Gem Core Grading

PRIVACY POLICY

Effective Date: July 24, 2026

Gem Core Grading (“Gem Core,” “we,” “us,” or “our”) respects the privacy of collectors and customers who use our website, customer portal, grading services, certification tools, population reports, QR-code lookup features, and related services.

This Privacy Policy explains:

What personal information Gem Core collects;
Where that information comes from;
How Gem Core uses it;
When information may be disclosed;
How long information may be retained;
The choices and privacy rights available to customers; and
How to contact Gem Core about a privacy concern.

This Privacy Policy applies to information collected through:

gemcoregrading.com;
Gem Core customer accounts;
Online and in-person grading submissions;
Packages and collectibles sent to Gem Core;
Customer-support communications;
Payment and checkout processes;
Certification and QR-code lookup features;
Population reports;
Promotional programs;
Email or text communications; and
Other interactions with Gem Core.

This Privacy Policy does not apply to a third-party website, platform, marketplace, carrier, or service that maintains its own privacy policy.

By using Gem Core’s services, you acknowledge the practices described in this Privacy Policy.

1. WHO CONTROLS YOUR INFORMATION

Gem Core Grading is responsible for determining how personal information covered by this Privacy Policy is collected and used.

Privacy questions and requests may be sent to:

Gem Core Grading Privacy Email: admin@gemcoregrading.com Website: gemcoregrading.com Mailing Address: 2801 B St., Unit #2161, San Diego, CA 92102

After Gem Core’s legal entity formation is completed, this section may be updated to display the company’s exact registered legal name.

2. INFORMATION GEM CORE COLLECTS

The information Gem Core collects depends on how you interact with us and which services you use.

A. Identity and Contact Information

Gem Core may collect:

First and last name;
Account username or customer identification number;
Email address;
Telephone number;
Billing address;
Shipping and return address;
City, state, ZIP code, province, or country;
Preferred contact method; and
Information used to verify your identity or account ownership.

B. Account and Login Information

When you create or use a customer account, Gem Core may collect:

Account email;
Encrypted or securely managed authentication credentials;
Account creation date;
Login history;
Password-reset activity;
Authentication records;
Account preferences;
Saved addresses;
Marketing preferences;
Gem Points or promotional-credit balances;
Order history; and
Account status.

Gem Core does not intend to store customer passwords in readable form.

C. Grading Order and Transaction Information

Gem Core may collect information associated with an order or submission, including:

Order number;
Submission date;
Service level;
Number of cards submitted;
Declared value;
Requested turnaround level;
Fees charged;
Discounts or promotional credits;
Payment status;
Refund information;
Chargeback or payment-dispute information;
Shipping method;
Tracking number;
Insurance selection;
Package status;
Delivery confirmation; and
Customer instructions.

D. Collectible and Card Information

Gem Core may collect information about submitted collectibles, including:

Card name;
Character or player;
Trading-card game or sport;
Manufacturer or publisher;
Set name;
Release year;
Card number;
Edition;
Variation;
Language;
Rarity;
Serial numbering;
Autograph or memorabilia information;
Customer-provided description;
Customer-provided purchase information;
Customer-provided value estimate;
Known damage, alteration, or restoration information; and
Ownership or authorization information when reasonably necessary.

E. Card Images, Scans, and Measurement Data

Gem Core may photograph, scan, video record, inspect, or measure submitted items.

Information created during grading may include:

Front and back card images;
Magnified surface images;
Edge and corner images;
Centering measurements;
Surface observations;
Condition findings;
Grading notes;
Authentication observations;
Imaging-device output;
Optical or dimensional measurements;
Software-assisted analysis;
Human-review findings;
Numerical grade;
Subgrades;
Certification number;
Barcode or QR code;
Holder and label information;
Population-report entry; and
Internal quality-control information.

This information may remain associated with the item’s certification number even after the physical item has been returned to the customer.

F. Public Certification Information

Gem Core may make certain collectible information publicly available through certification lookup, QR-code verification, or population reports.

Public certification information may include:

Card description;
Set and year;
Card number or variation;
Grade and subgrades;
Certification number;
Front and back card images;
Date graded or certification status;
Population information; and
Holder or label status.

