Privacy Policy

Pedigree Coins · pedigreecoins.com

Effective Date: May 26, 2026 · Last Updated: May 26, 2026

1. Introduction

Pedigree Coins (“Pedigree Coins,” “we,” “us,” or “our”) operates an online marketplace at pedigreecoins.com (the “Site”) that connects buyers and sellers of collectible coins. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information about visitors, account holders, buyers, and sellers (collectively, “you” or “Users”).

This Policy is designed to comply with applicable privacy laws, including:

  • The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA/CPRA”);
  • Privacy laws of all 50 U.S. states with comprehensive consumer privacy statutes in force or coming into effect, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Indiana (INCDPA), Tennessee (TIPA), Delaware (DPDPA), New Hampshire (NHDPA), New Jersey (NJDPA), Maryland (MODPA), Minnesota (MCDPA), Rhode Island (RIDTPPA), Nebraska (NDPA), Kentucky (KCDPA), and others as they take effect;
  • The EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”);
  • The UK General Data Protection Regulation and the Data Protection Act 2018 (“UK GDPR”);
  • The Personal Information Protection and Electronic Documents Act (Canada) (“PIPEDA”) and applicable provincial laws;
  • Brazil’s Lei Geral de Proteção de Dados (“LGPD”);
  • The Children’s Online Privacy Protection Act (“COPPA”); and
  • Other applicable federal, state, and international laws.

By accessing or using the Site, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the Site.

2. Scope

This Policy applies to personal information we collect:

  • through the Site and any subdomains;
  • through buyer and seller accounts on our marketplace;
  • through customer-support communications (email, chat, forms); and
  • through our use of analytics and similar technologies on the Site.

This Policy does not apply to third-party sites or services (including individual sellers’ off-platform communications), even if linked from the Site. Their privacy practices are governed by their own policies.

3. Information We Collect

We collect personal information in the following categories. The specific information collected depends on how you interact with the Site.

3.1 Information You Provide Directly

  • Account information: name, email address, username, password (hashed), and account preferences.
  • Buyer information: shipping address, billing address, order history, and communications with sellers.
  • Seller information: display name, listings, payout details (handled by Stripe, see Section 3.3), tax-related information required for marketplace operation, and seller communications.
  • Customer-support content: the contents of emails, support tickets, and any attachments you choose to share.
  • Marketing preferences: your subscription status for newsletters and promotional communications.

3.2 Information Collected Automatically

When you visit or interact with the Site, we and our service providers automatically collect:

  • Device and connection data: IP address, device identifiers, browser type and version, operating system, and language preferences.
  • Usage data: pages visited, referring/exit pages, time spent on pages, clickstream data, and search queries on the Site.
  • Cookies and similar technologies: see Section 7 below.
  • Approximate location: derived from IP address.

3.3 Information Collected Through Stripe (KYC, KYB, and Payments)

We use Stripe, Inc. (“Stripe”) as our payment processor and to perform Know-Your-Customer (“KYC”) and Know-Your-Business (“KYB”) verification for sellers and to link seller bank accounts for payouts.

When you transact on the marketplace or onboard as a seller, Stripe directly collects information such as:

  • Full legal name, date of birth, residential address, and government-issued identification;
  • Business name, business address, EIN/tax ID, and beneficial-ownership information (for sellers operating as businesses);
  • Bank account and routing information for payouts;
  • Payment-card details for buyers (we do not store full card numbers on our servers); and
  • Other information required for Stripe’s identity verification and anti-fraud obligations.

This information is collected and processed by Stripe under Stripe’s own privacy practices, available at https://stripe.com/privacy. We receive limited verification status and tokenized payment references from Stripe; we do not receive your full government ID or full bank account numbers.

3.4 Information from Third Parties

We may receive information about you from:

  • Stripe, with respect to identity-verification outcomes and payment status;
  • Analytics providers (e.g., Google Analytics) regarding aggregate or pseudonymous Site usage;
  • Fraud-prevention providers;
  • Sellers or buyers with whom you have transacted, in the context of dispute resolution; and
  • Publicly available sources, where lawful.

