1. Introduction

Welcome to Auction Ace ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us at info@auction-ace.com.

This privacy policy applies to all information collected through our application (Auction Ace), and/or any related services, sales, marketing or events.

2. Age Requirement

Auction Ace is intended for users who are 16 years of age or older. In accordance with GDPR Article 8, we do not knowingly collect personal data from individuals under 16 without verifiable parental consent.

During account setup, we ask for your date of birth to verify you meet the minimum age requirement. If you are under 16, you will not be able to create an account. If a parent or guardian wishes to request an account on behalf of a minor, please contact us at info@auction-ace.com.

If we become aware that we have inadvertently collected personal data from a child under 16 without appropriate consent, we will delete that data promptly.

3. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the application. This includes:

• Personal Info: Name, Email address, Date of Birth (for age verification), and Profile Picture (via Google Sign-In).
• App Activity: Auction history, bidding logs, and team/player management data.
• Device Info: Device tokens for Push Notifications (via Firebase Cloud Messaging).

4. How We Use Your Information

We use your information for legitimate business purposes including:

• Account Management: To create and manage your account and login sessions.
• App Functionality: To facilitate live auctions, process bids, and manage teams.
• Notifications: To send you real-time alerts about auctions you participate in (e.g., "You were outbid").
• Security: To protect our services and prevent fraud.

5. Third-Party Data Processors

We act as the data controller and engage the following sub-processors to operate our application. Each processor has an applicable Data Processing Agreement (DPA) in place with us. By using Auction Ace, you acknowledge that your data may be processed by these parties in accordance with their own privacy terms:

For data transfers outside the EEA, these processors rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms approved by the European Commission.

6. Account Deletion

You have the right to request the deletion of your account and all associated data at any time.

You can initiate this process directly within the application:

1. Navigate to your Profile.
2. Select Delete Account.
3. Confirm the action to permanently remove your personal data from our systems.

Alternatively, you may email info@auction-ace.com to request data deletion. Upon deletion, all your personal identifiable information (PII) will be removed, though non-identifiable auction logs may be retained for system integrity.

7. Device Permissions

The app may request access to certain device features:

• Notifications: To send alerts about auction activity.
• Camera/Storage: To upload profile pictures or team logos.

8. Data Retention

We retain your personal information only as long as your account is active or as needed to provide you services. If you delete your account, your personal information is removed from our live databases following standard deletion protocols.

9. Security

We have implemented appropriate technical and organizational security measures via Google Cloud Platform to protect your personal information. However, please remember that no transmission over the internet is 100% secure.

10. Your Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Data Portability: Download your data in a structured, machine-readable format directly from your Profile page.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Object: Object to processing of your personal data in certain circumstances.

To exercise any of these rights, email us at info@auction-ace.com. We will respond within 30 days.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will:

• Notify the relevant supervisory authority (e.g., the ICO in the UK or the applicable EU Data Protection Authority) within 72 hours of becoming aware of the breach, where feasible.
• Notify affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
• Document all breaches internally, including those that do not require notification, in accordance with Article 33(5) GDPR.

Notifications to affected users will be sent to the email address associated with your Auction Ace account. To ensure you receive important security notices, please keep your account email up to date.

If you believe your personal data has been compromised, please contact us immediately at info@auction-ace.com with the subject line "Security Incident".

12. Updates To This Notice

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible.

13. Contact Us

If you have questions, concerns, or wish to exercise your data rights, please contact us:

For GDPR subject access requests, data portability requests, or erasure requests please include "GDPR Request" in the subject line of your email.