Gem Core does not intend to publish a customer’s private mailing address, private account credentials, complete payment information, or private support communications as part of a public certification record.

A customer’s name or public profile information will only be displayed when the feature expressly provides for it or the customer chooses to make it public.

G. Payment Information

Payments may be processed through a third-party payment processor, such as Stripe.

The payment processor may collect:

Payment-card number;
Expiration date;
Security code;
Billing address;
Bank or payment-account information;
Device and fraud-prevention information; and
Other information needed to authorize payment.

Gem Core generally receives limited payment information, which may include:

Customer name;
Billing contact information;
Payment status;
Transaction identifier;
Payment method type;
Last four digits of a payment card;
Refund status; and
Fraud or risk indicators.

Gem Core does not intend to receive or store complete payment-card numbers when checkout is hosted or processed by the payment provider.

H. Shipping and Delivery Information

Gem Core may collect or receive:

Sender and recipient names;
Mailing addresses;
Tracking numbers;
Shipping-label information;
Carrier information;
Package weight;
Delivery status;
Signature confirmation;
Insurance information;
Customs information;
Returned-package information;
Photographs of damaged packages; and
Carrier-claim information.

I. Communications and Customer Support

When you contact Gem Core, we may collect:

Emails;
Contact-form submissions;
Text messages;
Telephone-call information;
Social-media messages;
Customer-service notes;
Complaint information;
Dispute notices;
Photographs and videos you provide;
Documents you submit;
Survey responses;
Feedback; and
Records of how a matter was resolved.

Telephone calls may be recorded only when notice and consent are provided as required by applicable law.

J. Device, Website, and Usage Information

When you access the website or customer portal, Gem Core or its service providers may automatically receive:

Internet Protocol address;
Browser type;
Browser version;
Device type;
Operating system;
Language setting;
Approximate location derived from an IP address;
Date and time of access;
Pages viewed;
Links clicked;
Referring page;
Session duration;
Error logs;
Login events;
Security events;
Unique device or session identifiers; and
Information about how the website performs on your device.

Gem Core does not use this information to determine a customer’s precise physical location unless a specific feature requires it and appropriate notice is provided.

K. Cookies and Similar Technologies

Gem Core’s website may use cookies, local storage, session identifiers, pixels, tags, or similar technologies.

These technologies may be used for:

Keeping a customer signed in;
Remembering preferences;
Maintaining a shopping cart or submission session;
Processing checkout;
Preventing fraud;
Protecting accounts;
Balancing website traffic;
Diagnosing errors;
Measuring website performance; and
Understanding general website usage.

Some cookies are necessary for the website, checkout, account login, or security features to function.

Gem Core is not currently representing that it uses advertising pixels or behavioral-advertising tracking. If advertising, cross-site tracking, or new analytics tools are activated, this Privacy Policy and any required cookie or opt-out controls should be updated before or when those tools are deployed.

L. Security and Fraud-Prevention Information

Gem Core may collect information used to protect customers, collectibles, payments, and the website, including:

Failed login attempts;
Suspicious account activity;
Device and IP risk information;
Chargeback records;
Suspected false claims;
Suspected counterfeit submissions;
Package-intake photographs or video;
Building or workspace security video;
Identity-verification information;
Records of certificate misuse;
Threatening or abusive communications; and
Information received from payment processors, carriers, insurers, marketplaces, or fraud-prevention providers.

M. Marketing and Promotional Information

When you subscribe to promotions or participate in a referral, rewards, or Gem Points program, Gem Core may collect:

Marketing consent;
Email or text subscription status;
Promotion code;
Referral information;
Campaign interaction;
Gem Points activity;
Reward redemptions; and
Communication preferences.

Transactional messages about an active order or account are different from optional marketing communications.

N. Information From Social Media and Other Sources

Gem Core may receive information when you:

Contact Gem Core through a social-media platform;
Tag or mention Gem Core;
Participate in a promotion;
Submit a review;
Provide testimonial permission;
Use a third-party login service;
Communicate through a marketplace; or
Interact with content posted by Gem Core.

The social-media platform or third-party service controls its own collection and use of information under its privacy policy.

