Privacy Policy

1. Responsible Party

Barberton Bidding Battles (Pty) Ltd ("BBB", "we", "us") is the responsible party for the processing of your personal information as defined under POPIA. Contact our Information Officer at: privacy@barbertonbidding.co.za

2. Information We Collect

• Full name, email address, and phone number (for account creation and verification)
• Banking account details (for seller payouts — encrypted at rest)
• Government ID (optional, for high-value bids over R2,500)
• Device fingerprint and IP address (for fraud prevention)
• Listing photos, descriptions, and transaction history
• Communication with BBB support and dispute records

3. Purpose of Processing

We process your personal information to:

• Verify your identity and comply with anti-fraud obligations
• Facilitate auction listings, bids, and transactions
• Process payments and payouts via our escrow system
• Resolve disputes and enforce platform rules
• Send transactional notifications (outbid, won, collection reminders)
• Comply with legal obligations under South African law

4. Sharing of Information

We do not sell your personal information. We may share it with:

• Payment processors (for escrow and payouts — TradeSafe / PayFast)
• SMS providers (for OTP verification — Africa's Talking / Twilio)
• Law enforcement, where required by law or court order

Limited profile information (name, pickup area, seller rating) is visible to other users of the platform as necessary for auction transactions.

5. Security

Banking details are encrypted at rest. All data is stored within Supabase's secure infrastructure. We employ row-level security, audit logging, and access controls. No system is 100% secure — please report any suspected breach immediately.

6. Your Rights (POPIA Section 23)

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Object to the processing of your personal information
• Request deletion of your account and data (subject to legal retention obligations)

Submit requests to: privacy@barbertonbidding.co.za

7. Retention

Transaction records are retained for 5 years as required by the Financial Intelligence Centre Act. Account information is retained for the duration of your account plus 1 year after closure. Audit logs are retained for 3 years.

8. Complaints

If you believe your rights under POPIA have been violated, you may lodge a complaint with the Information Regulator of South Africa: inforeg.org.za