3.5 Categories of Personal Information Under the CCPA/CPRA

For California residents, the categories of personal information we have collected in the preceding 12 months are:

CCPA CategoryExamplesCollected
IdentifiersName, email, IP address, account IDYes
Customer records (Cal. Civ. Code §1798.80(e))Name, address, payment info (via Stripe)Yes
Protected classificationsAge, gender, national originNo (not intentionally)
Commercial informationPurchase history, listings, transaction dataYes
Biometric informationN/ANo
Internet/network activityBrowsing history on the Site, interactions with adsYes
GeolocationApproximate (from IP)Yes
Sensory dataN/ANo
Professional/employmentN/ANo
Education informationN/ANo
Inferences from the aboveUser preferences, likely interestsYes (limited)
Sensitive personal informationGovernment ID via Stripe (we do not retain full ID)Limited

We do not knowingly collect personal information from individuals under 16 years of age.

4. How We Use Personal Information (Purposes of Processing)

We use personal information for the following purposes:

  • Operating the marketplace: creating and managing accounts, listing items, facilitating transactions between buyers and sellers, processing payments via Stripe, and arranging shipping.
  • Identity verification & fraud prevention: through Stripe’s KYC/KYB processes and our own anti-fraud tooling.
  • Customer support: responding to inquiries, resolving disputes, and providing service updates.
  • Site improvement & analytics: understanding how the Site is used, diagnosing technical issues, and improving features (using tools such as Google Analytics).
  • Communications: sending transactional emails (order confirmations, shipping updates, account notices) and, where permitted, marketing communications.
  • Legal compliance: meeting our obligations under tax, AML/BSA, consumer protection, and other applicable laws, and responding to lawful requests.
  • Security: protecting the Site, our Users, and third parties from fraud, abuse, and unauthorized access.
  • Enforcement: enforcing our Terms of Service and other agreements.

4.1 Legal Bases for Processing (GDPR / UK GDPR)

For Users in the EEA, UK, or Switzerland, we rely on the following legal bases under Article 6 GDPR:

  • Contract performance (Art. 6(1)(b)), to provide the marketplace, fulfill transactions, and operate accounts.
  • Legal obligation (Art. 6(1)(c)), to comply with tax, AML, consumer-protection, and similar laws.
  • Legitimate interests (Art. 6(1)(f)), to prevent fraud, secure the Site, improve our services, and conduct limited marketing. Where we rely on legitimate interests, we balance these against your rights and freedoms.
  • Consent (Art. 6(1)(a)), for non-essential cookies, certain marketing communications, and any other processing where consent is required. You may withdraw consent at any time.

We do not process Special Categories of Personal Data under Article 9 GDPR. Identity documents handled by Stripe are processed by Stripe as a separate controller for AML/KYC purposes.

5. How We Disclose Personal Information

We disclose personal information only as described below. We do not sell personal information for monetary consideration. Some sharing of cookie- and analytics-related identifiers with providers such as Google Analytics may be considered a “sale” or “share” under the broad definitions in the CCPA/CPRA and certain other state privacy laws; we treat this transparently and provide opt-out rights (see Section 10).

5.1 Service Providers / Processors

We share personal information with vendors that process data on our behalf under contractual safeguards, including:

  • Stripe, Inc.: payment processing, KYC/KYB, payouts, and fraud prevention;
  • Hosting and infrastructure providers;
  • Email delivery providers (transactional and marketing email);
  • Analytics providers (e.g., Google Analytics);
  • Customer-support tooling;
  • Security, anti-fraud, and logging providers.

5.2 Other Marketplace Users

When you transact on the marketplace, we share information necessary to complete the transaction:

  • Buyers receive the seller’s display name and the shipping interface required to receive the item.
  • Sellers receive the buyer’s shipping name, address, and order details.

We do not share buyer/seller payment details directly; these are handled via Stripe.

5.3 Legal, Regulatory, and Safety Disclosures

We may disclose personal information when we believe in good faith that disclosure is necessary to:

  • comply with applicable law, legal process, or governmental request (including from law enforcement);
  • enforce our Terms of Service;
  • detect, prevent, or address fraud, security, or technical issues; or
  • protect the rights, property, or safety of Pedigree Coins, our Users, or others.

5.4 Business Transfers

If Pedigree Coins is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections.

5.5 With Your Consent

We may disclose personal information for any other purpose with your consent.

6. International Data Transfers

Pedigree Coins is based in the United States. If you access the Site from outside the United States, your personal information will be transferred to, stored, and processed in the United States and other jurisdictions where our service providers operate.

