Privacy policy

​Last Updated: 16th April 2026

​Welcome to Holy Grail Grading™ ("we", "us", "our"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website (www.holygrailgrading.com) and use our trading card grading services.

​1. Who We Are (Data Controller)

​Holy Grail Grading is the data controller responsible for your personal data.

Registered Address: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom.

Email Address: Sales@holygrailgrading.com

​2. The Data We Collect About You

​To provide our grading services and run our online shop, we may collect, use, and store the following types of personal data:

• ​Identity Data: First name, last name.
• ​Contact Data: Billing address, delivery address, email address, and telephone number.
• ​Transaction Data: Details about payments to and from you, and other details of services you have purchased from us (e.g., order history, declared card values).
• ​Financial Data: Payment card details. (Note: We do not store your full credit card information. Payments are processed securely via our third-party payment gateways).
• ​Technical & Usage Data: Internet protocol (IP) address, browser type, time zone setting, and information about how you use our website.

​3. How We Use Your Personal Data

​Under UK data protection laws, we will only use your personal data when the law allows us to. We use your data for the following purposes:

• ​To Process Your Order: To manage your account, process your payment, and safely return your graded trading cards to your delivery address. (Legal basis: Performance of a contract).
• ​To Provide Customer Support: To notify you about changes to our terms or services, or to answer your inquiries. (Legal basis: Performance of a contract & Legitimate interests).
• ​Digital Vault & Marketing: To publish anonymous grading reports (via QR codes) to our Digital Vault. We do not link your personal name to the public Digital Vault display of any card. If you have opted in, we may send you newsletters or promotional offers. (Legal basis: Consent & Legitimate interests).
• ​Fraud Prevention: To safely administer our site and prevent fraudulent transactions. (Legal basis: Legitimate interests).

​4. Who We Share Your Data With

​We do not sell your personal data. We may share your data with trusted third parties strictly for the purpose of operating our business, including:

• ​Courier & Postal Services: Such as Royal Mail, solely for the purpose of returning your items safely.
• ​Payment Processors: To securely process your checkout transactions.
• ​IT & Website Hosting Providers: Who support the infrastructure of our website and Digital Vault.

​5. Data Security

​We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to employees, contractors, and third parties who have a business need to know.

​6. Data Retention

​We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements (typically 6 years for tax and transaction records in the UK).

​7. Your Legal Rights

​Under UK GDPR, you have the right to:

• ​Request access to your personal data.
• ​Request correction of any incomplete or inaccurate data we hold about you.
• ​Request erasure of your personal data when there is no good reason for us continuing to process it.
• ​Object to processing of your data for direct marketing purposes.
• ​Withdraw consent at any time where we are relying on consent to process your personal data.

​To exercise any of these rights, please contact us at Sales@holygrailgrading.com

​8. Cookies

​Our website uses cookies to distinguish you from other users, which helps us provide you with a good experience when you browse our site. You can set your browser to refuse all or some browser cookies, but if you disable them, some parts of this website may become inaccessible or not function properly