1.Introduction
This Privacy Policy explains how Auctionhouse, MB ("AuctionHouse", "we", "us") collects, uses and shares personal data when you use the AuctionHouse marketplace and related services (the "Platform"), and the rights you have. We are the data controller for that processing. Terms not defined here have the meaning given in our Terms of Service.
2.Who we are
The data controller is Auctionhouse, MB, a company registered in Lithuania (company code 308097132). For any privacy question, or to exercise any of the rights described below, contact us at admin@auctionhouse.pro and we will respond within one month. Our registered address is in "Contact" at the end of this policy.
3.Data we collect
Depending on how you use the Platform, we collect:
- Account data — your username, email address, password (stored only as a secure hash), and any display name, bio, country or avatar you add.
- Authentication data — where you sign in with a third-party provider (such as Google or Discord), the identifier that links your account to that provider.
- Transaction data — orders, listings, payments, payment and delivery status, disputes, reviews, and your completed-sales history (which determines your seller tier).
- Payment data — handled by our payment providers; we receive limited confirmation and reference data, not full card numbers. Where you are paid in crypto-assets, we store the payout address you give us and the network you choose, so we can send your money and evidence that we did.
- Selling identity and team data — the shop you sell through, who else may act for it, and what they are permitted to do.
- Communications — messages you send to other users or to support, and reports you file.
- Usage and device data — IP address, device and browser information, pages viewed, when you were last active, and similar diagnostic data collected automatically, including through cookies and similar technologies.
- View measurement — so sellers can see how their listings are performing, we record that a listing or profile was viewed, once per viewer per day. Signed-in views are recorded against your account; for everyone else we store only a short code derived from IP address and browser, which we never publish and use only to avoid counting the same visitor twice.
4.Identity and verification data
Where required for Seller, Shop, payout, fraud-prevention or regulatory verification, we may collect or process information such as:
- legal name;
- date of birth;
- country and address;
- identity verification information;
- business registration information;
- company representatives or beneficial ownership information;
- verification status;
- fraud and risk assessment information.
Some identity or payment verification information may be collected directly by our third-party verification or payment providers. In those cases, AuctionHouse may receive only the verification result, or limited information necessary to operate the Marketplace.
5.Payment providers
Payments may be processed by third-party payment service providers. Depending on the payment method selected, these providers may independently collect and process payment, identity, fraud-prevention or compliance information.
6.How and why we use your data
We process personal data to:
- provide the Platform — create your account, publish listings, process orders, operate payment protection and payouts, and enable messaging (legal basis: performance of a contract);
- keep the marketplace safe — verification, moderation, fraud and abuse prevention, and enforcing our Terms (legal basis: legitimate interests, and legal obligation where applicable);
- process payments and payouts, and comply with financial, tax, anti-money-laundering and sanctions obligations — including verifying sellers and reporting seller income to the tax authority (legal basis: legal obligation and contract);
- measure how listings and profiles perform, so sellers can see their own results (legal basis: legitimate interests);
- communicate with you about orders, security and service changes (legal basis: contract and legitimate interests);
- improve and secure the Platform, including analytics and diagnostics (legal basis: legitimate interests);
- send optional marketing, only where you have opted in, which you can withdraw at any time (legal basis: consent).
7.Who we share data with
We share personal data with:
- other users, as needed to complete a transaction — for example a Buyer and Seller see each other's username, ratings and the information required to fulfil an order;
- payment providers and crypto-asset payment processors that handle transactions and payouts;
- the identity-verification provider that carries out seller checks on our behalf;
- tax authorities — EU rules for online platforms (DAC7) require us to report each year, to the Lithuanian State Tax Inspectorate (VMI), who our sellers are and what they earned on the Platform, and to keep the underlying records;
- infrastructure and service providers who host and operate the Platform on our behalf under appropriate contracts;
- other people acting for the same shop as you, who can see that shop's listings, orders and messages;
- authorities, advisers or acquirers where required by law, to enforce our Terms, to protect rights and safety, or in connection with a corporate transaction.
We do not sell your personal data.
8.International transfers
Some of our providers may process data outside your country or the European Economic Area. Where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. Contact us for more detail on the safeguards used.
9.Cookies and similar technologies
We use cookies and similar technologies that are strictly necessary to run the Platform (such as keeping you signed in), and, subject to your choices where required, others that help us measure and improve the service. You can control non-essential cookies through your browser or any cookie controls we provide.
10.How long we keep data
We retain transaction, payment and financial records for as long as reasonably necessary to provide our services, and for the periods required by applicable accounting, tax, fraud-prevention, dispute-resolution and other legal obligations.
Other personal data is retained only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.
11.Your rights
Subject to applicable law, you have the right to access, correct, delete or restrict the processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. You can exercise many of these directly in your account settings, or by contacting us.
If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority. We ask that you contact us first so we can try to resolve your concern.
12.Security
We use technical and organisational measures designed to protect personal data — including encryption in transit, hashing of credentials, access controls, and encryption of sensitive delivery content at rest. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond to incidents appropriately.
13.Children
The Platform is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has provided us with personal data, contact us and we will take appropriate steps to delete it.
14.Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date and, for material changes, take reasonable steps to notify you.
15.Contact
For privacy questions or to exercise your rights, contact admin@auctionhouse.pro or use our contact page. Auctionhouse, MB, company code 308097132, Vaduvos g. 21, LT-02305 Vilnius, Lithuania.