Privacy Policy

This Privacy Policy explains how Stone Nola Acquisition, LLC, operator of BidAgain (“we,” “us,” “our”), collects, uses, shares, and protects personal information in connection with www.bidagain.co, our auctions, forms, and our email and text messaging programs (the “Service”).

This policy applies to information collected through the Service. It does not apply to information collected offline, or by third parties — including payment processors and carriers — who operate under their own policies.

Section 01Information we collect

Information you give us

• Identifiers: first and last name, email address, mobile telephone number, postal address and ZIP code, date of birth.
• Account and transaction information: bids placed, maximum bids, watchlist, lots won, invoices, shipping selections, and pickup details.
• Payment information: payment card details are collected and stored by our PCI-compliant payment processor; we hold only a token, the card type and last four digits.
• Consent records: the exact consent language displayed to you, the page URL, and the date and time you submitted, together with your IP address and browser user agent. We keep this as proof of consent under the Telephone Consumer Protection Act and as evidence that you accepted our Terms.
• Correspondence: anything you send us by email, phone, SMS, or the contact form, including call recordings where the call is monitored or recorded.

We do not ask for and you should never send us your Social Security number, driver's licence number, or bank account details through this site, except where we request a resale certificate or verify identity for a high-value lot.

Information collected automatically

• IP address, approximate location derived from it, device type, operating system, browser type and version, screen size.
• Referring URL, pages and lots viewed, searches, time on page, clicks, and exit pages.
• Tracking parameters appended to inbound links (for example campaign and click identifiers) used to attribute traffic and detect fraud.
• Cookies and similar technologies as described in section 5.

Information from third parties

We may receive information from payment processors (transaction outcomes and fraud signals), identity and address verification services, carriers (delivery status), and data validation services that verify a phone number's line type or confirm an email is deliverable.

Section 02How we use your information

• To operate your account, run auctions, process bids, issue invoices and take payment.
• To arrange pickup, shipping and delivery of lots you win.
• To contact you about your bids, watchlist, invoices, and account by email, and by SMS where you have consented.
• To send you marketing about BidAgain auctions and offers where permitted, with an unsubscribe in every message.
• To verify identity and contact details, and to detect and prevent fraud, shill bidding, and non-payment.
• To honour opt-outs and maintain suppression lists.
• To operate, secure, debug, and improve the Service.
• To comply with legal obligations, respond to lawful requests, and establish or defend legal claims.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you, other than automated fraud screening of payments, which you can ask us to review.

Section 03How we share your information

We share personal information in these circumstances:

• Sellers. Where a lot is consigned by a third-party Seller, we share the winning bidder's name and contact details only as needed to arrange release or pickup of the lot.
• Service providers. Hosting, CDN, analytics, payment processing, email and SMS delivery, shipping carriers and freight brokers, CRM, identity and address verification, and fraud prevention vendors, acting on our instructions.
• Legal and safety. Where required by law, subpoena, or regulator, or to protect the rights, property, or safety of any person, including to pursue unpaid invoices.
• Corporate transactions. In connection with a merger, financing, acquisition, or sale of assets, subject to this policy.

We do not sell your personal information. We do not share information collected solely through our SMS program — such as your opt-in status or message content — with third parties or affiliates for their own marketing purposes. Mobile opt-in data and consent are never sold or shared with third parties for marketing.

Section 04SMS, calls, and email

Where you have given your express consent, we may contact you at the number you provided using an automatic telephone dialing system, artificial or prerecorded voice, and SMS text messages. Consent to marketing contact is never a condition of registering, bidding, or purchasing any goods or services. Transactional emails (outbid notices, invoices, pickup instructions) are sent to every account holder as part of the Service.

• Frequency: varies with your watchlist and bidding activity.
• Cost: message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
• Stop: reply STOP to any message. You will receive one confirmation and no further messages from that program.
• Help: reply HELP, email support@bidagain.co, or call +1 (850) 684-4091.

Calls may be monitored or recorded for quality assurance and compliance. Recordings are treated as personal information under this policy.

