Privacy Policy

Last updated 26 May 2026

This policy explains how CALIBRE collects, uses, and protects your personal data when you use our website and grading service, in line with UK GDPR and the Data Protection Act 2018.

1. Who we are

CALIBRE is a trading name of Hivecore Ltd ("CALIBRE", "we", "us", "our"), a company registered in England and Wales (company number 15863097), registered office 58 Masons Bridge Road, Redhill, RH1 5LE. We are the data controller for the personal data described below. Contact: hello@calibregrading.co.uk.

2. The data we collect

• Identity & contact: your name, email address, postal/shipping address, and phone number.
• Order & submission data: the cards you submit, services selected, tracking numbers, and order history.
• Payment data: processed directly by Stripe. We do not store your card numbers; we receive confirmation of payment and limited details (e.g. the email you used at checkout).
• Technical data: IP address and server logs, used for security and to operate the site.
• Analytics data: if you consent, Google Analytics collects usage data (see our Cookie Policy).

3. How and why we use it (lawful bases)

Purpose	Lawful basis
Providing the grading service, processing orders, arranging postage, returning your cards	Performance of a contract
Taking payment and preventing fraud	Contract / legitimate interests
Customer support and service-related emails	Contract / legitimate interests
Site security, logging, and abuse prevention	Legitimate interests
Analytics and any marketing emails	Consent (withdrawable at any time)
Meeting legal, tax, and accounting obligations	Legal obligation

4. Who we share it with

We use trusted processors to run the service; they only process data on our instructions:

• Stripe — payment processing.
• Royal Mail / ShipStation — postage labels and tracking (name and address on the label).
• Amazon Web Services — hosting and storage (UK/EU region).
• Google Analytics — usage analytics, only with your consent.

We do not sell your personal data. We may disclose data where required by law.

5. International transfers

We aim to keep data in the UK/EEA. Where a processor (e.g. Stripe or Google) transfers data outside the UK, it is protected by appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement.

6. How long we keep it

We keep order and grading records for as long as needed to provide the service and to meet legal/accounting obligations (generally up to 6 years for financial records). Analytics data is retained per Google Analytics settings. We delete or anonymise data when it is no longer needed.

7. Your rights

Under UK GDPR you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and withdraw consent at any time. To exercise any of these, email hello@calibregrading.co.uk.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We use technical and organisational measures (encryption in transit, access controls, reputable processors) to protect your data. No method is perfectly secure, but we take protection seriously.

9. Changes

We may update this policy; the "last updated" date shows the latest version. Material changes will be highlighted on the site.