Privacy Policy

TRADEBASE (PTY) LTD · traderbase.co.za · Last updated 5 June 2026

This Privacy Policy explains how TRADEBASE (PTY) LTD ("Traderbase", "we", "us") collects, uses, shares and protects your personal information when you use the Traderbase marketplace and collection-tracking service at traderbase.co.za and our mobile apps. We process personal information in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).

1. What personal information we collect

We collect only what we need to run a card-only marketplace for physical trading cards:

Category	Examples
Account & identity	Email address, display name, and the Google account identifier if you sign in with Google.
Profile & contact	Phone number (for order coordination), and for sellers your payout bank details.
Shipping	Delivery name, postal/street address and contact number used to fulfil an order.
Listings & content	Photos of cards you list, descriptions, prices, and messages you exchange with other users.
Transactions	Orders, amounts, courier and waybill/tracking numbers, refund and dispute records.
Payment data	Card payments are processed by Paystack. We do not store your full card number — Paystack handles card data and returns only a transaction reference and status to us.
Technical	Device and app data, log data, and local storage used to keep you signed in and remember preferences (e.g. theme).

2. Why we process it and our lawful basis

• To provide the service (create your account, show listings, run checkout, coordinate delivery) — necessary for the performance of our contract with you.
• To take payment and pay out sellers via Paystack — necessary to conclude the transaction you requested.
• To prevent fraud, abuse and counterfeit listings, and to handle disputes and chargebacks — our legitimate interests and compliance with legal obligations.
• To send transactional emails (order receipts, sale notifications, shipping, refund/cancellation notices) — necessary to perform the contract.
• For optional marketing — only with your consent, which you may withdraw at any time.

Where we rely on consent, you can withdraw it at any time without affecting processing already carried out.

3. Who we share it with (operators & third parties)

We do not sell your personal information. We share it only with service providers ("operators" under POPIA) who process it on our behalf under contract, and only as needed:

Provider	Purpose
Firebase / Google Cloud	Authentication, database (Firestore), file storage, hosting and email delivery.
Paystack	Card payment processing and seller payouts.
RevenueCat	In-app subscription / purchase management on mobile (where applicable).
Couriers / delivery partners	We share the buyer's shipping details with the seller so the order can be shipped tracked.

We may also disclose information where required by law, court order, or to protect the rights and safety of users and the public.

4. Other buyers and sellers

Traderbase is a marketplace. When you transact, we share the information needed to complete the deal — for example, a seller receives the buyer's shipping name, address and contact number, and both parties can see messages exchanged about an order. Please share only what is necessary in messages.

5. Cross-border transfers

Some of our providers (Google/Firebase, Paystack, RevenueCat) may process or store data outside South Africa. Where this happens, we rely on the transfer grounds permitted by POPIA, including that the recipient is subject to laws or binding agreements providing comparable protection.

6. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. Card data is handled by Paystack within their PCI-DSS environment. No method of transmission or storage is perfectly secure, but we act promptly on any suspected compromise and will notify you and the Information Regulator where the law requires.

7. Retention

We keep personal information only as long as needed for the purposes above or as required by law (for example, transaction and tax records are kept for the periods required by South African law). When no longer needed, we delete or de-identify it. You can ask us to delete your account; some records linked to completed transactions, disputes or legal obligations may be retained for the required period.

8. Your rights as a data subject

Under POPIA you have the right to:

• Be told what personal information we hold and request access to it;
• Ask us to correct or delete information that is inaccurate, irrelevant, excessive or out of date;
• Object to processing in certain circumstances, and withdraw consent for marketing;
• Not be subject to a decision based solely on automated processing that significantly affects you;
• Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these, contact our Information Officer at support@traderbase.co.za. You may also complain to the Information Regulator at inforeg@inforegulator.org.za.

9. Cookies & local storage

We use browser local storage and similar technologies to keep you signed in, remember preferences such as your theme, and operate the site. These are essential to the service. We do not use them for third-party advertising.

10. Children

Traderbase is intended for users aged 18 and over. We do not knowingly collect personal information from children without the consent of a competent person. If you believe a child has given us information, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date, and notify you of material changes where appropriate.

12. Contact us

Questions or requests about your personal information: support@traderbase.co.za.