For transfers from the EEA, UK, or Switzerland, we rely on:

  • Standard Contractual Clauses approved by the European Commission (and the UK Addendum, where applicable);
  • the adequacy decisions issued by the European Commission, where applicable;
  • other lawful transfer mechanisms as required.

You may request a copy of the safeguards in place by contacting us at the address in Section 13.

7. Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to operate the Site, remember your preferences, analyze traffic, and (where you consent) support marketing.

7.1 Categories of Cookies

  • Strictly necessary cookies: required for the Site to function (e.g., session management, security). These do not require consent.
  • Analytics cookies: help us understand how Users interact with the Site (e.g., Google Analytics). Set only where permitted by your consent choices.
  • Functional cookies: remember preferences such as language or display settings.
  • Marketing/advertising cookies: used for remarketing or measuring marketing performance. Set only with your consent.

7.2 Managing Cookies

You can manage cookie preferences at any time via the cookie preference center on the Site (the “Cookie Settings” link in the Site footer or the banner shown on your first visit). You can also block or delete cookies through your browser settings.

We honor Global Privacy Control (GPC) signals as a request to opt out of the “sale” or “sharing” of personal information under applicable state laws.

8. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. Our standard retention schedule is:

  • Active accounts: retained while the account remains active.
  • Inactive accounts: retained for 3 years from last activity, then deleted or anonymized, unless a longer retention period is legally required.
  • Transaction and financial records: retained for 7 years to comply with tax, accounting, and AML obligations.
  • KYC/KYB records (held by Stripe): retained by Stripe in accordance with Stripe’s policies and applicable AML laws (typically at least 5 years after the end of the customer relationship).
  • Customer-support communications: retained for 3 years after resolution.
  • Marketing data: retained until you withdraw consent or unsubscribe.
  • Analytics data: retained per the analytics provider’s configured retention (typically 14 to 26 months for Google Analytics).
  • Backups and disaster-recovery copies: retained on rolling schedules and deleted in the ordinary course.

When the retention period expires, we delete, aggregate, or anonymize the data.

9. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information. We honor these rights for all users regardless of jurisdiction, to the extent reasonably practicable.

9.1 Rights Available to All Users

  • Access: request a copy of the personal information we hold about you.
  • Correction: request that inaccurate or incomplete information be corrected.
  • Deletion: request that we delete your personal information, subject to legal exceptions.
  • Portability: request a copy of certain information in a structured, machine-readable format.
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time.
  • Object / restrict: object to, or request restriction of, certain processing.
  • Unsubscribe: opt out of marketing communications at any time using the unsubscribe link.

9.2 Additional Rights for U.S. State Residents (CCPA/CPRA and Equivalents)

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, Delaware, New Hampshire, New Jersey, Maryland, Minnesota, Rhode Island, Nebraska, Kentucky, or any other U.S. state with comprehensive consumer privacy legislation, you may have the following additional rights:

  • Right to know the categories and specific pieces of personal information collected, the sources, the purposes, and the categories of third parties to whom it is disclosed.
  • Right to delete personal information we have collected (subject to exceptions).
  • Right to correct inaccurate personal information.
  • Right to opt out of “sale” or “sharing” of personal information, including for cross-context behavioral advertising. You can exercise this right by using the “Do Not Sell or Share My Personal Information” link in the Site footer, by adjusting cookie settings, or by sending a Global Privacy Control signal.
  • Right to limit use of sensitive personal information (CPRA).
  • Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
  • Right to opt out of profiling that produces legal or similarly significant effects (where applicable under your state’s law).
  • Right to appeal: if we decline to act on your request, you may appeal that decision by replying to our response or contacting us at the address in Section 13.

We retain the categories listed in Section 3.5 for the periods described in Section 8. In the preceding 12 months, we have:

  • Collected the categories of personal information listed in Section 3.5;
  • Disclosed for a business purpose identifiers, customer records, commercial information, internet activity, geolocation, and inferences, to the service providers listed in Section 5.1;
  • “Sold” or “Shared” (as broadly defined): we do not sell personal information for monetary value; however, our use of analytics and similar technologies (such as Google Analytics) may involve “sharing” of identifiers under the CCPA/CPRA’s broad definitions. You can opt out via the cookie preference center.

9.3 Rights for Users in the EEA, UK, and Switzerland (GDPR / UK GDPR)

In addition to the rights above, you have the right to:

  • Lodge a complaint with your local supervisory authority (for the UK, the ICO; for EEA Member States, your national Data Protection Authority).
  • Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

We do not currently engage in automated decision-making that produces legal or similarly significant effects on you.