3. SOURCES OF INFORMATION

Gem Core may collect personal information from:

A. Directly From You

This includes information you provide when you:

Create an account;
Place an order;
Submit a card;
Complete a form;
Make a payment;
Contact customer service;
Request a refund;
File a claim;
Join a promotional program; or
Communicate with Gem Core.

B. Automatically From Your Device

This includes website, device, cookie, log, diagnostic, and security information generated when you use the website or customer portal.

C. From Service Providers

Gem Core may receive information from providers involved in:

Payment processing;
Website hosting;
Customer authentication;
Database hosting;
Card-search functionality;
Email delivery;
Shipping;
Insurance;
fraud prevention; and
Customer support.

D. From Shipping Carriers

Gem Core may receive delivery, tracking, address-correction, damage, claim, and signature information from shipping carriers.

E. From Public or Commercial Card Sources

Gem Core may use publicly available or licensed sources to verify:

Card names;
Set information;
Checklists;
Variations;
Release information;
Historical sales;
Market comparisons;
Counterfeit indicators; and
Other collectible information.

F. From Other People

A dealer, group submitter, parent, authorized representative, employer, business, or card owner may provide information about you when submitting an item or communicating with Gem Core.

The person providing the information is responsible for having authority to provide it.

4. HOW GEM CORE USES INFORMATION

Gem Core may use personal information for the following purposes.

A. To Provide Grading Services

This includes using information to:

Receive and identify submissions;
Match packages to orders;
Grade and examine cards;
Authenticate items when applicable;
Produce labels and holders;
Generate certification numbers;
Create QR-code records;
Add items to population reports;
Complete quality-control review;
Return cards to customers; and
Maintain grading history.

B. To Operate Customer Accounts

Gem Core may use information to:

Create and authenticate accounts;
Display order history;
Display submitted and graded cards;
Save shipping information;
Manage Gem Points or credits;
Provide order-status updates;
Reset passwords;
Protect accounts; and
Respond to account requests.

C. To Process Orders and Payments

This includes:

Calculating fees;
Processing payments;
Applying discounts;
Issuing refunds;
Managing credits;
Verifying payment;
Responding to chargebacks;
Detecting payment fraud; and
Maintaining transaction records.

D. To Ship and Insure Collectibles

Gem Core may use information to:

Create shipping labels;
Select shipping services;
Purchase insurance;
Track packages;
Confirm delivery;
Investigate missing or damaged shipments;
Process carrier or insurance claims; and
Contact customers about delivery problems.

E. To Communicate With Customers

Gem Core may send:

Account confirmations;
Order receipts;
Shipping instructions;
Package-received notices;
Payment notices;
Grading-status updates;
Completion notices;
Return-shipping notices;
Security alerts;
Support responses;
Policy notices; and
Other service-related communications.

F. To Maintain Certification and Population Records

Gem Core may use item information and images to:

Verify genuine Gem Core certifications;
Operate public QR-code lookup;
Maintain population reports;
Identify duplicate or invalid certificates;
Correct database errors;
Prevent counterfeit labels or holders;
Assist buyers and collectors in verifying an item; and
Protect the integrity of Gem Core’s grading system.

G. To Improve Grading and Technology

Gem Core may use grading images, measurements, findings, and derived data to:

Improve grading consistency;
Test equipment;
Calibrate imaging systems;
Improve software and algorithms;
Train or evaluate technology-assisted grading tools;
Train graders and quality-control personnel;
Identify counterfeit or altered cards;
Research card-production characteristics; and
Improve the customer experience.

Where practical, Gem Core may use deidentified or aggregated information for research and improvement.

H. To Protect Customers and Gem Core

Information may be used to:

Detect fraud;
Prevent account takeover;
Investigate suspicious submissions;
Investigate counterfeit cards;
Protect customer property;
Enforce submission rules;
Prevent misuse of certificates;
Investigate false claims;
Respond to threats or abusive conduct;
Maintain building and network security;
Protect legal rights; and
Enforce Gem Core’s agreements.

I. To Comply With Law

Gem Core may use information to:

Maintain tax and accounting records;
Respond to lawful subpoenas, warrants, or court orders;
Comply with regulatory obligations;
Respond to government inquiries;
Preserve evidence;
Report suspected criminal activity where appropriate; and
Establish, exercise, or defend legal claims.

