DOMAIN AUCTIONS

1. Controller and Scope
The data controller responsible for processing personal data on this website is:
Bido.com, LLLC
Email: privacy [at] bido.com
This platform is designed for international audience from all and any countries. We do not specifically target users in the EU.


2. Definitions
For the purposes of this Privacy Policy:

• “Account” means a user account created to access our platform.
• “Personal Data” means any information relating to an identified or identifiable individual.
• “Service Provider” means a third party that processes data on our behalf or provides services related to the platform.

3. Data We Collect
We collect and process the following categories of personal data:

• Account data: name, address, country
• Contact data: email address, phone number
• Transaction data: payout-related details (e.g. PayPal email, bank account details)
• Technical data: IP address, session data, and basic log information, collected in a limited manner for security and fraud prevention purposes
• Marketplace data: domain names listed, bought, or sold via the platform

We may also process publicly available domain-related data, including WHOIS data, DNS records, and hosting provider information.


4. Purpose of Processing
We process personal data for the following purposes:

• Providing and operating the domain marketplace
• Managing user accounts and listings
• Facilitating transactions between users (buyers and sellers)
• Preventing fraud, abuse, and unauthorized use of the platform (including limited use of IP address logging)
• Processing payments and payouts
• Complying with legal obligations (e.g. KYC/AML requirements where applicable)

5. Legal Basis (GDPR)
Where the General Data Protection Regulation applies, processing is based on:

• Performance of a contract (Art. 6(1)(b))
• Legal obligations (Art. 6(1)(c))
• Legitimate interests (Art. 6(1)(f)), in particular for fraud prevention and platform security

6. Cookies
We use only essential cookies necessary for the operation of the website, including:

• Session cookies
• Basic functionality cookies (e.g. remembering prior visits for internal metrics such as unique views)

We do not use tracking, analytics, or marketing cookies.


7. Data Sharing
We share personal data only where necessary:

• With Service Providers, including payment providers such as PayPal, credit-card processors, and escrow services such as Escrow.com
• With KYC/identity verification providers, where required by law

These providers may act as independent controllers or processors depending on the context.

Transactions Between Users
Users on the platform are generally identified by a nickname or username.
Personal data such as full name, address, or contact details is not publicly visible and is not shared with other users by default.
Such information may be shared with a transaction counterparty only where necessary to complete a transaction, comply with legal obligations, or resolve disputes.
Requests for disclosure are assessed on a case-by-case basis, taking into account applicable legal requirements and the rights of the users involved.


8. Data Storage and Transfers

• Data is hosted on servers located in the EU/EEA
• We do not intentionally transfer personal data outside the EU/EEA
• If transfers occur, appropriate safeguards (e.g. Standard Contractual Clauses) are used

9. Data Retention
We retain personal data only as long as necessary for:

• Contractual purposes
• Legal obligations (e.g. accounting, compliance)
• Fraud prevention and dispute resolution

Technical data, including IP addresses, is retained only for a limited period and only to the extent necessary for ensuring platform security, preventing fraud, and investigating misuse. Such data is not used for tracking users across services or for profiling purposes.

10. Disclosure for Legal Reasons
We may disclose personal data if required to do so by law or if necessary to:

• Comply with legal obligations
• Protect our rights or property
• Prevent or investigate fraud or misuse
• Respond to lawful requests by public authorities

11. Business Transfers
In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction. Users will be informed where required by law.
12. User Rights
Users have the following rights under applicable law:

• Access to their personal data
• Correction of inaccurate data
• Deletion of data (where legally permissible)
• Restriction of processing
• Data portability
• Objection to processing

To exercise these rights, please contact us using the details above.
Users also have the right to lodge a complaint with a supervisory authority, in particular:

• In Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
• In the EU/EEA: their local data protection authority

13. Security
We implement appropriate technical and organizational measures, including:

• Encryption (SSL/TLS)
• Secure server infrastructure
• Access controls

We do not use IP addresses to create user profiles or to track user behavior beyond what is necessary for security purposes.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is published on this website. 15. Contact                         
For privacy-related inquiries, please contact us at email: privacy [at] bido.com