9.4 How to Exercise Your Rights

Submit a request by emailing us at privacy@pedigreecoins.com or writing to us at the postal address in Section 13. Include enough information for us to identify you and locate your data. We may need to verify your identity before fulfilling the request.

You may use an authorized agent to submit a request on your behalf where permitted by law. We may require proof of authorization.

We will respond within the timeframes required by applicable law (generally 45 days under U.S. state laws, with one extension permitted, and 1 month under GDPR/UK GDPR, with up to a 2-month extension for complex requests).

10. Opt-Out of “Sale” or “Sharing” / Targeted Advertising

While we do not sell personal information for monetary consideration, we treat our use of certain analytics and similar technologies transparently as potential “sharing” under the broad definitions of the CCPA/CPRA and similar U.S. state laws.

You can opt out at any time by:

  • clicking the “Do Not Sell or Share My Personal Information” link in the Site footer;
  • adjusting your preferences in the Cookie Settings;
  • sending a Global Privacy Control (GPC) browser signal, which we will recognize as an opt-out request; or
  • emailing us at privacy@pedigreecoins.com.

Opt-outs are processed for the specific browser/device used. You may need to repeat the opt-out across devices and browsers.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), restricted access controls, secure password storage (hashing with industry-standard algorithms), logging and monitoring, and use of reputable service providers (including Stripe for payment and KYC data).

No system is perfectly secure. If you believe your account has been compromised, contact us at privacy@pedigreecoins.com immediately.

12. Children's Privacy

The Site is not directed to, and we do not knowingly collect personal information from, children under the age of 16. If you believe a child under 16 has provided personal information to us, please contact us at privacy@pedigreecoins.com and we will take appropriate steps to delete it. Where applicable, we comply with the Children’s Online Privacy Protection Act (“COPPA”) and equivalent international laws.

13. Contact Us

For questions about this Policy, to exercise your rights, or to submit a complaint, contact us at:

Pedigree Coins

Attn: Privacy

111 Quad Dr.

Easton, PA 18042

United States

Email: privacy@pedigreecoins.com

13.1 EU/UK Representative

Pedigree Coins has not appointed an EU representative under Article 27 GDPR or a UK representative under Article 27 UK GDPR. If our processing activities trigger the requirement to appoint such a representative, we will update this Policy and provide their contact details here. EEA and UK Users may contact us at the email above in the meantime.

13.2 Data Protection Officer

Pedigree Coins is not required to appoint a Data Protection Officer under Article 37 GDPR. Privacy inquiries are handled by the contact above.

14. Notice to California Residents: “Shine the Light”

California Civil Code § 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

15. Notice to Nevada Residents

Nevada residents may submit a verified request to opt out of the sale of personal information by contacting privacy@pedigreecoins.com. As stated above, we do not sell personal information as defined under Nevada law.

16. Notice to Residents of Other U.S. States

In addition to California, Virginia, Colorado, Connecticut, and Utah, we honor the substantive rights and obligations of comprehensive privacy laws in the following states (and any others as they come into effect):

Texas, Oregon, Montana, Iowa, Indiana, Tennessee, Delaware, New Hampshire, New Jersey, Maryland, Minnesota, Rhode Island, Nebraska, and Kentucky.

For residents of states without comprehensive privacy laws (e.g., Alabama, Alaska, Arizona, Arkansas, Georgia, Hawaii, Idaho, Illinois, Kansas, Louisiana, Maine, Massachusetts, Michigan, Mississippi, Missouri, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Vermont, Washington, West Virginia, Wisconsin, Wyoming), we voluntarily extend the core rights described in Section 9.1 (access, correction, deletion, portability) and honor opt-outs of marketing and Global Privacy Control signals. Sector-specific state laws (such as Washington’s My Health My Data Act and Illinois’s BIPA) are observed where they apply to our limited processing.

17. Notice to Canadian Residents

We comply with PIPEDA and applicable provincial privacy laws (including Quebec’s Law 25, Alberta’s PIPA, and British Columbia’s PIPA). Canadian residents may exercise rights of access, correction, and withdrawal of consent by contacting us at privacy@pedigreecoins.com.

18. Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes will be communicated via a notice on the Site or by email where appropriate. Your continued use of the Site after the effective date of any revised Policy constitutes acceptance of the changes.

← Back to Pedigree Coins