J. To Send Optional Marketing

With appropriate permission, Gem Core may use contact information to send:

Promotions;
Discount offers;
New-service announcements;
Grading-event information;
Collector news;
Referral offers;
Gem Points updates; and
Other marketing communications.

You may unsubscribe from marketing without stopping necessary order, security, or account communications.

K. To Create Aggregated Information

Gem Core may combine information so that it no longer reasonably identifies a particular person.

Aggregated or deidentified information may be used for:

Population statistics;
Business analysis;
Grading research;
Website improvement;
Industry reporting;
Fraud detection; and
Service planning.

Gem Core will not attempt to reidentify information maintained as deidentified unless needed to test whether deidentification measures remain effective or as otherwise permitted by law.

5. LEGAL BASES FOR PROCESSING

Where a law requires Gem Core to identify a legal basis for processing personal information, Gem Core may rely on:

A. Performance of a Contract

Processing may be necessary to:

Create an account;
Accept a grading order;
Grade and encapsulate cards;
Process payment;
Ship items;
Provide customer support; and
Perform the services requested by the customer.

B. Legitimate Business Interests

Gem Core may process information for legitimate interests such as:

Preventing fraud;
Protecting customer property;
Maintaining certification records;
Improving grading technology;
Securing accounts;
Operating the website;
Defending legal claims; and
Improving services.

Gem Core will consider individual privacy interests when relying on this basis.

C. Consent

Gem Core may rely on consent for:

Optional marketing;
Certain cookies;
Public testimonials;
Promotional communications;
Optional profile features; or
Another activity for which consent is requested.

Consent may be withdrawn, but withdrawal does not make prior lawful processing invalid.

D. Legal Obligations

Gem Core may process information when necessary to comply with tax, accounting, consumer-protection, legal-process, or other lawful requirements.

6. HOW GEM CORE DISCLOSES INFORMATION

Gem Core may disclose personal information only as reasonably necessary for the purposes described below.

A. Website, Cloud, and Database Providers

Gem Core may use service providers to host and operate its website, customer accounts, databases, images, and order systems.

Current or anticipated providers may include:

Vercel for website hosting and deployment;
Supabase for account authentication, databases, or storage;
Algolia for card-search or search-index functionality; and
Other technical providers needed to operate the services.

These providers may process device, account, order, search, or technical information to perform services for Gem Core.

B. Payment Processors

Gem Core may disclose order, billing, and transaction information to Stripe or another payment provider to:

Process payment;
Issue refunds;
Detect fraud;
Respond to payment disputes; and
Meet payment-network requirements.

Payment providers process complete payment credentials under their own privacy terms and security responsibilities.

C. Shipping Carriers and Insurance Providers

Gem Core may provide contact, address, package, value, tracking, and claim information to:

Shipping carriers;
Postal providers;
Insurance companies;
Fulfillment providers;
Customs authorities; and
Claims administrators.

D. Communications Providers

Gem Core may use providers to deliver:

Email;
Text messages;
Account alerts;
Support communications; and
Marketing communications.

These providers may receive contact information and message-delivery information.

E. Professional Advisers

Information may be disclosed to:

Attorneys;
Accountants;
Auditors;
Insurance professionals;
Security consultants;
Business advisers; and
Other professionals who have confidentiality obligations.

F. Fraud, Security, and Claim Partners

Gem Core may disclose information to payment providers, carriers, insurers, marketplaces, security providers, or other affected businesses to investigate:

Fraud;
Stolen property;
Counterfeit items;
Payment disputes;
False insurance claims;
Certificate misuse;
Cybersecurity incidents; or
Threats to customers or the public.

G. Legal and Government Disclosures

Gem Core may disclose information when it reasonably believes disclosure is necessary to:

Comply with law;
Respond to valid legal process;
Enforce an agreement;
Protect customer property;
Protect the rights or safety of Gem Core or others;
Investigate suspected unlawful conduct; or
Establish or defend a legal claim.

Gem Core may challenge an overbroad or improper request when reasonably appropriate, but does not promise to challenge every request.

H. Business Transfers

If Gem Core is involved in a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or transfer of the business, information may be reviewed or transferred as part of that transaction.

