Trove Supplemental Privacy Notice

Last updated: August 22, 2026

This Supplemental Privacy Notice provides additional information about privacy practices associated with custom services operated by Trove of Collectibles. It supplements, and does not replace, the automated Shopify Privacy Policy displayed on our website. The two notices must be read together.

## Custom Trove Services Covered by This Notice

This notice applies to Trove-operated features including:

- Sell to Us and buylist searches, quotes, submissions, reviews, offers, payouts, store-credit issuance, and inventory receiving;
- Back-in-stock and product-availability alerts;
- Smart Card Search, deck-list search, uploaded card lists, and AI-assisted search features;
- Customer loyalty and store-credit records maintained by Trove;
- Purchase-limit, promotional-credit, eligibility, fraud-prevention, security, and abuse-prevention controls; and
- Protected Trove administrative tools used by authorized employees to review submissions, payments, store credit, inventory, and customer-service activity.

## Additional Personal Information We Collect

Depending on the Trove service used, we collect or process:

- Seller and buylist information, including name, email address, phone number, mailing address when mail-in service is selected, delivery method, payout preference, submission notes, selected cards, card images and catalog identifiers, declared and reviewed condition, quantities, quotes, approved offers, acceptance status, payout status, payout method, payment references, store-credit activity, and inventory-receipt status;
- Restock-alert information, including email address, selected product or variant, confirmation status, notification status, and related timestamps;
- Search and uploaded-list information, including search terms, deck lists, card lists, selected results, uploaded text or CSV content, and technical information needed to return results and prevent abuse;
- Account and credit information, including Shopify customer identifiers, email-match results, Trove store-credit balances, store-credit transactions, loyalty activity, and the employee-authorized reason for an adjustment;
- Security and fraud information, including IP address, device and browser information, request timestamps, rate-limit information, purchase and promotion eligibility, suspected abuse indicators, and records used to investigate fraud, unauthorized access, policy circumvention, disputes, or security incidents; and
- Administrative accountability records, including the authenticated employee identity, role, action performed, affected record, approval, payout, credit, inventory action, and timestamp. These records are maintained to restrict access, investigate errors or misuse, protect customers and employees, and document business transactions.

Complete payment-card numbers and card security codes are processed by Shopify and applicable payment providers. Trove ordinarily receives limited payment details such as payment status, billing information, payment-method type, transaction identifiers, and information needed to process refunds or disputes. Customers and sellers must not send complete payment-card numbers, account passwords, Social Security numbers, or other unnecessary sensitive information through email, notes, search boxes, uploads, or support messages.

## How We Use This Information

We use the information described above to:

- Search the catalog, calculate buylist estimates, process submissions, review card condition and eligibility, communicate offers, record seller acceptance, complete authorized payouts, issue store credit, and receive accepted cards into inventory;
- Verify that a store-credit recipient matches the applicable Shopify customer account;
- Send requested restock confirmations and availability notices;
- Process card searches, deck lists, and uploaded lists and improve the reliability and relevance of those features;
- Authenticate authorized employees, enforce role-based permissions, record administrative activity, investigate mistakes or misuse, and prevent duplicate or unauthorized payments, credits, and inventory changes;
- Detect, prevent, investigate, and respond to fraud, scalping, promotion abuse, account misuse, unauthorized access, malicious traffic, legal claims, payment disputes, and violations of our policies;
- Maintain transaction, tax, accounting, inventory, customer-service, legal, and security records; and
- Comply with law, legal process, contractual obligations, and requests from regulators or law-enforcement authorities.

## AI-Assisted Features

When an AI-assisted feature is used, Trove may transmit the submitted search text, deck list, or other feature input, together with limited catalog context, to an AI service provider for the purpose of generating or interpreting results. Customers must not place confidential information, payment credentials, account passwords, government identifiers, private communications, or other unnecessary personal information in an AI search box, deck list, or uploaded search file.

AI-generated or AI-assisted results may be incomplete or inaccurate and are subject to catalog availability and Trove's operational controls. Trove does not use buylist seller contact information, payout information, protected administrative records, or employee audit records to train a general-purpose AI model. Trove service providers may process information only for authorized services, subject to applicable agreements and law.

## Service Providers and Disclosures

We disclose information only as reasonably necessary for the purposes described in the automated Shopify Privacy Policy and this notice. Recipient categories may include:

- Shopify and payment providers;
- Cloud hosting, network-security, database, identity, and content-delivery providers;
- Email, customer-communication, and support providers;
- Shipping carriers and fulfillment providers;
- Card-catalog, product-data, inventory, pricing, and marketplace-data providers;
- AI service providers when an AI-assisted feature is used;
- Accountants, insurers, attorneys, auditors, fraud-prevention providers, and other professional advisers; and
- Government authorities, regulators, courts, law enforcement, or other parties when disclosure is required or permitted by law or reasonably necessary to protect Trove, its customers, its employees, or others.

We do not authorize service providers to use Trove customer or employee information for their own unrelated purposes. A provider may independently process information under its own privacy notice when the customer directly uses that provider's service or when applicable law treats the provider as an independent controller.

## Access Controls and Employee Accountability

Access to customer, seller, credit, payout, and inventory information is limited to authorized personnel according to assigned responsibilities. Trove records administrative actions to maintain accountability, investigate problems, prevent misuse, and protect customers and employees. Employees must use individual accounts and must not share administrative credentials.

Administrative logs may be reviewed by authorized managers, the store owner, security providers, professional advisers, or authorities when reasonably necessary for security, legal compliance, investigations, or dispute resolution.

## Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in the automated Shopify Privacy Policy and this notice, including completing transactions, maintaining store-credit and inventory records, satisfying tax and accounting requirements, handling chargebacks or disputes, enforcing agreements, preventing fraud and duplicate transactions, maintaining security and employee accountability, and complying with law.

Retention periods vary by record type. When information is no longer required, Trove will delete, de-identify, or securely dispose of it, subject to legal holds, required transaction records, fraud and security needs, backup cycles, and technical limitations. A valid deletion request does not require Trove to delete information that applicable law permits or requires Trove to retain.

## Security and Incident Response

Trove uses administrative, technical, and physical safeguards designed to protect personal information, including restricted employee access, individual authentication, role-based permissions, activity logging, confirmation steps for sensitive actions, and service-provider security controls. No security system is guaranteed to be completely secure.

If a security incident affects personal information, Trove will investigate and provide notice to affected individuals, regulators, or other parties when required by applicable law.

## Children and Minors

The Services are not directed to children under 13, and Trove does not knowingly collect personal information online from a child under 13 without legally required parental consent. A parent or legal guardian who believes a child provided personal information must contact Trove so the information can be reviewed and deleted when required.

A minor must use purchasing, selling, payout, store-credit, or other transactional services only with the involvement and authorization of a parent or legal guardian when required by applicable law or Trove policy.

## Privacy Choices and Requests

Customers may use the Cookie Preferences and Your Privacy Choices links displayed by Shopify on the store, use the Shopify Privacy Portal, or contact Trove to exercise applicable access, correction, deletion, portability, opt-out, restriction, objection, or appeal rights. Trove may require identity verification before completing a request and may retain information when permitted or required by law.

Trove will not discriminate against a person for exercising an applicable privacy right.

## Updates

Trove may update this notice when its custom services or information practices change. Trove will update the date above and provide any additional notice required by applicable law. Materially new collection or use must be disclosed before or when it begins when required by law.

## Contact

For privacy questions or requests, contact:

Trove of Collectibles  
271 West 1260 North  
Sunset, UT 84015  
United States  
Email: ben@troveofcollectibles.com  
Phone: +1 385-251-2096