Privacy Policy

Effective: April 2026 · Fidara Solutions Limited (RC 7851834)

Data Controller
Fidara Solutions Limited
Governing Law
Applicable data protection law (see Jurisdiction section)
Classification
Data Controller of Major Importance

1. Who We Are

Auctioneer is operated by Fidara Solutions Limited. We are the Data Controller responsible for the personal data you provide when using the Auctioneer platform at auctioneer.com.ng.

2. What Data We Collect

When you register as a bidder

  • Full name, email address, phone number
  • Bank account details (for refund processing)

When you pay a gate fee

  • Payment transaction reference (not your card details — we do not see or store card data)

When you participate in an auction

  • Assets you bid on, bid amounts, ranked preferences, bid history

When organisations onboard

  • Company name, RC number, TIN, authorised signatory details
  • Settlement bank account, Operations and Finance contact details

Data we generate automatically

  • Anonymised bidder reference ID, auction event logs (millisecond precision)
  • Platform access logs (IP, device, session — retained 90 days)
  • Default/ban records, reputation score

We do not collect your card number, CVV, BVN, or NIN. Card details are handled exclusively by our payment processor.

3. How We Use Your Data

Purpose Legal Basis
Account management, gate fee processing, running auctionsContract performance
Win notifications, payment links, collection coordinationContract performance
Fraud prevention, platform security, audit logLegitimate interest
Default/ban history, reputation scoreLegitimate interest
Marketing communications (if opted in)Consent
Legal obligations (tax, financial records)Legal obligation

4. How We Share Your Data

With listing organisations

When you win an asset, the listing organisation receives your contact details to coordinate collection. Your identity is not disclosed during the live auction.

With our technology partners

Partner Purpose Location
Payment processorPayment processingLocal jurisdiction
Notification providerWhatsApp + SMSLocal jurisdiction
Cloud providerHosting + storageNetherlands (EU)

We do not sell your data. Auctioneer does not sell, rent, or commercially exploit personal data to any third party.

5. How Long We Keep Your Data

Data Period Reason
Account data7 years after last activityLegal obligation
Bid historyPermanentAudit integrity
Payment records7 yearsTax obligation
Collection evidence7 yearsDispute resolution
Device/session logs90 daysFraud prevention
Marketing consentUntil withdrawnConsent basis

6. Your Rights Under Applicable Data Protection Law

Access

Receive a copy of all personal data we hold about you

Rectification

Correct inaccurate data via your profile or DPO

Erasure

Request deletion (subject to legal retention limits)

Restriction

Pause processing of your data

Portability

Receive your data in JSON or CSV format

Object

Object to processing based on legitimate interest

To exercise any right, contact dpo@auctioneer.com.ng. We respond within 30 days.

7. Data Security

  • Encryption in transit (TLS 1.3) and at rest
  • Role-based access controls
  • Multi-factor authentication on all systems holding personal data
  • Regular security reviews and audits

In the event of a data breach, we notify the data protection authority within 72 hours and notify you directly if the breach poses a high risk to your rights.

8. Children

Auctioneer is not intended for persons under 18. We do not knowingly collect personal data from minors.

9. Changes to This Policy

Material changes will be communicated by email to all registered users at least 14 days before they take effect.

10. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the data protection authority in your jurisdiction. We would appreciate the opportunity to address your concern first — contact our DPO at dpo@auctioneer.com.ng.

Questions about this policy?

dpo@auctioneer.com.ng