Any recipient will be required to handle the information in accordance with applicable law and any commitments that continue to apply.

I. At Your Direction

Gem Core may disclose information when you direct, authorize, or request the disclosure.

Examples include:

Shipping an order to another person;
Communicating with an authorized representative;
Publishing an approved testimonial;
Making a collector profile public; or
Sharing an order with a group submitter.

J. Public Certification Records

Card information, images, grades, certification numbers, and population data may be publicly displayed as described in this Privacy Policy.

This is an operational part of Gem Core’s certification and verification services and is not treated as a sale of the customer’s personal information.

7. SALE AND SHARING OF PERSONAL INFORMATION

Gem Core does not sell personal information for money.

Gem Core also does not knowingly share personal information for cross-context behavioral advertising as of the Effective Date of this Privacy Policy.

Gem Core does not disclose customer information to unrelated third parties for those third parties’ independent direct-marketing campaigns.

Service-provider disclosures necessary to operate the website, process payments, ship cards, prevent fraud, or provide requested services are not intended to be sales of personal information.

If Gem Core’s practices change, Gem Core will update this Privacy Policy and provide any legally required opt-out method before or when the changed practice begins.

8. SENSITIVE PERSONAL INFORMATION

Depending on how you use the services, Gem Core may process information that could be considered sensitive under certain privacy laws, including:

Account login credentials;
Payment-related information handled by a payment processor;
Private communications;
Mailing address;
Identification information used for account or property verification; and
Information concerning suspected fraud or unlawful activity.

Gem Core uses sensitive information only when reasonably necessary to:

Provide requested services;
Process payments;
Ship property;
Protect accounts;
Prevent fraud;
Verify identity;
Maintain security;
Comply with law; or
Establish or defend legal claims.

Gem Core does not use sensitive personal information to infer personal characteristics unrelated to providing or protecting the services.

9. COOKIES, ANALYTICS, AND TRACKING CHOICES

A. Essential Technologies

Some cookies and similar technologies may be required for:

Secure login;
Account authentication;
Checkout;
Fraud prevention;
Session management;
Website security;
Load balancing; and
Remembering essential preferences.

Disabling these technologies may prevent parts of the website from functioning.

B. Analytics

Gem Core may use limited website analytics to understand performance and general use.

Before activating a new third-party analytics or advertising tool, Gem Core should review whether additional notice, consent, opt-out controls, or a cookie banner is required.

C. Browser Controls

Most browsers allow users to:

Delete stored cookies;
Block some or all cookies;
Receive warnings before cookies are stored; or
Restrict certain tracking technologies.

Browser restrictions may affect website functionality.

D. Do Not Track

Some browsers transmit a “Do Not Track” signal. There is not a single universally adopted technical standard governing all Do Not Track signals.

Gem Core does not currently use personal information for cross-context behavioral advertising.

E. Global Privacy Control

Because Gem Core does not currently sell or share personal information for cross-context behavioral advertising, there may be no sale or sharing from which to opt out.

If Gem Core later engages in activity subject to a legally recognized opt-out preference signal, Gem Core will process such signals as required by applicable law.

10. MARKETING CHOICES

You may unsubscribe from promotional emails by:

Selecting the unsubscribe link in the email;
Changing available account preferences; or
Contacting admin@gemcoregrading.com.

You may opt out of promotional text messages by replying STOP when that option is provided.

After opting out, Gem Core may still send necessary nonmarketing communications about:

Active orders;
Payments;
Shipping;
Account security;
Privacy requests;
Legal notices; and
Customer-support matters.

Gem Core may retain a limited suppression record so that the marketing opt-out can be honored.

11. GEM POINTS AND PROMOTIONAL PROGRAMS

Gem Core may offer Gem Points, referral credits, discounts, or other promotional benefits.

These programs are intended to reward customer activity or promote Gem Core services. They are not intended as payment for allowing Gem Core to sell personal information.

Gem Core may use:

Customer account information;
Purchase history;
Referral activity;
Credit balances; and
Reward-redemption history

to administer these programs.

If a future program qualifies as a financial-incentive or price-difference program under applicable privacy law, Gem Core will provide a separate notice describing the material terms before enrolling customers.