Section 05Cookies and similar technologies

We and our vendors use cookies, pixels, local storage, and server logs. Categories used:

• Essential. Required for the site to function — session handling, keeping you signed in, security, load balancing, and fraud prevention. These cannot be turned off.
• Performance and analytics. Aggregate measurement of traffic, page performance, and where visitors drop off, so we can fix what's broken.
• Functionality. Remembering preferences such as your sort order, filters, and recently viewed lots.
• Advertising and attribution. Measuring which campaigns produce visits, capping ad frequency, and detecting click fraud. These may be set by third parties and may involve sharing an identifier for cross-context behavioural advertising.

Managing cookies. Every major browser lets you block or delete cookies; check its help pages. Blocking essential cookies will break parts of the Service. You can also opt out of many advertising cookies through the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org). We honour the Global Privacy Control signal as a valid opt-out of sale and sharing where required by law.

Section 06Third-party advertising partners

Third-party ad networks and measurement providers may use cookies, pixels, or web beacons on the Service, or on sites that link to it, to serve and measure advertising. Their use of your information is governed by their own privacy policies, not this one. We do not control those technologies and cannot manage their opt-outs on your behalf, though the industry opt-out links in section 5 cover most participating networks.

Section 07Your choices

• Browse without registering. Lot listings, current bids and closing times are visible without any personal information.
• Stop texts: reply STOP. Stop marketing email: use the unsubscribe link in any message. Transactional email about your bids and invoices continues while your account is open.
• Stop calls: tell the caller to place you on our internal do-not-call list, or email privacy@bidagain.co.
• Opt out of sharing for advertising: use the Do Not Sell or Share form, or enable Global Privacy Control in your browser.
• Access, correct, delete, or close your account: see section 10 and email privacy@bidagain.co.

Section 08How long we keep information

Record type	Retention
Account, bid and invoice records	For the life of the account and 7 years after, for tax and accounting purposes
Consent records (TCPA and Terms acceptance)	At least 5 years, to defend against claims within the statutory period
Suppression and opt-out lists	Indefinitely — we must keep your number to keep honouring the opt-out
Web and server logs	Up to 13 months
Call recordings	Up to 24 months

Section 09Security

We use TLS encryption in transit, access controls, tokenised card storage through a PCI-compliant processor, and vendor due diligence to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your information occurs, we will notify you and the relevant authorities as required by applicable law.

Section 10State privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey, or another state with a comprehensive privacy law, you may have the rights below. Full details and the submission form are in our CCPA Notice.

Right to know and access

Request the categories and specific pieces of personal information we collected about you in the preceding 12 months, the sources, the business purpose, and the categories of third parties we disclosed it to.

Right to delete

Request deletion of personal information we collected from you, subject to exceptions — including our legal obligation to retain transaction, consent and suppression records.

Right to correct

Request correction of inaccurate personal information we maintain about you. You can correct most account details yourself in your account settings.

Right to opt out of sale, sharing, and targeted advertising

Direct us to stop sharing your personal information for cross-context behavioural advertising. Use the opt-out form or a Global Privacy Control signal.

Right to non-discrimination

We will not deny you the Service, charge you a different price, or provide a different quality of service because you exercised a privacy right.

How to exercise

Submit the request form, email privacy@bidagain.co, or call +1 (850) 684-4091. We verify your identity by matching details against our records and respond within 45 days, extendable once by a further 45 days with notice. An authorised agent may submit on your behalf with written proof of authorisation. If we deny a request, you may appeal by replying to our decision with the word “appeal”; we will respond within 45 days.

Section 11GDPR — EEA and UK visitors

The Service is intended for United States residents and we do not target the EEA or UK. If you access it from there, our lawful bases for processing are your consent (for marketing contact and non-essential cookies), performance of a contract (to run your account and the auctions you take part in), and legitimate interests (site security, fraud prevention, and service improvement).

You have the rights of access, rectification, erasure, restriction of processing, objection (including to direct marketing at any time), and data portability, and the right to withdraw consent at any time without affecting processing already carried out. You may also lodge a complaint with your supervisory authority. Exercise these rights at privacy@bidagain.co. Note that information you submit is transferred to and stored in the United States.

Section 12Children

The Service is not directed to anyone under 18 and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact privacy@bidagain.co and we will delete it promptly.

Section 13Changes to this policy

We may update this policy. The “Effective” date above will change and material updates will be flagged on this page. Continued use of the Service after an update constitutes acceptance. We encourage you to review this page periodically.

Section 14Contact