Privacy and Cookies Policy

1. General provisions

This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with the use of the HandmadeBid auction platform (hereinafter: the “Service”). The Service is used to conduct live auctions of handicrafts, jewellery and unique items during video broadcasts, serving both sellers and buyers.

2. Data controller

The Controller of your personal data is HandmadeBid. For matters related to personal data protection you can contact us at: handmadebid@gmail.com.

3. What data do we process and for what purpose?

Depending on your role in the Service (Guest, Bidder/Buyer, Seller), we collect different categories of data:

• Registration data: first name, last name, e-mail address, encrypted password. Purpose: creation and maintenance of a user account (Art. 6(1)(b) GDPR).
• Transactional and billing data: shipping address, phone number, bank account details (in the case of sellers), history of won items. Purpose: generating post-auction summaries, sharing data for offline bank transfers, processing shipments (Art. 6(1)(b) and (c) GDPR).
• Technical and session data: IP address, server logs, data from WebSockets connections (used to synchronise auction timing). Purpose: ensuring platform stability, fraud prevention (Anti-Sniping) and security (Art. 6(1)(f) GDPR).
• Data from Facebook (if applicable): in the case of video integration (Facebook Live) or logging in via Facebook, we may process your public profile and e-mail address provided by the Meta platform.

4. Recipients of personal data

Your data may be transferred to the following entities:

• Sellers: if you win an auction, the Seller (auction organiser) will receive your data necessary to ship the goods and settle the transaction.
• Hosting service providers: to maintain the Service’s server infrastructure.
• Facebook (Meta Platforms, Inc.): in connection with embedding Facebook Live broadcasts and/or the integration of social plugins. We note that the video is merely embedded, and the entire bidding mechanics take place on HandmadeBid servers.

5. User rights (GDPR)

Under GDPR regulations you have the following rights:

• The right to access your data and receive a copy of it.
• The right to rectify (correct) your data.
• The right to erase data (the right to be forgotten) — details in section 6.
• The right to restrict data processing.
• The right to object to processing.
• The right to data portability.
• The right to lodge a complaint with a supervisory authority (e.g. the President of the Personal Data Protection Office).

6. Data deletion instructions

In accordance with the Facebook (Meta) platform regulations, every user has the right to completely delete their data associated with the HandmadeBid Service application. To delete your data, follow the steps below:

1. Log in to your Facebook account.
2. Go to Settings & Privacy › Settings.
3. In the left-hand menu select Apps and Websites.
4. Find the HandmadeBid app on the list of active or removed apps.
5. Click the Remove button next to the app name.

Alternatively, you can request the complete deletion of your account and data from our servers by sending an e-mail to handmadebid@gmail.com with the subject “Account data deletion”. Your data will be removed from our database within 14 business days, unless the law requires longer retention (e.g. billing documentation with sellers).

7. Cookies policy

The Service uses cookies to:

• Ensure the proper functioning of the platform (session maintenance, CAPTCHA security).
• Support the real-time bidding mechanism.
• Save user preferences and collect anonymous statistical data.

The User can block or delete cookies at any time using their web browser settings.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. Data transmitted during bidding is encrypted using the SSL protocol, and access to the auction logic is secured (e.g. through verification sliders).

9. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy, including in connection with the planned development of the Service (e.g. the introduction of automated payment gateways and a commission model). We will notify Users of any changes in advance on the Service’s pages.