12. DATA RETENTION

Gem Core retains information for as long as reasonably necessary for the purpose for which it was collected, including providing grading services, maintaining certification integrity, meeting legal obligations, resolving disputes, preventing fraud, and enforcing agreements.

Retention may vary by category.

A. Customer Accounts

Account information may be retained while the account remains open and for a reasonable period afterward to handle order history, disputes, fraud prevention, and legal obligations.

B. Order and Payment Records

Order, payment, refund, shipping, tax, and accounting records may be retained for the period required by applicable tax, accounting, payment-network, insurance, and legal requirements.

C. Certification and Population Records

Certification numbers, card descriptions, card images, grades, measurements, and population information may be retained for an extended period or indefinitely when reasonably necessary to:

Verify graded cards;
Prevent counterfeit certificates;
Maintain population reports;
Preserve grading history;
Investigate fraud; and
Protect collectors relying on Gem Core certifications.

Deleting a customer account does not automatically require deletion of a legitimate public certification record associated with a graded collectible.

Gem Core may remove or deidentify customer-account connections while preserving the card’s certification record.

D. Security and Fraud Information

Security logs, fraud records, chargeback evidence, claim information, and certificate-misuse records may be retained for as long as reasonably necessary to protect Gem Core and its customers.

E. Customer Communications

Support communications may be retained for service history, training, quality control, dispute resolution, and legal compliance.

F. Marketing Records

Marketing preferences and suppression records may be retained so that Gem Core can honor unsubscribe requests.

G. Deidentified Information

Gem Core may retain aggregated or deidentified information when it no longer reasonably identifies a person.

When information is no longer reasonably necessary, Gem Core may delete, anonymize, aggregate, or securely isolate it.

13. SECURITY

Gem Core uses reasonable administrative, technical, and physical safeguards designed to protect personal information.

Safeguards may include:

Access restrictions;
Authentication controls;
Encrypted transmission;
Managed payment processing;
Database permissions;
Logging and monitoring;
Backups;
Software updates;
Fraud detection;
Physical access controls;
Package-intake documentation; and
Employee or contractor confidentiality requirements.

No website, database, email system, shipping process, or electronic-storage method can be guaranteed to be completely secure.

Customers are responsible for:

Using a strong and unique password;
Protecting their email account;
Restricting access to their devices;
Signing out of shared devices;
Keeping account information current; and
Promptly reporting suspected unauthorized activity.

Suspected account or privacy incidents should be reported to admin@gemcoregrading.com.

14. PRIVACY INCIDENTS

If Gem Core discovers a security incident involving personal information, Gem Core may:

Investigate the incident;
Secure affected systems;
Preserve evidence;
Work with service providers;
Notify insurers, legal advisers, or authorities;
Reset affected credentials;
Provide customer instructions; and
Give legally required notices.

The timing and content of any notice will depend on the facts and applicable law.

15. YOUR PRIVACY CHOICES AND RIGHTS

Depending on your location and applicable law, you may have the right to request:

Confirmation that Gem Core processes your personal information;
Access to personal information;
Categories of information collected;
Sources of information;
Purposes for using information;
Categories of recipients;
Correction of inaccurate information;
Deletion of certain information;
A portable copy of certain information;
Restriction of certain processing;
Objection to certain processing;
Withdrawal of consent;
Opt-out of sale or sharing, if applicable;
Limitation of certain sensitive-information uses, if applicable; and
Review of certain automated decisions, if applicable.

These rights are not absolute.

Gem Core may retain or continue using information when reasonably necessary to:

Complete a grading order;
Maintain a legitimate certification record;
Detect fraud;
Protect customer property;
Maintain security;
Comply with law;
Exercise free-speech or other legal rights;
Establish or defend legal claims;
Complete an internal use reasonably aligned with customer expectations; or
Meet another lawful exception.

Gem Core will not unlawfully discriminate against a person for exercising an applicable privacy right.

16. HOW TO SUBMIT A PRIVACY REQUEST

Privacy requests may be submitted by:

Email: admin@gemcoregrading.com

Mail: Gem Core Grading Privacy Request 2801 B St., Unit #2161 San Diego, CA 92102

Your request should include:

Your name;
The email associated with your account;
The right you wish to exercise;
Relevant order or account information; and
Enough detail for Gem Core to understand the request.

