Privacy Policy

1. Introduction

This Privacy Policy describes how RazzDeals ("we," "our," or "us") collects, uses, discloses, and protects your personal information when you use our platform — including our website and any related services (collectively, the "Service").

RazzDeals is a platform for group purchases of sports cards and collectibles, facilitating Box Breaks and Razzes between collectors, hosts, and buyers across Canada.

By using our Service, you consent to the collection and use of your information as described in this Policy. We are committed to protecting your privacy and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

2. Who We Are

RazzDeals
Email: privacy@razz.deals
Website: https://razz.deals
Jurisdiction: Ontario, Canada

For privacy-related inquiries, contact us at privacy@razz.deals.

3. Information We Collect

3.1 Information You Provide Directly

• Identity: First name, last name, username
• Contact: Email address, phone number, postal address
• Payment: Payment method details processed via third-party processors (we do not store card numbers); transaction history
• Account: Account credentials, profile information, preferences
• Communications: Messages sent through our platform, customer service communications
• Listings: Details about collectible items you list as a Host

3.2 Information Collected Automatically

• Technical: IP address, browser type and version, device identifiers, operating system
• Usage: Pages visited, time on platform, purchase history, click patterns
• Location: Approximate location based on IP address
• Cookies: Information collected through cookies and similar technologies (see Section 9)

3.3 Information from Third Parties

• Payment processors: Transaction confirmation and status data
• Verification services: Identity verification data where required

4. How We Use Your Information

We use your personal information only for the purposes for which it was collected or for consistent purposes. Specifically:

4.1 Service Provision

• Processing and facilitating Spot purchases in Box Breaks and Razzes
• Managing user accounts and profiles
• Verifying Host credentials
• Customer support and communication
• Shipping card orders to Buyers

4.2 Payment Processing

• Processing direct payments for Spots through our payment processors
• Managing refunds and chargebacks
• Financial reporting and compliance

4.3 Platform Security

• Fraud detection and prevention
• Account security monitoring
• Compliance with anti-money laundering obligations under Canadian law

4.4 Platform Improvement

• Analytics and service improvement (aggregated, non-identifiable where possible)
• Bug detection and technical troubleshooting

5. Sharing and Disclosure

We do not sell your personal information. We may share your data with the following categories of recipients:

5.1 Service Providers

Payment processors, cloud hosting providers, analytics services, and customer support platforms. All service providers are bound by contractual obligations and are prohibited from using your data for any purpose other than providing services to us.

5.2 Other Users (Limited)

Your username and public profile information are visible to other Users. Shipping addresses are shared with Hosts only when you are the Recipient in a Razz, or with RazzDeals for Box Break shipping.

5.3 Legal Requirements

We may disclose your information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of RazzDeals, our users, or the public.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Firebase Authentication and Firestore security rules with role-based access controls
• Principle of least privilege for internal data access
• Regular security reviews
• Data breach response procedures

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

8. Your Rights Under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

Right of Access

You may request access to the personal information we hold about you and information about how it has been used and disclosed.

Right to Correct

You may request correction of inaccurate or incomplete personal information. If we decline to make a correction, we will note your request.

Right to Withdraw Consent

You may withdraw consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Withdrawing consent for essential data may limit your ability to use the Service.

Right to Complain

If you believe we have not handled your personal information appropriately, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

Exercising Your Rights

To exercise any of these rights, contact us at privacy@razz.deals. We will respond within 30 days of receiving your request.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service:

• Essential cookies: Required for platform functionality, including authentication state. Cannot be disabled without impairing the Service.
• Performance cookies: Help us understand how Users interact with the platform (aggregated analytics).
• Functional cookies: Remember your preferences and settings.

We do not currently use advertising or marketing cookies. You can manage cookies through your browser settings. Disabling essential cookies will impair platform functionality.

10. Marketing Communications (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). We will only send commercial electronic messages (CEMs) to you if you have provided express consent or if a CASL exemption applies.

• Consent is obtained via an unchecked opt-in checkbox at registration — we do not use pre-checked boxes.
• Every marketing email includes a working unsubscribe mechanism that takes effect within 10 business days.
• We maintain records of all marketing consents for a minimum of 3 years.
• Our business address is included in all commercial electronic messages.

To opt out of marketing communications at any time, click the unsubscribe link in any email or contact us at privacy@razz.deals.

Transactional messages (order confirmations, shipping notifications, account security) are not subject to CASL consent requirements and will be sent regardless of marketing preferences.

11. Children's Privacy

Our Service is not intended for persons under 18 years of age. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a minor, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered Users by email or by a prominent notice on the platform, and update the "Last Updated" date above. Your continued use of the Service after changes constitutes your acceptance of the revised Policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy:

Email: privacy@razz.deals
Website: https://razz.deals
Mailing address: [To be added upon business registration in Ontario]