Privacy Policy

Introduction

SecondBloom Auctions ("SecondBloom," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our online marketplace platform.

Our headquarters are located at:

By using our Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.

Information We Collect

Information You Provide Directly

• Account Information: Name, email address, username, password, phone number, and business information
• Profile Information: Company details, equipment preferences, and biographical information
• Payment Information: Credit card details, bank account information, billing address (processed by Stripe)
• Transaction Data: Bidding history, purchase history, sales records, and payment transactions
• Communications: Messages between users, support tickets, and feedback
• Verification Documents: Business licenses, tax documents, and identity verification materials
• Listing Content: Equipment descriptions, photos, videos, and pricing information

Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, features used, search queries, click data, and interaction patterns
• Location Data: Approximate location based on IP address, and precise location if you enable location services
• Cookies and Tracking: Session cookies, persistent cookies, and similar tracking technologies
• Log Data: Server logs, error reports, and performance metrics

Information from Third Parties

• Payment Processors: Transaction confirmations and payment status from Stripe
• Social Media: Profile information if you connect social media accounts
• Business Verification: Business data from verification services
• Analytics Providers: Aggregated usage statistics and trends

How We Use Your Information

We use your information for the following purposes:

Platform Operations

• Create and manage your account
• Facilitate equipment auctions and transactions
• Process payments and fees
• Verify your identity and business status
• Enable communication between buyers and sellers
• Provide customer support and respond to inquiries

Safety and Security

• Detect and prevent fraud, abuse, and illegal activities
• Monitor and enforce compliance with our Terms of Service
• Protect users' safety and Platform integrity
• Investigate suspicious activities and resolve disputes

Improvements and Personalization

• Analyze usage patterns to improve our services
• Personalize your experience and recommendations
• Develop new features and services
• Conduct research and analytics

Communications

• Send transaction notifications and confirmations
• Provide auction updates and bidding alerts
• Share promotional offers and platform news (with consent)
• Deliver important service announcements

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities
• Contract Performance: To fulfill our contractual obligations when you use our services
• Legal Compliance: To comply with applicable laws and legal obligations
• Legitimate Interests: To pursue our legitimate business interests, such as fraud prevention and platform improvement
• Vital Interests: In rare cases, to protect someone's life or physical safety

How We Share Your Information

We share your information in the following circumstances:

With Other Users

• Public profile information visible to all users
• Transaction details shared between buyers and sellers
• Feedback and ratings on completed transactions
• Equipment listings and auction information

With Service Providers

• Payment Processing: Stripe for secure payment handling
• Cloud Services: AWS/Vercel for hosting and data storage
• Communications: SendGrid for email delivery
• Analytics: Tools to analyze platform usage
• Customer Support: Help desk and ticketing systems

For Legal and Safety Reasons

• To comply with legal obligations, subpoenas, or court orders
• To protect our rights, property, and safety
• To investigate fraud or security issues
• To enforce our Terms of Service

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Data Security

We implement comprehensive security measures to protect your personal information:

• Industry-standard encryption for data in transit and at rest
• Secure servers with regular security updates and patches
• Access controls limiting data access to authorized personnel
• Regular security audits and vulnerability assessments
• PCI DSS compliance for payment processing
• Multi-factor authentication options for account security
• Continuous monitoring for suspicious activities

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to maintaining robust protections.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

• Request a copy of your personal data
• Receive your data in a structured, machine-readable format
• Transfer your data to another service provider

Correction and Deletion

• Update or correct inaccurate information
• Request deletion of your personal data (subject to legal requirements)
• Remove or edit content you've posted

Control and Consent

• Opt-out of promotional communications
• Manage cookie preferences
• Withdraw consent for specific data uses
• Object to certain processing activities

To exercise these rights, contact our Privacy Office at privacy@secondbloomauctions.com or through your account settings.

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records and analytics

When retention is no longer necessary, we securely delete or anonymize your data. Specific retention periods vary based on the type of data and legal requirements.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with service providers
• Compliance with applicable data protection laws

Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will promptly delete it.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to delete personal information (with exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising privacy rights

To exercise these rights, California residents can contact us at privacy@secondbloomauctions.com or call 1-800-SECONDBLOOM.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data processing
• Right to restrict processing
• Right to data portability
• Right to lodge a complaint with supervisory authorities
• Right to withdraw consent at any time

Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by:

• Posting a prominent notice on our Platform
• Sending an email to your registered email address
• Updating the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically to stay informed about our data practices.