Do not send a complete payment-card number, account password, government identification document, or other highly sensitive information unless Gem Core specifically requests a secure form of verification.

17. IDENTITY VERIFICATION

Gem Core may need to verify your identity before completing a privacy request.

Verification may involve:

Confirming access to the account email;
Requiring account login;
Confirming an order number;
Confirming shipping or transaction details;
Requesting a signed declaration; or
Requesting additional information reasonably connected to the request.

Gem Core will use verification information only for verification, security, fraud prevention, recordkeeping, or another legally permitted purpose.

Gem Core may deny or limit a request when it cannot reasonably verify the requester’s identity or authority.

18. AUTHORIZED AGENTS

An authorized agent may submit a privacy request for you when permitted by law.

Gem Core may require:

Written authorization signed by you;
Verification of your identity;
Verification of the agent’s identity;
Proof that the agent is registered when legally required; or
Evidence of a valid power of attorney.

Gem Core may deny an agent request that does not provide sufficient proof of authority.

19. APPEALS

If Gem Core denies a privacy request and applicable law provides an appeal right, you may appeal by emailing admin@gemcoregrading.com with the subject line:

Privacy Request Appeal

The appeal should identify:

The original request;
Gem Core’s response;
The reason you believe the decision should be reconsidered; and
Any additional supporting information.

20. CALIFORNIA PRIVACY NOTICE

This section provides additional information for California residents.

Gem Core provides this section for transparency and does not represent that every provision of the California Consumer Privacy Act applies to Gem Core at every stage of its operations.

A. Categories Collected

During the preceding 12 months, Gem Core may have collected the following categories, depending on whether the relevant systems and services were active:

Identifiers, such as name, email address, account identifier, telephone number, mailing address, IP address, and transaction identifier.

Customer-record information, such as contact information, shipping information, and payment-related records.

Commercial information, such as orders, submitted cards, services purchased, declared values, refunds, Gem Points, and transaction history.

Internet or electronic-network activity, such as login, browser, device, page-view, session, and security-log information.

Audio, electronic, visual, or similar information, such as card images, package-intake recordings, customer-provided photographs, and support communications.

Geolocation information, generally limited to approximate location derived from an IP address and shipping-location information supplied by the customer.

Professional or business information, when a dealer, shop, business, or professional submitter uses the services.

Sensitive personal information, which may include account credentials, precise mailing information, private communications, and payment-related information processed by a payment provider.

Inferences, such as fraud-risk indicators, customer preferences, likely service interests, or information derived for account security and service improvement.

B. Business Purposes

Gem Core may use these categories to:

Provide grading and certification services;
Process payments;
Operate customer accounts;
Ship and insure cards;
Provide support;
Maintain certification records;
Detect fraud;
Protect accounts and property;
Improve services;
Send requested communications;
Comply with law; and
Establish or defend legal claims.

C. Categories Disclosed for Business Purposes

Gem Core may disclose the categories described above to:

Hosting and database providers;
Account-authentication providers;
Payment processors;
Shipping carriers;
Insurance providers;
Communications providers;
Security and fraud-prevention providers;
Professional advisers;
Government or legal authorities; and
Business successors.

Disclosures are limited to information reasonably necessary for the applicable purpose.

D. Sale and Sharing

Gem Core has not knowingly sold personal information for money during the preceding 12 months.

Gem Core has not knowingly shared personal information for cross-context behavioral advertising during the preceding 12 months.

E. Minors

Gem Core does not knowingly sell or share personal information belonging to consumers under 16 years old.

F. California Rights

Subject to applicability and legal exceptions, California residents may request:

Access to categories or specific pieces of personal information;
Correction;
Deletion;
Information about collection and disclosure;
Opt-out of sale or sharing, if such activity occurs;
Limitation of certain sensitive-information uses, if applicable; and
Equal service and pricing when exercising privacy rights.

Requests may be submitted using the process in Section 16.

G. California Shine the Light

Gem Core does not disclose customers’ personal information to unrelated third parties for those third parties’ own direct-marketing purposes.

