Who we are
PullSignal is the public brand for the marketing website at pullsignaltcg.co.uk. This notice covers our retailer waitlist, contact enquiries, the administration and security of this website, and eBay information processed when a retailer chooses to connect an eBay seller account through PullSignal.
The legal identity and correspondence address of the controller have not yet been published. Until that is confirmed, contact us at hello@pullsignaltcg.co.uk with privacy questions or rights requests.
Information we collect
Retailer waitlist: your email address. The page also asks you to confirm that you are aged 18 or over. That confirmation is checked in your browser; we do not ask for your date of birth and it is not sent as a separate waitlist field.
Contact enquiries: your name, work email address, shop or business name if supplied, and message. The form also sends a Cloudflare Turnstile token to help prevent automated submissions.
Website and security information: providers involved in delivering and protecting the site may process technical request information, such as IP address, browser information, timestamps and security signals. Please do not include special-category or other unnecessary sensitive personal information in a free-text message.
Retailer eBay connection: if a retailer chooses to connect an eBay seller account, we process the seller's eBay user identifier and, where supplied, display username; the OAuth permissions granted; and an encrypted refresh credential with related connection status and security metadata. Access tokens are short-lived authentication credentials generated server-side when needed. PullSignal does not receive the retailer's eBay password, and does not retain the OAuth authorisation code.
eBay commerce information: for the current retailer eBay integration, this can include listing, item, offer and SKU identifiers; listing content and status; stock and quantity data; seller business-policy and inventory-location information; and order and fulfilment information needed for listing management, stock synchronisation and order reconciliation. Where eBay order notifications are enabled, we process subscription/destination data and limited delivery metadata. We do not store raw notification bodies, and the current eBay order model deliberately excludes buyer, payment-instrument and shipping-address information.
Retailer waitlist
The waitlist is provided through Clerk. When you submit your email address, your browser sends it directly to Clerk's waitlist service; PullSignal's static marketing site does not receive or store that submission itself. PullSignal can access the waitlist record through the configured Clerk administration service to manage retailer interest and related administration.
Joining the waitlist registers interest in the early retailer programme. It does not guarantee acceptance, create a paid-services agreement, or subscribe you to promotional marketing.
Contact enquiries
Your browser sends the contact-form submission to PullSignal's separate Cloudflare Worker. It verifies the Turnstile token, applies any configured rate limiting, and sends the enquiry by email through Resend to PullSignal's contact mailbox. The Worker source logs operational event names, not the enquiry contents; email delivery and mailbox retention are separate operational matters.
We use enquiries to read, respond to and follow up on the matter you raised. We do not use the form to add you to a marketing list.
Why we use information
| Activity | Purpose | Likely UK GDPR basis |
|---|---|---|
| Waitlist administration | Managing genuine retailer interest and contacting leads about the programme. | Legitimate interests, subject to the controller's documented assessment. |
| Contact enquiries | Responding to an enquiry and taking requested pre-contractual steps where applicable. | Legitimate interests; or steps at your request before a contract where that applies. |
| Retailer eBay connection | Providing the retailer-requested eBay connection, verifying the connected seller, managing supported listings and quantities, and reconciling supported eBay orders or enabled notifications. | Contract or steps at the retailer's request before a contract, where applicable; otherwise legitimate interests in operating and securing the requested service. |
| Site security | Preventing spam, abuse and attacks, and keeping the site available. | Legitimate interests. |
International transfers
Some providers may process personal information outside the UK. The source and public configuration reviewed for this site do not establish the providers' final processing locations or transfer safeguards. Before launch, the controller must confirm the relevant UK transfer mechanism and make the required information available on request.
Retention
The current implementation does not establish retention periods or a deletion process for waitlist leads, contact emails, provider records or provider logs. eBay connection records and encrypted refresh credentials are kept while a retailer's connection remains active and are removed from PullSignal when the retailer disconnects that eBay connection; separate retained operational records may remain where needed for the stated purpose or an applicable legal requirement. We will retain information only for as long as necessary for the stated purpose and any applicable legal requirement, then delete or anonymise it. The controller must set and implement documented retention periods before deployment.
Your UK data-protection rights
Depending on the circumstances, you may have rights to request access, correction, erasure, restriction, objection, and data portability. Where we rely on consent, you may withdraw it at any time. You also have an absolute right to object to direct marketing.
Email hello@pullsignaltcg.co.uk to make a request. We may need proportionate information to verify your identity. You may complain to the Information Commissioner's Office.
Children
The retailer waitlist asks visitors to confirm they are aged 18 or over. This is a self-declaration, not age verification. The marketing site is directed at business contacts, not children.
Changes and contact
We may update this notice when the site or its processing changes. We will publish the new version here and update its date. For questions, rights requests or concerns, contact hello@pullsignaltcg.co.uk.