do Not Track” signals at this time.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will post the revised policy with a new “Effective Date”. Your continued use of our services after changes are posted signifies your acceptance of the updated policy.
Contact Us
For privacy-related questions, requests, or complaints, please email support@risegrading.com or write to our Privacy Officer at Rise Grading, Inc. We are committed to addressing all inquiries and will respond in accordance with applicable law. If you believe your data has been processed in violation of your rights, you may lodge a complaint with a supervisory authority or (for California residents) seek recourse as provided by law.