Privacy policy

• Account details — your name if you give one, email address, and a hashed password. We never store your password itself.
• Order and bid history — what you bid on, what you bought, and what we delivered.
• Delivery details — the email address or phone number needed to transfer your tickets.
• Usage data — which pages you viewed, so we can tell which parts of the site work. This is tied to a random identifier in a cookie, not to your name.

We do not store card numbers. When card payments are enabled, they are handled by a licensed payment provider and the details never reach our servers.

Account, order and delivery data: because we need it to perform the contract you entered into. Usage data: our legitimate interest in knowing whether the site functions. Anything we send you beyond transactional messages needs your consent, and you can withdraw it.

Us, and the suppliers we need to fulfil your order — the ticket source, our payment provider, and our email provider. We do not sell your data and we do not share it for advertising.

Order records for seven years, because tax and accounting rules require it. Account data until you ask us to delete it. Usage data for 24 months.

If you are in the EU or UK you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to us processing it. Write to support@bidwave.events and we will respond within 30 days. You can also complain to your national data protection authority.

Two, both necessary: one keeps you signed in, one holds the random identifier that lets us count visits without knowing who you are. We run no advertising or third-party tracking cookies.

Bidwave Limited is established outside the EEA, so data about EU and UK customers is transferred out of the EEA to us. We rely on the European Commission's standard contractual clauses for that transfer.