Privacy policy

Controller

The data controller is Spells Technologies S.r.l., Via Matteotti 60B, 20883 Mezzago (MB), Italia, P.IVA 14290760967. For privacy requests, write to privacy@spellstrade.com.

Data we collect

We collect account and contact data, identity and tax data, addresses, phone, email, payment data handled by providers, KYC data where required, preferences, messages, tickets, uploaded images, order, auction, offer and collection data, browsing and device data, technical logs, cookies and consents. In the mobile app, camera or gallery access is requested only when needed to upload images.

Purposes and legal bases

We process data to create and protect accounts, provide marketplace and app features, manage orders, payments, shipping, disputes, support, notifications, safety, anti-fraud, tax and legal obligations. Aggregated or pseudonymised data may be used for analytics, catalog quality and service improvement. Marketing communications are based on consent or other lawful grounds.

Sharing with third parties

We may share data with payment, KYC, logistics, email, hosting, cloud, analytics, customer-care, anti-fraud and grading or authentication partners selected by the user, as well as consultants and competent authorities. We do not sell personal data.

Retention and security

We keep data for the time needed to provide the service, comply with accounting and legal duties, prevent fraud, handle disputes and defend rights. We use reasonable technical and organisational measures, including HTTPS, access controls and qualified providers. No system is risk-free.

GDPR rights

Within GDPR limits you may request information, access, rectification, erasure, restriction, portability, objection to processing and not to be subject to decisions based solely on automated processing. You may withdraw marketing consent at any time. We answer requests within legal deadlines and may ask for identity verification.

Cookies and similar technologies

We use necessary technical cookies, preferences, analytics and, where accepted, marketing or measurement tools. Preferences can be managed from the cookie banner or browser.

Privacy contact

Email: privacy@spellstrade.com

Registered office: Via Matteotti 60B, 20883 Mezzago (MB), Italia

AI assistant and personalisation

When you use the AI assistant or Market Pulse, we may process your question, language, selected topic and reference and, only when needed, minimised authenticated data about orders, shipping, auctions, catalogue, collection or watched products. We do not send addresses, email, payment details, maximum bids or reserve prices to the model unless strictly necessary and permitted for a specific flow. Data is processed by hosting, cloud and AI inference providers under security and confidentiality obligations; the AI provider states that it does not use this data to train its models without explicit consent. Retention follows operational, security and legal needs.