SPORTSBID — PRIVACY POLICY
(EU GDPR & UK GDPR)
Effective date: July 1, 2026
This Privacy Policy explains how BESTONLINEAUCTION Inc. (“we,” “us,” “our”) collects and processes personal data through the SportsBid platform and application. It forms part of the SportsBid Terms & Conditions. For individuals located in the EU/EEA and the United Kingdom, the EU General Data Protection Regulation (GDPR) and the UK GDPR apply.
1. Controller and contact
Data controller: BESTONLINEAUCTION Inc., 333 Bay Street, Suite 3400, Toronto, ON M5H 2S7, Canada. Email: info@bestauction.com.
2. Personal data we collect
Identity and account: name, email address, password, country.
Billing and transaction: billing address, bids placed, items bought or sold, and payout details.
Payment: payments are processed by Stripe; we receive transaction results and limited metadata and do not store full payment-card numbers.
Listings and content: descriptions, condition notes and images you submit.
Communications: messages, support tickets and chat.
Technical and usage: IP address, device and browser data, log data and cookie identifiers.
3. Purposes and legal bases (Art. 6 GDPR)
Provide the Platform — operate accounts, run auctions, process payments and facilitate delivery: performance of a contract (Art. 6(1)(b)).
Comply with law — tax, accounting, anti-money-laundering and similar duties: legal obligation (Art. 6(1)(c)).
Protect the Platform — prevent fraud and chargeback abuse, ensure security, administer and improve the service, and recover sums owed: legitimate interests (Art. 6(1)(f)).
Marketing to existing customers about similar services: legitimate interests, with an opt-out in every message.
Marketing to others and non-essential cookies — consent (Art. 6(1)(a)), which you may withdraw at any time.
4. Payment processing (Stripe)
Payment-card and related data are collected and processed by Stripe in its own PCI-DSS-compliant environment, under Stripe’s terms and privacy notice. We receive confirmation of the outcome and limited transaction metadata to operate payouts, refunds and chargebacks. As owner of the Stripe account used for the Platform, we act as merchant of record for payment.
5. Who we share data with
Counterparties to a sale: to complete a transaction we share the data needed to fulfil it — for example, a Buyer’s delivery name and address with the Seller, and relevant details with the Buyer.
Stripe and shipping carriers.
Service providers/processors (hosting, customer support, analytics) acting under data-processing agreements.
Authorities and advisers where legally required, and a successor entity in the event of a reorganisation or sale.
6. International transfers
We are based in Canada and process personal data there. Transfers from the EEA/UK to Canada rely on the European Commission’s adequacy decision for recipients subject to Canada’s PIPEDA (and the corresponding UK recognition) and/or on Standard Contractual Clauses with supplementary measures where required. You may request a copy of the relevant safeguards using the contact details above.
7. Retention
We keep personal data only as long as necessary for the purposes set out above and to meet legal requirements (for example, tax and accounting records, typically up to [●] years) and to handle disputes and chargebacks. When no longer required, data is deleted or anonymised.
8. Your rights
Subject to applicable law, you have the rights to access, rectification, erasure, restriction, data portability, and objection (including to direct marketing and to processing based on legitimate interests), and to withdraw consent at any time. To exercise these rights, email info@bestauction.com. You also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO); in the EU, the data-protection authority of your country of residence.
9. Automated decision-making
We may use automated tools to screen transactions for fraud and chargeback risk. We do not take decisions producing legal or similarly significant effects on you solely by automated means without a lawful basis and appropriate safeguards. [Adjust to reflect actual practice.]
10. Cookies
We use strictly necessary cookies to operate the Platform and, with your consent, analytics and marketing cookies. You can manage your preferences through our cookie banner or Cookie Policy.
11. Children
The Platform is not directed to anyone under 18, and we do not knowingly collect or process the personal data of minors.
12. Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Changes to this Policy
We may update this Policy from time to time and will post the updated version with a revised effective date.
14. Contact
BESTONLINEAUCTION Inc., 333 Bay Street, Suite 3400, Toronto, ON M5H 2S7, Canada — info@bestauction.com. EU and UK representatives as named in Section 1.