Effective Date: September 24, 2026 · Updated September 29, 2026 (Children's Privacy) · The Collectibles Exchange Inc.
This Privacy Policy describes how we collect, use, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
1. Who We Are
The Collectibles Exchange Inc. is the data controller for personal information collected through https://thecollectiblesexchange.com. Our Privacy Officer can be reached at privacy@thecollectiblesexchange.com or 10-6175 Highway 7, Vaughan, Ontario, L4H 0P6, Canada.
Payment: billing address (card data processed by Stripe — we do not store card numbers)
Information Collected Automatically
IP address and approximate location
Browser, operating system, device type
Pages visited, time spent, clicks
Session identifiers (stored in a secure, HttpOnly cookie)
3. How We Use Your Information
To create and manage your account
To facilitate transactions, breaks, CardShare offerings, and vault operations
To process payments via Stripe
To send transactional notifications (order confirmations, break results, shipping updates)
To send marketing emails where you have consented (opt out at any time)
To detect and prevent fraud and security threats
To comply with legal obligations
To improve the platform using aggregated, anonymized analytics
4. Sharing Your Information
We do not sell your personal information. We share it only with:
Stripe — payment processing
Microsoft Azure — cloud hosting and storage (Canadian/US regions)
SendGrid — email delivery
Sentry — anonymized error monitoring
Google Analytics — page and visit statistics, with your IP address anonymised
Mouseflow — session recording, which replays how a page was used. Only if you have said yes; it is off until you do, and you can turn it back off at any time. See the Cookie Policy
EasyPost and Canada Post — shipping rates and labels, which requires the delivery address
PriceCharting — market price lookups. We send the card’s details, never anything about you
Other users — your display name and listing/storefront information as required to complete transactions
Law enforcement — where required by law or court order
5. Your Rights Under PIPEDA
Access: request a copy of the personal information we hold
Correction: request correction of inaccurate data
Withdrawal of consent: withdraw consent for non-essential processing
Deletion: request deletion of your account and data, subject to legal retention obligations
Complaint: file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca
We retain personal information for as long as your account is active and for a reasonable period thereafter. Transaction records are retained for a minimum of 7 years as required by Canadian financial record-keeping requirements.
7. Security
We use TLS encryption in transit, encrypted storage, role-based access controls, and conduct regular security audits. No method of transmission over the internet is 100% secure.
Accounts are open to people aged 13 and over. We do not knowingly collect personal information from children under 13, and will delete it if we discover it. For users aged 13 to 17 we use the date of birth given at sign-up to apply the rules for under-18 accounts. A parent or guardian who links to an under-18 account can see that account's name and age and manage its selling permission, and, if they choose to receive its payouts, the sale proceeds are paid to them.
10. International Transfers
Data may be processed in the United States by Azure and Stripe, subject to appropriate safeguards. By using the platform, you consent to this transfer.
11. Changes
We will notify you of material changes by email and platform notification with at least 14 days' notice.
12. Contact Our Privacy Officer
The Collectibles Exchange Inc. — Attention: Privacy Officer 10-6175 Highway 7, Vaughan, Ontario, L4H 0P6, Canada privacy@thecollectiblesexchange.com