Privacy Policy

We collect only what is necessary to run a secure, regulated auction platform:

• Account data: Name, email, phone number, and password hash
• KYC documents: Government-issued ID, proof of address, and BVN — required for regulatory compliance
• Payment data: Transaction references and refund details. Card and bank data is handled exclusively by Paystack and never stored on our servers
• Auction activity: Bids placed, auctions won or listed, and deposit history
• Usage data: IP address, browser type, and pages visited — collected automatically

Your data is used strictly to operate and protect the Platform: managing your account, processing bids and payments, verifying identity under AML/CFT law, sending transactional emails, and detecting fraud. We do not sell your data. Marketing emails are opt-in only and can be withdrawn at any time.

We share your data only where necessary: with Paystack for payment processing, KYC verification providers, cloud hosting infrastructure, and Nigerian regulatory authorities (NITDA, NFIU, EFCC) where legally required. We do not share data with advertisers or data brokers.

Under the NDPR 2019, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any right, contact our DPO — we respond within 30 days. You may also file a complaint with NITDA if you remain unsatisfied.

We protect your data with TLS encryption in transit, AES-256 encryption at rest, bcrypt password hashing, and role-based access controls. KYC records are retained for 5 years and financial records for 7 years as required by Nigerian law. If a breach poses a high risk to your rights, we will notify you and NITDA within 72 hours.

For privacy questions or data requests, contact our Data Protection Officer at privacy@eauctionng.com. Our office is located in Abuja, Federal Capital Territory, Nigeria. You may also review our Terms & Conditions for the full legal framework.