Privacy Policy

Draft for legal review. Have a licensed attorney check this against the privacy laws that apply to you before publishing.

1. What we collect

Account information: name, email, phone, country, and a password hash — never the password itself.

Identity verification: the driver licence or government ID submitted for bidder approval and fraud prevention.

Transaction data: bids, purchases, payment status, lot correspondence, and support history.

Usage data: IP address, browser details, pages visited, and session length from server logs and analytics.

Reviews: the name, rating, and text you provide if you leave feedback.

2. What we use it for

• Creating and managing bidder accounts
• Verifying identity, reducing fraud, enforcing auction rules
• Processing bids, payments, receipts, and post-sale support
• Transactional messages such as outbid notices, invoices, and collection instructions
• Improving platform reliability
• Meeting legal, tax, and financial record obligations

We do not sell personal data, and we do not send marketing email without consent.

3. Identity documents

ID documents are stored encrypted and outside the public web root. Access is limited to staff who need them for verification, fraud review, or compliance, and every access is logged. Documents may be retained where applicable rules require it.

4. Cookies

Necessary cookies handle sign-in and security. Local storage may hold interface preferences. Disabling cookies will prevent sign-in and bidding.

5. Processors

• Google identity services for optional sign-in
• Email providers for transactional messages
• Cloud hosting for infrastructure and backups
• Advertising and analytics platforms, where enabled, for measurement

6. Retention and deletion

Account data is kept while the account is active. Deletion requests are handled within 30 days, except where transaction, identity, tax, or legal records must be retained. Aggregated analytics may be kept without identifying you.

7. Security

Data travels over HTTPS. Passwords are hashed and never stored in plain text. No system is perfect, so use a strong unique password and report anything suspicious on your account promptly.

8. Your rights

Depending on where you live you may request access, correction, deletion, restriction, objection, or a portable copy of your data. Contact the desk to make a request.