Privacy Policy

Last updated: 15 February 2026

Shiftt Auctions ("Shiftt", "we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our silent auction platform and related services.

1. Information We Collect

Information you provide directly:

• Account information — name, email address, and display name when you register or participate in an auction.
• Contact form submissions — name, email, and message content when you use our contact form.
• Bidding activity — bids placed, items won, and auction participation history.
• Payment information — payment details are collected and processed by our payment provider, Stripe. We do not store your full card details on our servers.

Information collected automatically:

• Device and browser data — IP address, browser type, operating system, and device identifiers.
• Usage data — pages visited, features used, and interaction patterns.
• Cookies and similar technologies — we use cookies for authentication, preferences, and analytics.

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our auction platform.
• Process bids, manage auction results, and facilitate payments.
• Send transactional notifications (bid confirmations, outbid alerts, winning notifications).
• Respond to enquiries and provide customer support.
• Improve our platform and develop new features.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

3. Information Sharing

We do not sell your personal information. We may share your information with:

• Auction organisers — event hosts receive bidder names and winning bid details for items in their auctions.
• Payment processors — Stripe processes payments on our behalf and is subject to their own privacy policy.
• Service providers — third-party vendors who assist with hosting, analytics, error monitoring, and email delivery.
• Legal requirements — when required by law, regulation, or legal process.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for all data in transit.
• Secure authentication via magic link (passwordless) login.
• Regular security reviews and monitoring.
• Access controls limiting employee access to personal data.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Auction records (bids, results) are retained for a reasonable period to support organisers and for legal compliance. You may request deletion of your account and associated data at any time by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing of your data.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at the details below.

7. Cookies

We use cookies and similar technologies for:

• Essential cookies — required for authentication and core platform functionality.
• Analytics cookies — help us understand how the platform is used so we can improve it.

You can control cookies through your browser settings, though disabling essential cookies may affect platform functionality.

8. Third-Party Services

Our platform integrates with third-party services that have their own privacy policies:

• Stripe — payment processing (stripe.com/privacy)
• Sentry — error monitoring and performance tracking
• Web3Forms — contact form submissions

9. Children's Privacy

Our platform is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the contact form on our website.