Formerlink Inc. (“Formerlink,” “we,” “us,” or “our”) operates a social marketplace platform that enables sports card collectors and hobbyists to showcase collections, interact with others, and engage in buying, selling, trading, and claim-based sales (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, store, and protect personal information, and explains your rights under applicable privacy laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope and Role

For the purposes of applicable data protection laws, Formerlink acts as the data controller with respect to personal information collected through the Services.

• The Formerlink website
• Formerlink mobile applications (iOS and Android)
• Any related features, communications, and services

2. Information We Collect

2.1 Information You Provide Directly

• Name, username, profile photo, bio, and social links
• Email address and account credentials
• Shipping and billing addresses
• Messages, chats, comments, posts, listings, offers, and other content
• Information about cards, collections, transactions, and trades
• Customer support communications

2.2 Information Collected Automatically

• Device identifiers, device type, operating system, and app version
• IP address, log files, timestamps, and usage activity
• Interaction data (pages viewed, features used, actions taken)
• Cookies, SDKs, and similar technologies (web and mobile)

2.3 Information from Third Parties

• Payment processors (e.g., confirmation of payment status, last four digits, card brand, transaction IDs)
• Authentication providers (e.g., Google sign-in)
• Analytics and crash-reporting providers
• Third-party APIs for card certification/lookup, where authorized by you

3. Payment Information and Credit Cards (Important)

Formerlink does NOT store, process, or retain full credit card numbers, CVV codes, or complete payment credentials on our servers or databases.

All payment transactions are handled directly by third-party payment processors (such as Stripe) that are PCI-DSS compliant. Formerlink may store limited non-sensitive references (such as a payment method token, card brand, expiration date, or last four digits) solely for user convenience and transaction reconciliation. Formerlink does not have access to your full payment card details.

4. How We Use Personal Information

• Provide, operate, and maintain the Services
• Create and manage user accounts
• Enable showcasing, buying, selling, trading, and claim-based sales
• Process orders, payments, shipping, and refunds
• Facilitate communication between users
• Trust, safety, fraud prevention, and dispute resolution
• Improve features, functionality, and performance
• Comply with legal and regulatory obligations
• Send service-related notices, security alerts, and account updates

5. Legal Bases for Processing (GDPR)

• Contractual necessity (providing the Services)
• Legitimate interests (security, fraud prevention, product improvement)
• Consent, where required (marketing communications, optional features)
• Legal obligations

6. Disclosure of Information

We do not sell personal information. We may disclose information:

6.1 Public and User-Directed Sharing

Information you choose to make public (profiles, collections, listings, posts) will be visible to other users.

6.2 Service Providers

We may share information with vetted third-party service providers (payment processors, cloud hosting/storage, analytics, monitoring, customer support tools).

6.3 Legal and Safety

We may disclose information where required by law or reasonably necessary to enforce our Terms, protect users, and prevent fraud/abuse.

6.4 Business Transfers

In connection with a merger, acquisition, financing, or sale of assets, personal information may be transferred subject to appropriate safeguards.

7. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

8. Your Rights

8.1 Canada (PIPEDA)

• Access your personal information
• Request correction of inaccurate information
• Withdraw consent, subject to legal/contractual restrictions

8.2 European Union / EEA (GDPR)

• Access, rectify, or erase personal data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

8.3 California (CCPA / CPRA)

• Know what PI is collected, used, and disclosed
• Request deletion or correction
• Opt out of certain data sharing (we do not sell PI)
• Not be discriminated against for exercising rights

Requests may be submitted via the contact information below.

9. Cookies, SDKs, and Tracking

We use cookies, mobile SDKs, and similar technologies to authenticate users, analyze usage, improve performance, and prevent fraud. You can control cookies via browser/device settings; disabling them may affect functionality.

10. Security Safeguards

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system can be guaranteed to be 100% secure.

11. Children's Privacy

The Services are not intended for children under 13. We do not knowingly collect personal information from children.

12. International Transfers

Personal information may be processed and stored in jurisdictions outside your country of residence. We implement appropriate safeguards to protect transferred data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by updating the effective date.

14. Contact Information

Formerlink Inc.
Email: privacy@formerlink.com
Website: https://formerlink.com