Privacy
What we hold, and who sees it.
Anonymity between bidders is a promise this product is built around, and the organiser receiving a winner's details is the one deliberate exception to it. Both belong in a policy that says so plainly.
01
Who controls your data
Which company is the controller of your personal data, where it is established, and how to reach the person responsible for it.
02
What we collect
What you give us when you complete your profile, what your bidding itself creates, and what we receive back from Stripe when you authenticate a card.
03
Why we use it, and our lawful basis
The purpose behind each use and the lawful basis for it. Running an auction and completing a sale rest on performing a contract with you. Marketing rests on your consent, and on nothing else.
04
What the organiser receives if you win
That the organiser is the seller, so when you win they receive the details they need to seat you and to contact you about the event. Exactly which details, and what they do not receive.
05
Marketing, and the consent behind it
That marketing consent is one unticked box, offered after you win, scoped to that organiser alone, recorded with the moment you gave it, and withdrawable at any time.
06
What other bidders can see
That other bidders see your pseudonym and nothing else. Never your name, your email or your maximum. This is enforced in the database rather than in the interface, so no display bug can leak it.
07
Who else handles your data
The services behind the product, what each is used for, and where each one processes data.
09
How long we keep things
How long bids, transactions and the audit log are kept, and why the bid record outlives the rest of it.
10
Your rights, including erasure
Your rights of access, correction, erasure, portability and objection, and the honest limit on the last of those. Bids are append-only because the immutable record is what settles a dispute, so erasure removes your identity from the record rather than the record itself.
11
Where your data goes
Any transfer of data outside the EEA, and the safeguard relied on for it.
12
How to complain
How to raise something with us first, and your right to complain to a supervisory authority whether or not you do.
13
Changes to this policy
How we will tell you when this policy changes, and where to find what it said before.
This page will carry a version number and an effective date once the text is final.