Privacy Policy

This policy explains what personal information Collectors Tools (“we”, “us”) collects when you use this website, how we use it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

We are the data controller for the information described below. You can contact us about anything in this policy at privacy@collectorstools.com.

What we collect

We only collect information that we need to run the service.

• Account information. Your email address and a securely hashed password. Optionally, a display name, public handle, country, preferred currency, social handles, and a profile photo.
• Collection content. The tickets, photos, notes, and stories you add to your collection. You choose which items are public.
• Messages and offers. If you send an offer or message another collector through the site, we store the content so we can deliver it and keep a record.
• Technical information. Standard server logs (such as IP address, browser type, and the pages you request) are recorded by our hosting infrastructure for security, debugging, and abuse prevention.
• Anonymous usage statistics. We measure aggregate page views and performance to improve the site. This does not use cookies and does not identify you.

We do not collect payment card details. We do not knowingly collect information from children under 13.

Why we use it (and our legal basis)

• To provide the service you’ve asked for. Creating your account, showing your collection, delivering messages and offers, sending transactional emails such as sign-up confirmation and password resets. Legal basis: performance of a contract with you.
• To keep the service secure and reliable. Preventing fraud, abuse, and downtime; investigating issues; keeping backups. Legal basis: our legitimate interests in running a safe and stable service.
• To improve the site. Understanding which pages are used and how they perform. Legal basis: our legitimate interests in improving the product, using anonymous data only.
• To meet our legal obligations.Where we’re required to retain or disclose information by law. Legal basis: legal obligation.

Who we share it with

We do not sell your personal information and we do not share it for advertising. We use a small number of trusted service providers to operate the site. They only process your information on our instructions, and only to the extent needed to deliver the service.

• A hosting and infrastructure provider, to serve the website.
• A database and authentication provider, to store your account and content.
• An email delivery provider, to send transactional emails such as sign-up and password reset.
• An image-processing provider, used on demand when you choose to use a feature that analyses a photo you upload.

We may also disclose information where we’re legally required to, or where it’s necessary to protect our rights, our users, or the public.

Public profiles

Your profile is private by default. If you choose a public handle, the information on your public profile (your handle, display name, country flag, profile photo, any social handles you add, and any collection items you mark as public) becomes visible to anyone on the internet. You can remove your handle at any time to make your profile unlisted, or delete public items individually.

Where your information is stored

Some of our service providers store and process information outside the UK, including in the European Economic Area and the United States. Where information is transferred outside the UK, we rely on lawful safeguards such as the UK’s adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep your account and the content you’ve added for as long as your account is active. If you ask us to delete your account, we will delete or anonymise your personal information within a reasonable period, except where we’re required to keep limited records to comply with legal obligations, resolve disputes, or enforce our terms. Server logs are kept for a short period for security and debugging.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that’s inaccurate or out of date.
• Ask us to delete your information (the “right to be forgotten”).
• Ask us to restrict how we use your information.
• Object to processing based on our legitimate interests.
• Ask for a portable copy of the information you’ve given us.
• Withdraw any consent you’ve given, at any time.

To exercise any of these rights, email privacy@collectorstools.com. We’ll respond within one month.

If you’re unhappy with how we’ve handled your information, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We’d appreciate the chance to address your concerns first.

Cookies

We only use cookies that are strictly necessary to keep you signed in. For details, see our Cookies Policy.

Changes to this policy

If we make material changes, we’ll update the date at the top of this page and, where appropriate, let you know by email or through the site.