We value your privacy and are committed to protecting your personal data.

1. Important Information and Who We Are

EquiBid is the controller and responsible for your personal data (referred to as “Equibid”, “we”, “us” or “our” in this policy).

Contact Email: hello@equibid.uk

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, including:

• Identity Data: Name, username, and date of birth (for age verification).

• Contact Data: Billing address, delivery address, email address, and telephone numbers.

• Financial Data: Payment card details (processed via secure third-party gateways).

• Transaction Data: Details about payments to and from you and details of items you have bid on or purchased.

• Technical Data: IP address, login data, browser type, and location.

• Usage Data: Information about how you use our website and auction platform.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use it in the following circumstances:

• Performance of a Contract: To register you as a new customer and process your auction bids/purchases.

• Legitimate Interests: To improve our services, manage our relationship with you, and keep our site secure.

• Legal Obligation: Where we need to comply with UK law (e.g., tax records or anti-fraud checks).

4. Cookies and Tracking (2026 Update)

Under the Data (Use and Access) Act 2025, we utilize specific exemptions for “low-risk” cookies.

• Essential Cookies: Required for the site to function (e.g., keeping you logged in during a live auction).

• Analytics Cookies: We use these to collect statistical information about site usage to improve our platform. These are now exempt from consent under the 2025 Act provided they are used solely for our own statistical purposes.

   

• Marketing Cookies: We still require your explicit consent for any cookies used for targeted advertising or third-party tracking.

5. Data Sharing

We may share your data with:

• Service Providers: Payment processors (e.g., Stripe/PayPal) and delivery/logistics companies.

• Regulators: HM Revenue & Customs or other authorities if required by law.

6. Your Legal Rights

Under UK GDPR, you have the right to:

• Request access to your personal data.

• Request correction of inaccurate data.

• Request erasure of your data (the “right to be forgotten”).

• Object to processing of your data.

• Request restriction of processing.

• Request transfer (data portability).

7. Formal Complaints Procedure

As of June 2026, UK law requires a formal process for data complaints. If you have a concern about how we handle your data:

1. Submit a Complaint: Email [Insert Email] with the subject “Formal Data Complaint”.

2. Acknowledgment: We will acknowledge your request within 30 days.

3. Investigation: We will investigate and provide a full response without undue delay.

4. Escalation: If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk)