Privacy Policy
Effective Date: 24 January 2025
ConceptCity ("we", "us", or "our") is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.
1. Information We Collect
We collect the following types of personal data:
- Account Information: When you sign in using Google OAuth, we receive your email address and display name from Google.
- Contact Information: Your phone number, which you may provide for order updates and communication.
- Submission Data: Information about your trading card grading submissions, including card details, grading company preferences, and submission status.
- Photos: Images of your trading cards that you upload for grading submissions.
- Transaction Records: Records of your orders and payment history.
2. How We Use Your Information
We use your personal data for the following purposes:
- To create and manage your account
- To process and track your grading submissions
- To communicate with you about your orders and submission status
- To provide customer support
- To improve our services
- To comply with legal obligations
3. Data Sharing
We may share your personal data with the following parties:
- Google: We use Google OAuth for authentication. Your use of Google services is subject to Google's Privacy Policy.
- Grading Companies: When you submit cards for grading, we share necessary information (such as card details) with the relevant grading companies (PSA, BGS, CGC and TAG) to facilitate the grading process.
- Service Providers: We may use third-party service providers who assist us in operating our business, subject to confidentiality obligations.
We do not sell your personal data to third parties.
4. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When your data is no longer needed, we will securely delete or anonymize it.
5. Your Rights Under PDPA
Under the PDPA, you have the following rights regarding your personal data:
- Access: You may request access to your personal data that we hold.
- Correction: You may request correction of any inaccurate or incomplete personal data.
- Deletion: You may request deletion of your personal data, subject to legal and business requirements.
- Withdrawal of Consent: You may withdraw your consent for us to collect, use, or disclose your personal data at any time. Please note that this may affect our ability to provide services to you.
To exercise any of these rights, please contact us using the details below.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
7. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights under the PDPA, please contact us:
8. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we protect your data.