What we hold, and what we do with it

01What we collect

Three categories, nothing else:

• Account data — name, email, phone, hashed password, and an ID number for verified bidders. You give us this at registration.
• Bidding data — bids placed, lots watched, proxy maximums, invoices issued, events attended. Generated as you use the service.
• Technical data — IP address, browser, device type, log timestamps and a session cookie. Captured to keep the platform running and secure.

02How we use it

To run the auction, contact you about lots and invoices, prevent fraud, and meet obligations under anti-money-laundering and tax law. That is the whole list.

03Sharing

Only with parties we cannot run the service without:

• Lenders who consigned a lot you won — to transfer title and arrange handover.
• Payment processors handling transactions on our behalf.
• Carriers, if you book transport through us.
• Authorities, when compelled by valid legal process.

Every recipient is bound by a written data-handling agreement, and each gets the minimum needed to do the job.

04Cookies

One session cookie to keep you signed in, and a CSRF token cookie to block cross-site forgery. No third-party advertising cookies, no behavioural pixels. Clear them whenever you like — you will simply sign in again.

05Retention

Account and transaction records are kept for seven years after an account closes, in line with US financial-record rules. Technical logs roll off after ninety days. To close an account, write to legal@circle365.com and we handle it inside thirty days.

06Your rights

You can access, correct, export or delete your personal data by writing to us. Where GDPR or CCPA applies you can also object to or restrict processing. Rights requests are answered within thirty days, free of charge.

07Security

Passwords are hashed with bcrypt, the site runs over TLS, and database backups are encrypted. Access is monitored continuously. If a breach affects you, we notify you within seventy-two hours of confirming it.

08Contact

Questions, requests or concerns about privacy go to legal@circle365.com. For everything else, use the contact page.