Privacy Policy

1Overview

HeavyBid Inc. ("we," "us," or "our") operates the HeavyBid platform at www.heavybid.com. As a data controller, we are responsible for how your personal data is collected, processed, and stored. This Privacy Policy applies to all users of the HeavyBid website, mobile applications, and related services.

By using HeavyBid, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use our services.

2Data We Collect

We collect the following categories of personal data:

• Account Data: Name, email address, phone number, company name, and country.
• Identity Verification: Government-issued ID, business registration documents, and tax identification numbers (required for bidding above certain thresholds).
• Transaction Data: Bid history, purchases, sales, payment records, and escrow transactions.
• Technical Data: IP address, browser type, device identifiers, operating system, and pages visited.
• Communication Data: Messages exchanged with HeavyBid support or other users through the platform.
• Usage Data: How you interact with the platform, search queries, watchlisted items, and auction activity.

3How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account and verify your identity.
• To process bids, purchases, payments, and facilitate escrow transactions.
• To send transactional emails (auction alerts, bid confirmations, payment receipts).
• To provide customer support and resolve disputes.
• To detect and prevent fraud, abuse, and unauthorized activity.
• To improve the platform through analytics and user behavior analysis.
• To send marketing communications, where you have given consent.
• To comply with legal obligations and law enforcement requests.

4Data Sharing

We do not sell your personal data. We may share it with the following parties:

• Other Users: Limited profile information (username, country, seller rating) is visible to other platform users.
• Payment Processors: Your payment details are shared with our payment processing partners to complete transactions.
• Logistics Partners: Shipping and delivery information is shared with our logistics network when you request shipping services.
• Service Providers: Cloud hosting, analytics, and email delivery providers who process data on our behalf under data processing agreements.
• Legal Authorities: When required by law, court order, or to protect HeavyBid's legal rights.

5Cookies and Tracking

HeavyBid uses cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for the platform to function (authentication, session management).
• Analytics Cookies: Help us understand how users interact with the platform (Google Analytics).
• Preference Cookies: Remember your settings and preferences.
• Marketing Cookies: Used to show relevant advertisements on third-party platforms (only with your consent).

You can manage cookie preferences through your browser settings or our Cookie Consent tool. Note that disabling essential cookies may prevent certain features from working.

6Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this Policy, including legal and regulatory requirements. Specifically:

• Account data is retained for the duration of your account plus 7 years after closure.
• Transaction records are retained for 10 years for tax and legal compliance purposes.
• Communication data is retained for 3 years from the date of last interaction.
• Technical logs are retained for 12 months.

7Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention requirements).
• Portability: Receive your data in a machine-readable format.
• Restriction: Request that we limit processing of your data.
• Objection: Object to processing based on legitimate interests or for marketing purposes.

To exercise any of these rights, please contact privacy@heavybid.com. We will respond within 30 days.

8Data Security

We implement industry-standard technical and organizational measures to protect your data, including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, regular third-party security audits, and access controls limiting data access to authorized personnel. Despite these measures, no system is completely secure, and we cannot guarantee absolute security of your data.

9Children's Privacy

HeavyBid is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact privacy@heavybid.com.

10International Data Transfers

HeavyBid operates globally and your data may be transferred to and processed in countries outside your own, including the United States. We ensure adequate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) for transfers from the European Economic Area, and compliance with the UK GDPR for users in the United Kingdom.

11Contact & Data Protection Officer

For privacy-related inquiries or to exercise your data rights, please contact our Data Protection Officer:

If you are located in the EU and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.