Privacy policy

This is a translation of the Dutch privacy policy. If the two differ, the Dutch version applies.

Who we are

PsaSlabs is registered with the Dutch Chamber of Commerce (KvK) under number 96329580. We decide what happens to your data. Email questions about this to info@psaslabs.nl.

What data we keep

Your name, email address, phone number (if you fill it in) and address. With an offer or a request to sell to us, also the amounts and cert numbers you give. If you sell through PsaSlabs yourself, we also keep your IBAN and the name your bank passed on when you confirmed your account. Your seller name and the Pokémon you choose as your profile picture appear, with your sales and reviews, on your public seller profile. If you create an account, we also keep your password, encrypted so that we cannot read it, the alerts and search alerts you turn on, your favourites and what is in your cart. If you chat with us, we keep your name, your email address, the messages and when you last had the chat open, so we can see whether you are still there. If you write a review, we keep your score, your text and the name you add to it; those three appear on the site, with the date.

If you log in with Google, Microsoft or Discord, we get your name, your email address and a fixed number from that service, which we use to recognise you next time. Nothing more: no password, contacts or messages. That service sees that you log in with us.

What we use it for

To ship your order, to answer your offer or request and to email you about your order, your account or an alert you turned on. That is needed to handle the purchase or your request. We also keep order data because tax law requires it. In a drop with a maximum per customer, we use your account, email address and address to check that maximum. A week after we have shipped your order, we ask you once by email for a review; with the link in that email you unsubscribe from this. If you have an account and leave something in your cart, we send one reminder after a few hours, at most one a week; you can turn that off in your account. For your favourites and search alerts, we email you when the price drops, something is back in stock or a slab comes in that you are looking for. We do not send a newsletter.

For your order, your account and a sale, we use your data because that is necessary to carry out our agreement with you. We keep data for our bookkeeping because the law requires it. We send the review request and the cart reminder because we think they are useful to you; that is called a legitimate interest, and you can always turn them off.

If you sign up as a seller, we use your account number and the name your bank passed on to check who you are and to pay you. Before we give a seller a tick, we look up their account number and email address in the Dutch police's check for fraud reports. If we ban a seller because they scammed buyers, we put their account number, email address and address on a block list, so they cannot sign up again. We do this to protect buyers; that too is a legitimate interest.

Who we share it with

Mollie processes your payment. If you buy a slab from a seller, that seller gets your name and address to ship the slab to you; they may only use them for that. If you send such a slab back, you get the seller's name and address, only to send it back. We ship with PostNL: PostNL gets your name and address to deliver your parcel. A seller chooses how they ship; that carrier then also gets your name and address, only for the delivery. If you give consent in the cookie notice, Google gets data about your visit (see Cookies). Hostnet sends our emails. The site, the database and our mail system are on a server of Hetzner, a German hosting company. Cloudflare protects the site against attacks and sees your IP address for that. Cloudflare is an American company that participates in the EU-US Data Privacy Framework; this allows it to process your IP address under the European rules. Apart from that we share your data with no one, unless the law requires us to, for example with the Dutch tax authority (Belastingdienst) or the police. If the police ask for a seller's details, for example after a report of fraud, we provide them.

If you look up your address at checkout or in your account, we request it from PDOK, the address service of the Dutch Land Registry (Kadaster). PDOK only sees what you type, not who you are.

How long

We keep data on orders and on payouts to sellers for 7 years, because tax law requires it. Offers that do not lead to a purchase, and requests to sell to us, we delete a year after the last contact. An alert disappears when you turn it off, or 30 days after we sent the email. Favourites and search alerts stay until you turn them off. The cart linked to your account disappears as soon as it is empty. We delete a chat conversation a year after the last message. A review stays online until you ask us to remove it. We keep your account until you ask us to delete it. An account you do not activate, we delete after 30 days.

Cookies

A few cookies are needed to make the site work: your cart, your login session if you have an account, your chat conversation if you ask us a question, your choice of light or dark mode, your language choice, and your choice in the cookie notice. No consent is needed for these.

If you click Accept in the cookie notice, we use Google Analytics to measure how the site is used: which pages you view, how you came to the site and on what kind of device. For this, Google Analytics sets two cookies (_ga and _ga_PCZ1P5753G) that stay for 2 years. Google gets no name or email address from us, and no codes from a link, such as the one to reset your password. The advertising features of Google Analytics are turned off. Google keeps the data per visitor for at most 14 months. Google Analytics belongs to Google Ireland; Google may also process the data in the US and participates in the EU-US Data Privacy Framework. We only do this with your consent.

If you click Decline, we do not load Google Analytics. You can change your choice with Cookies at the bottom of every page. If you withdraw your consent, we remove the Google Analytics cookies.

Security

The site only works over a secure connection (https). We store your password encrypted, so that no one can read it. Only we can get into the site's admin. If something does go wrong with your data, we report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and let you know if that is necessary.

Children

If you are under 16, you may only give us your data, for example by creating an account, if your parent or guardian gives permission for it. What applies to ordering is in the terms.

Your rights

You can view your data, have it changed or have it deleted, and you can request it in a file. You can also object to the review request and the cart reminder, or ask us to use your data less. Email info@psaslabs.nl for this; we respond within a month. Data we must keep by law, such as orders, we only delete after that period. If you think we are not handling your data properly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If we change this privacy policy, you will see it here. This version applies from 8 November 2026.