Privacy notice
How BID4SALVAGE collects, uses and protects your personal data under India's Digital Personal Data Protection Act, 2023.
1. Who we are
BID4SALVAGE ("we", "us") runs an online e-auction portal for surplus, salvage and scrap materials. For the personal data described here we are the Data Fiduciary: we decide why and how it is processed. Registered office: New Delhi, India.
2. What we collect and why
| Personal data | Purpose | Basis |
|---|---|---|
| Name, firm name, email, mobile number, address, city, state | Create and manage your account, contact you about auctions you take part in | Your consent |
| GST number, PAN | Verify the business, issue invoices, meet tax obligations | Your consent and legal obligation |
| Identity or address proof you upload | Verify who you are before you can bid | Your consent |
| Bids, favourites, private auction access, awards | Run auctions fairly, decide winners, keep an auction record | Your consent and legal obligation |
| Security deposit entries (amount, bank reference) | Hold, adjust and refund deposits, keep financial records | Your consent and legal obligation |
| Messages you send us (contact and grievance forms) | Reply to you and resolve your request | Voluntary provision |
| Login time, sign-in attempts, technical logs (IP address kept for up to 24 hours) | Keep the service secure and stop abuse | Legitimate security need |
We collect only what these purposes need. GST and PAN are optional at registration but may be required before you can win or pay for a lot.
3. Your consent
We ask for your consent in plain language when you register, before we process your data. It is a clear, voluntary action: a ticked box that is never pre-ticked. You can see the consent you gave, and withdraw it at any time, under My account, Privacy and data. Withdrawing consent is as easy as giving it: it closes your account and erases your personal data (see section 7). We will ask again if this notice changes in a material way.
4. Who receives your data
- Our staff, to verify accounts and run auctions.
- The seller, insurer or surveyor of a lot you win: your name, firm and contact details, so the sale can be completed.
- Companies on an auction's watchlist (for example the seller) can follow the live auction. They see bids and ranking only as "Bidder 1, 2, 3" and never your name, firm or contact details.
- Cloudflare, Inc., our hosting and storage provider, processes data on our behalf under contract. Pages, fonts and scripts are served from our own domain; no advertising, analytics or social-media trackers are loaded.
- Authorities, where the law requires it.
We do not sell your personal data.
5. Where your data is stored
Data is stored on Cloudflare infrastructure, which may include servers outside India. We transfer data only to the extent needed to operate the service and not to any country the Government of India has restricted.
6. How long we keep it
| Data | Retention |
|---|---|
| Active account details and uploaded documents | For as long as your account is active |
| Bids, awards and deposit ledger | Retained after erasure without identifying you, for as long as law requires financial and auction records to be kept |
| Identity documents of rejected applicants | Deleted 90 days after the decision |
| Accounts never approved and never used | Erased after 180 days |
| Contact form messages | Deleted after 12 months |
| Sign-in attempt records and IP-based limits | Deleted within 24 hours |
| Consent records and privacy requests | Kept as proof of your choices and our replies, without your contact details after erasure |
7. Your rights
- Access: download a summary of the personal data we hold about you, and how it is used, from My account, Privacy and data.
- Correction and updating: edit your details under Profile, or send us a correction request.
- Erasure: request erasure under Privacy and data. We erase your identity details, documents and sign-ins. If you are leading a running auction, hold an uncompleted award or still have a deposit with us, we complete those first and tell you what is pending. Bids, awards and the deposit ledger are kept without identifying you, because the law requires such records.
- Nominate someone: name another person who may exercise these rights for you if you die or cannot act.
- Grievance redressal: raise a complaint any time on our grievance page. We acknowledge it at once and aim to resolve it within 30 days, and never later than 90 days.
- Withdraw consent: at any time, as described in section 3.
To keep your account safe we may ask you to confirm your password before acting on a request.
8. Children
BID4SALVAGE is for businesses and adults. You must be 18 or older to register, and we ask you to confirm this. We do not knowingly process the personal data of children. If you think a child has registered, tell us and we will erase the account.
9. How we protect your data
Passwords are stored only as salted hashes. Sessions use random tokens and expire. Identity documents are kept in private storage and are visible only to authorised staff. Access is limited by role, requests are checked against cross-site abuse, and uploads are screened. If a personal data breach occurs, we will notify the Data Protection Board of India and each affected person as the law requires, and keep a record of it.
10. Cookies and similar technologies
We use one essential cookie to keep you signed in, and your browser's session storage to remember small display choices such as a minimised panel. We use no advertising or analytics cookies, so there is no cookie banner to accept.
11. Grievance Officer
Mr. Yogesh Kumar
BID4SALVAGE, New Delhi, India
Email: Bid4salvage@gmail.com
Phone: +91 92506 08136 (Mon to Sat, 10:00 AM to 6:00 PM IST)
12. Complaints to the Board
If you are not satisfied with our reply to your grievance, you may complain to the Data Protection Board of India once you have used our grievance process.
13. Changes to this notice
We will post changes here with a new version number and effective date, and ask you to review and accept material changes the next time you sign in.