California residents may submit questions about this practice to admin@gemcoregrading.com.

21. OTHER UNITED STATES PRIVACY RIGHTS

Residents of certain states may have additional rights concerning:

Access;
Correction;
Deletion;
Portability;
Targeted-advertising opt-out;
Sale opt-out;
Profiling opt-out;
Sensitive-data consent; and
Appeals.

Gem Core will evaluate requests under the law applicable to the requester and the business.

Because Gem Core does not currently sell personal information or use it for targeted cross-context behavioral advertising, some opt-out rights may not apply to current practices.

22. INTERNATIONAL USERS

Gem Core is based in the United States.

If you access the services from outside the United States, your information may be transferred to, processed in, and stored in the United States or another country where Gem Core’s service providers operate.

Privacy and data-protection laws in those locations may differ from the laws in your country.

Where legally required, Gem Core may use recognized transfer protections or contractual safeguards.

A. European Economic Area, United Kingdom, and Switzerland

When applicable, individuals in these locations may have rights to:

Access;
Correction;
Deletion;
Restriction;
Objection;
Portability;
Withdrawal of consent; and
Complaint to a supervisory authority.

Gem Core may process information based on:

Contract performance;
Legitimate interests;
Consent;
Compliance with legal obligations; or
Establishing or defending legal claims.

A request may be submitted to admin@gemcoregrading.com.

23. CHILDREN’S PRIVACY

Gem Core’s accounts and paid grading services are intended for adults who are at least 18 years old.

Gem Core does not knowingly permit a child under 13 to create an account or submit personal information directly through the services.

A parent or guardian who believes a child provided personal information without appropriate permission should contact admin@gemcoregrading.com.

After reasonable verification, Gem Core will take appropriate steps to delete the child’s personal information unless retention is legally required or necessary to protect the child, another person, or customer property.

Information about a collectible itself may remain in a certification record when it does not identify the child.

24. THIRD-PARTY WEBSITES AND SERVICES

The Gem Core website may contain links to:

Payment processors;
Shipping carriers;
Social-media platforms;
Card databases;
Marketplaces;
Manufacturers;
News or hobby websites; and
Other third parties.

Gem Core does not control those third parties’ privacy practices.

You should review the privacy policy of a third-party service before providing information to it.

A link does not mean that Gem Core endorses or controls the third party.

25. AUTOMATED AND TECHNOLOGY-ASSISTED PROCESSING

Gem Core may use software, algorithms, imaging systems, measurements, or artificial-intelligence-assisted tools to support:

Card identification;
Centering measurements;
Surface analysis;
Condition review;
Fraud detection;
Search;
Security;
Customer support; and
Quality control.

These technologies may produce recommendations, flags, measurements, or derived information.

Gem Core may combine technology-assisted output with human review.

Unless expressly stated otherwise, a grading result is not represented as being created solely through automated decision-making.

Where applicable law provides rights concerning certain automated decisions with significant effects, Gem Core will evaluate a properly submitted request under that law.

26. PUBLIC POSTS, REVIEWS, AND TESTIMONIALS

Information you intentionally post publicly may be visible to other people.

This may include:

Public reviews;
Social-media comments;
Testimonials;
Public profile content;
Card showcase submissions;
Contest entries; and
Collector discussions.

Do not post information publicly that you want to remain private.

Gem Core will obtain permission before using a private customer communication as an attributed public testimonial, unless another lawful basis applies.

Gem Core may use public reviews to respond to customer concerns or protect against false or misleading claims.

27. CHANGES TO THIS PRIVACY POLICY

Gem Core may update this Privacy Policy to reflect:

New services;
Changes in technology;
New service providers;
Changes in data practices;
Changes in privacy laws;
Security requirements; or
Business developments.

The updated policy will display a revised Effective Date.

When legally required, Gem Core will provide additional notice before a material change becomes effective.

Previous versions may be retained for recordkeeping.

Customers should review this Privacy Policy periodically.

28. CONTACT GEM CORE

Questions, complaints, or privacy requests may be directed to:

Gem Core Grading

Privacy Email: admin@gemcoregrading.com

Website: gemcoregrading.com

Mailing Address: 2801 B St., Unit #2161 San Diego, CA 92102