Privacy and Security
1.4 We are the controller of the personal data provided to us for the purposes of applicable data protection legislation.
2. Whose personal data do we collect?
2.1 By personal data we mean identifiable information about you, such as your name, email address, gender, age, mobile and home telephone number and your IP address.
Information you provide to us
From time to time you may provide to us personal data. This may be because you wish to:
use our website;
purchase goods from us;
sell or purchase goods through our auction;
apply for a job with us;
provide services to us; or
otherwise contact us including with queries, comments or complaints.
You may provide personal data to us directly, or to us through our social media platforms.
If you provide to us personal data about any other individual, you must have their consent to do so.
All personal data that you provide to us must be true, complete and accurate. If you provide us with inaccurate or false data, and we suspect or identify fraud, we will record this and we may also report this to the appropriate authorities.
At our request, you shall promptly provide evidence of your identity.
When you contact us by email or post, we may keep a record of the correspondence and we may also record any telephone call we have with you.
Information we automatically collect about you
When you use our website, we automatically collect and store information about your device and your activities. This information could include :
technical information about your device such as type of device, web browser or operating system;
your preferences and settings such as time zone and language; and
how long you used the website and which services and features you used.
Some of this information is collected using cookies and similar tracking technologies. If you want to find out more about the types of cookies we use, why, and how you can control them, please see our Cookies Policy.
Information we receive from others
If we reasonably believe that any of the personal data you have provided to us is inaccurate, we may receive further personal data from third parties confirming or otherwise, your identity.
We may also receive personal data about you from third parties such as our payment providers and our website security service partners.
3. Lawful use of your personal data
consent (where you choose to provide it);
performance of our contract with you;
compliance with legal requirements; and
legitimate interests. When we refer to legitimate interests we mean our legitimate business interests in the normal running of our business which do not materially impact your rights, freedom or interests.
If you order goods from us, we shall use your personal data to manage your order.
If you participate in an auction, we shall use your personal data to manage your participation.
We may from time to time need to use your personal data to comply with any legal obligations, demands or requirements, for example, as part of anti-money laundering processes or to protect a third party’s rights, property, or safety.
4. Who do we share your data with?
For our legitimate interests, we may share your personal data with our service providers, sub-contractors and agents that we may appoint to perform functions on our behalf and in accordance with our instructions, including payment providers, IT service providers, accountants, auditors and lawyers.
We shall provide our service providers, sub-contractors and agents only with such of your personal data as they need to provide the service for us and if we stop using their services, we shall request that they delete your personal data or make it anonymous within their systems.
If you participate in our auction platform, we may also share your personal data with the buyer or seller of goods you have sold or bought as appropriate if there is a dispute in relation to the sale.
5. Where we hold and process your personal data
Some or all of your personal data may be stored or transferred outside of the European Economic Area (the EEA) for any reason, including for example, if our email server is located in a country outside the EEA or if any of our service providers are based outside of the EEA
Where your personal data is transferred outside the EEA, it will only be transferred to countries that have been identified as providing adequate protection for EEA data or to a third party where we have approved transfer mechanisms in place to protect your personal data – i.e., by entering into the European Commission’sStandard Contractual Clauses, or by ensuring the entity isPrivacy Shield certified(for transfers to US-based third