Transparency & Trust
Trust Center
We treat your personal information with the same discretion we apply to every collector asset — with care, confidentiality, and the highest standards of security.
256-bit Encryption
All data in transit and at rest
SOC 2 Compliant
Annual third-party audits
GDPR & CCPA
Full regulatory compliance
Never Sold
Your data stays with Carbon Key
Information We Collect
Carbon Key collects personal information to provide our marketplace, auction, financing, and concierge services. The categories of information we collect depend on how you use our platform.
Account & Identity Information
- Name, email address, and phone number provided at registration
- Government-issued identification for seller and bidder verification
- Profile preferences, notification settings, and platform activity
Transaction & Asset Information
- Asset details, photographs, and documentation submitted for listings
- Bid history, offer records, and transaction correspondence
- Financing application data including income and credit information
- Shipping addresses and delivery logistics information
Technical & Usage Data
- IP address, device type, browser, and operating system
- Pages visited, search queries, and feature usage patterns
- Communication logs between users and our concierge team
How We Use Information
We use your information solely to operate and improve Carbon Key's services. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
Service Delivery
- Processing transactions, bids, and financing applications
- Facilitating communication between buyers, sellers, and our team
- Coordinating logistics, inspection, and delivery services
- Providing personalized asset recommendations and alerts
Platform Security & Compliance
- Fraud prevention, identity verification, and anti-money laundering compliance
- Fulfilling legal obligations including KYC/AML requirements for high-value transactions
- Dispute resolution and transaction record-keeping
Platform Improvement
- Analyzing usage patterns to improve product features
- A/B testing and performance monitoring
- Member satisfaction research and quality assurance
Security & Protection
We implement enterprise-grade security protocols to protect your data. Our infrastructure is designed with the same level of care we apply to every collector transaction on the platform.
256-bit TLS Encryption
All data transmitted between your browser and our servers is encrypted using industry-standard TLS protocols.
Data Encryption at Rest
Sensitive data including financial information is encrypted in storage using AES-256 encryption.
Breach Response
In the event of a data breach, affected users are notified within 72 hours as required by applicable law.
Access Controls
Strict role-based access controls ensure only authorized personnel can access sensitive member data.
We conduct annual third-party security audits and penetration testing. Our platform is SOC 2 Type II compliant and undergoes continuous monitoring for anomalous activity.
Financing Data
Financing applications require sensitive financial information. We handle this data with strict protocols aligned with financial institution standards.
- Financing application data is encrypted and stored in isolated, access-restricted environments
- Credit inquiries are conducted through licensed credit bureaus with your explicit consent
- Financial documents are not stored beyond the application review period unless required for funded loans
- Financing data is shared only with approved lending partners directly involved in your application
- Soft credit pulls used for pre-qualification do not affect your credit score
- We do not use financing data for advertising or non-financing purposes
Carbon Key is not a licensed lender. Financing is arranged through licensed third-party partners. All credit decisions are made by those partners subject to their own privacy policies.
Membership Data
Membership information helps us deliver personalized services appropriate to your tier. We treat membership data with full discretion.
- Membership tier, transaction history, and collector score are used exclusively to deliver tier-appropriate services
- Referral codes and earned credits are tracked for program integrity and reward fulfillment
- Event attendance and RSVP records are used for capacity management and event planning only
- Your collector score and activity data are never shared with third parties or used for advertising
- Black Key membership information is held under additional confidentiality controls
You may request a full export of your membership data at any time through the Privacy section of your profile or by contacting our Privacy Team.
Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data. We honor all valid requests within the legally required timeframes.
Access
Request a copy of all personal data we hold about you.
Correction
Request correction of inaccurate or incomplete information.
Deletion
Request deletion of your data, subject to legal retention requirements.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing of your data for specific purposes.
Opt-Out
Withdraw consent for non-essential processing at any time.
To exercise any of these rights, contact our Privacy Team at privacy@carbonkeycollective.com or through the form below. We will respond within 30 days (or as required by law).
California residents have additional rights under CCPA. EU/UK residents have additional rights under GDPR. Residents of other jurisdictions may also have specific rights under local law.
Contact Privacy Team
Our dedicated Privacy Team is available to address your questions, concerns, and data requests.
privacy@carbonkeycollective.com
Data Requests
Submit via Member Portal
Regulatory
legal@carbonkeycollective.com
Data Protection Officer
Carbon Key Collective · 100 Southeast 2nd Street · Miami, FL 33131
For GDPR inquiries, our EU representative can be reached at eu-privacy@carbonkeycollective.com
Questions About Your Privacy?
Our Privacy Team responds to all inquiries within 48 hours.