Privacy Policy
Last updated: 1 April 2026
We don't sell your data
Your personal information is never sold to third parties, ever.
Full transparency
We tell you exactly what we collect and why in plain language.
You're in control
You can request, export, or delete your data at any time.
Secure by default
All data is encrypted in transit and at rest using AES-256.
Your privacy matters to us. This policy explains what data we collect, how we use it, and the choices you have. We're committed to being fully transparent.
1. What We Collect
We collect information you provide directly to us, such as your name, email address, phone number, billing details, and any information you submit when creating an account, completing a purchase, or contacting support. We also automatically collect certain technical data when you use our Platform, including your IP address, browser type, device identifiers, pages visited, and interactions with live streams and auctions. This is used to improve platform performance and security.
2. How We Use Your Information
Your information is used to: operate and improve the BidsRush Platform; process transactions and send related communications; verify your identity and prevent fraud; personalise your experience and recommend relevant auctions; send promotional communications (with your consent); comply with legal obligations; and resolve disputes and enforce our agreements. We process your data on the legal bases of contract performance, legitimate interests, and your consent where required.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymise your data within 90 days, except where we are required by law to retain it (e.g., transaction records for tax purposes, which are kept for 7 years). Backup copies may persist for up to 30 additional days before being purged from all systems.
6. Your Rights
Under GDPR and applicable data protection laws, you have the right to: access your personal data; correct inaccurate data; request deletion of your data ('right to be forgotten'); restrict or object to processing; data portability (receiving your data in a machine-readable format); and withdraw consent at any time without affecting prior processing. To exercise any of these rights, contact privacy@bidsrush.com. We will respond within 30 days.
7. Children's Privacy
BidsRush is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child has provided us with personal information, we will take immediate steps to delete it. If you believe a child has submitted data to us, please contact us immediately at privacy@bidsrush.com.
8. Security Measures
We implement industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for data at rest, regular penetration testing, multi-factor authentication options, and strict internal access controls. Despite these measures, no system can guarantee absolute security. In the event of a data breach that poses a high risk to your rights, we will notify you and relevant authorities within 72 hours as required by law.
9. Policy Changes
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email and display a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of BidsRush after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
10. Contact & DPO
Our Data Protection Officer (DPO) can be reached at privacy@bidsrush.com. You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. Our registered address is: BidsRush Ltd, 20 Finsbury Street, London, EC2Y 9AQ, United Kingdom.