Last updated: 14 June 2026
This Privacy Policy explains how GradedTown Limited(NZBN 9429053557452; “GradedTown”, “we”, “us”) collects, uses, stores, and shares your personal information when you use GradedTown. We handle personal information in line with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs).
For any privacy question, or to access or correct your information, contact our Privacy Officer at support@gradedtown.nz. If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Only what's needed to run the marketplace — gathered at the moment it's needed.
Your email address and basic profile (username, display name, avatar) to create your account, sign you in, and send you service messages.
When you redeem a physical card, we verify your identity through a dedicated identity provider to confirm who we are shipping to and to meet anti-fraud and compliance obligations.
Card and payout details are handled by our payment provider. We do not store full card numbers — only a secure token and the minimum needed for receipts, payouts, and refunds.
We use your information to create and run your account; process purchases, sales, and payouts; run the marketplace, trades, the vault, and redemptions; ship redeemed cards; prevent fraud and abuse; meet our legal and tax obligations; and improve the Service. We do not sell your personal information.
We use trusted providers to run parts of the Service and share only the information each one needs:
We may also disclose information where the law requires it, or where reasonably necessary to protect our rights, our users, or the public.
Some of our providers (including Stripe, Supabase, Vercel, and Resend) store and process information outside New Zealand. Where we disclose your information overseas, we take reasonable steps to ensure it is protected by comparable safeguards, consistent with IPP 12.
We use strictly necessary cookies to keep you signed in and to keep the Service secure. We do not use third-party advertising cookies.
We keep your personal information for as long as your account is active and as long as we need it for the purposes above. You can ask us to delete your account and personal information at any time by emailing support@gradedtown.nz. We will delete or anonymise your information, except where we are required to keep certain records — for example transaction, payment, identity, or tax records — to meet legal obligations.
We protect your information with encryption in transit, access controls, and least-privilege handling of sensitive data. No system is completely secure, but if a privacy breach occurs that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected people as required by the Privacy Act 2020.
Under the Privacy Act 2020 you can ask to see the personal information we hold about you and to correct it. To make a request, email our Privacy Officer at support@gradedtown.nz. We will respond within the timeframes the Act requires. You can also complain to the Office of the Privacy Commissioner.
The Service is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we will delete it.
We may update this Privacy Policy from time to time. We will post the updated version here and, if the change is material, give notice through the Service or by email.
See also our Terms of Service and How it works.