Privacy

Who we are

Graded is the trading name of KantoForge Ltd, a company registered in England and Wales (number 14592116), registered office Sopers House, Sopers Road, Cuffley, Hertfordshire, EN6 4RY, which is the controller of your personal data. Contact: hello@graded.london.

What we collect and why

When you buy from us

• Name, email, phone (optional) and delivery address, to deliver your order and send receipts and tracking. Lawful basis: contract.
• Your payment is handled by Stripe. We never see or store your card details. Stripe’s own privacy policy applies to the payment.

When you sell to us

• Name, email, phone (optional), address, and photos of your slab, to assess and buy it. Lawful basis: contract.
• Your name and address are kept in our stock records, because the law requires second-hand dealers to record who they buy from and HMRC requires these records. Lawful basis: legal obligation.
• For larger purchases, we ask to see photo ID by email to prevent fraud. Lawful basis: legitimate interests (preventing fraud and the sale of stolen goods).
• Bank details are sent to us by email after approval so we can pay you. We don’t store them on the website.

Security and abuse prevention

We keep a scrambled (hashed) form of your IP address with sell requests and briefly record request counts to stop spam and fraud. Lawful basis: legitimate interests.

Cookies

We only use cookies the site needs to work: one remembers what’s in your bag, and one keeps our staff signed in. No advertising or analytics cookies, so there’s no cookie banner.

Who we share it with

• Stripe (payments), Royal Mail (delivery), Resend (sending emails), Railway (hosting, our database and photo storage, in the EU) and Cloudflare (our web address and email forwarding).
• If you choose “Continue with Google” or “Continue with Apple”, they tell us your email address (and your name, if you let them), so we can sign you in. Nothing else, and we never see your password.
• Some of these may process data outside the UK, under safeguards approved for UK data protection.
• HMRC or the police, if the law requires it.

How long we keep it

• Purchase and sale records, including names and addresses in our stock book: 6 years, as HMRC requires.
• Sell requests that don’t go ahead: 12 months, then deleted.
• Emails we send you: 2 years.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. We’ll delete everything we’re not legally required to keep. You can also object to processing based on legitimate interests. Email hello@graded.london; we’ll respond within one month.

If you’re unhappy with how we’ve handled your data, please complain to us first at hello@graded.london and we’ll acknowledge it within 30 days. You can also complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

We don’t use your data for automated decisions about you. Instant offers are worked out from the card, grader and grade only.