Privacy Policy | The Rare Pull

Last updated: 28 October 2026

Who we are

The Rare Pull ("we", "us", "our") buys bulk Pokémon cards from collectors, players, and shops in the UK. This policy explains what personal information we collect through therarepull.co.uk, why we collect it, and what rights you have over it.

What we collect

We collect personal information only when you give it to us directly, through:

The Bulk Card Calculator — if you choose to add your email address to receive a copy of your quote, along with the card quantities or weight you entered.
The Contact form — your name, email address, and message.
The Free Daily Spin — your email address, to run the draw and contact you if you win. If you tick the optional box to hear about future offers, we also keep your email on a separate marketing list until you ask us to remove it. If you win, we also collect your name, postal address and postcode (via a popup or the link in your winner email) so we can send your prize.

We don't require an account, and the calculator works without providing any personal information at all — the email field there is optional.

How we use it

To email you a quote you've requested
To reply to messages sent through the contact form
To run the free daily spin, enforce one entry per person per day, email you if you win, and post your prize to you if you win
To arrange sending in and paying for cards you've agreed to sell to us
To send you occasional marketing emails about offers and giveaways, but only if you've explicitly opted in (e.g. via the checkbox on the spin page) — this is never required to use the site or enter the draw

Other than that optional, opted-in marketing list, we don't use your information for marketing, and we don't sell or rent it to third parties.

Who we share it with

We use a small number of third-party services to run the site and process the information above:

Resend — delivers the emails the site sends (your quote, your contact form message to us, and spin wheel emails).
Vercel — hosts the website and its backend functions.
Upstash — the database that enforces one spin per person per day and stores the optional marketing list.

These providers process data on our behalf under their own security and data protection terms. We don't share your information with anyone else unless we're required to by law.

Cookies and local storage

We don't use tracking or advertising cookies. The Calculator page saves the quantities or weight you've entered in your browser's local storage, purely so you don't lose your place if you reload the page — this stays on your device and is never sent to us. We use privacy-friendly, cookieless analytics (aggregate page-view counts only) to understand how the site is used; this doesn't identify you individually.

How long we keep it

We keep contact form messages and quote requests for as long as needed to handle your enquiry or transaction, and a reasonable period afterwards for our own records, after which they're deleted. If you've opted in to marketing emails, we keep your email on that list until you unsubscribe or ask us to remove it. We also keep a record of spin wheel entries (email, result, and IP address) to run the draw fairly, prevent abuse, and fulfil prizes.

Your rights

Under UK GDPR, you have the right to:

Ask what personal information we hold about you
Ask us to correct or delete it
Withdraw consent where we've relied on it
Complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data

To exercise any of these, get in touch via our contact form.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.