Privacy Policy

Depending on how you use the platform, we may collect the following information.

Registration Information: When you create an account, we may collect your full name, mobile number, email address, password credentials and referral code where applicable. You may also register using a supported third-party authentication service such as Google, in which case we may receive information necessary to create and maintain your account.

Banking Information: When you participate in transactions, we may collect your bank name, account holder name, account number, account type and branch information where required. Banking information is collected when necessary rather than necessarily at initial registration.

Identity and KYC Information: Where required for account verification, security, compliance or platform operations, we may collect South African ID information, passport information, identity document or passport copies, KYC information and verification information. Some of this information may constitute personal or potentially sensitive information and will only be processed for legitimate and authorised purposes.

Payment Information: We may collect information relating to payments and transactions, including proof of payment, payment references, transaction amounts, transaction dates and times, buyer and seller information, payment status, membership fee information and points transaction information.

Platform Activity: We may collect information about your use of P2P Auctioneer, including points purchased, points held, points matured, points listed for auction, auction participation, payment confirmations, referral activity, ratings, penalties and account activity.

Technical Information: When you use the platform, we may automatically collect certain technical information such as IP address, device type, browser type, operating system, login information, session information, security and authentication information and approximate usage information necessary to maintain the security and functionality of the platform.

We collect and process personal information for legitimate and necessary purposes, including creating and managing your membership account, authenticating your identity, protecting your account, processing membership activation and monthly membership requirements, facilitating participation in auctions, connecting buyers and sellers, recording points transactions, verifying payments, processing proof of payment, conducting KYC verification where applicable, maintaining accurate wallet and transaction records, calculating holding periods and applicable rewards, managing referrals, maintaining member ratings, applying platform rules and penalties, communicating with you, sending important platform notifications, preventing fraud, abuse and unauthorised activity, maintaining platform security, resolving disputes, maintaining audit records, complying with legal and regulatory obligations, and improving the functionality, security and reliability of the platform.

We aim to collect only information that is reasonably necessary for the relevant purpose.

Because P2P Auctioneer facilitates a peer-to-peer marketplace, certain banking information may be required before you can participate in transactions.

Where another member is required to make a payment to you, relevant banking information may be disclosed to that member when necessary to complete the transaction.

We do not intend to make your banking information publicly visible on the platform. Members should only receive banking information when the platform's transaction process requires it.

You are responsible for ensuring that your banking information is accurate and up to date.

When you upload proof of payment, the document may contain personal and financial information.

We use payment proofs to verify payments, confirm transactions, investigate disputed transactions, prevent fraud, maintain transaction records and protect members and the platform.

Access to payment proofs is restricted to authorised persons who require the information for legitimate operational, security or compliance purposes.

Where P2P Auctioneer requires identity verification, information may be used to verify that an account belongs to the person claiming to own it.

KYC information may be reviewed by authorised personnel and may be retained where necessary for legitimate operational, security or legal purposes.

We will not use identity information for unrelated purposes without a lawful basis.

P2P Auctioneer is a peer-to-peer marketplace. Certain information may therefore become visible to another member when necessary for a transaction.

For example, a transaction may require a buyer to receive information necessary to make payment to a seller. Auction listings may also display an anonymous member identifier and relevant rating information.

We will not intentionally publish your full personal profile, identity documents or other unnecessary personal information to other members.

We may use trusted third-party service providers to operate the platform. These may include providers responsible for cloud hosting, database services, authentication, payment-related services, file storage, email delivery, push notifications, security, analytics and technical infrastructure.

Where third parties process personal information on our behalf, we expect appropriate contractual and security measures to be in place.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, unauthorised disclosure, loss, damage, destruction, alteration and unlawful processing.

Security measures may include authentication controls, access controls, role-based permissions, secure server-side processing, database security, encryption where appropriate, audit logging, security monitoring and restricted administrative access.

However, no internet-based system can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Certain information may need to be retained after your account is closed for purposes such as legal compliance, fraud prevention, financial and transaction records, dispute resolution, audit requirements, security and enforcement of contractual rights.

When information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it where appropriate.

Subject to applicable law, you may have rights concerning your personal information, including the right to request access to personal information we hold about you, request correction of inaccurate or incomplete information, request deletion where legally permitted, object to certain processing, withdraw consent where processing is based on consent, ask questions about how your information is being processed, and lodge a complaint regarding the handling of your personal information.

To exercise your rights, contact us using the details provided below.

You are responsible for providing accurate and current information.

You should update your contact details, banking information, identity information where required and other account information if it changes. Accurate information helps us maintain the security and reliability of your account and transactions.

Where we send promotional or marketing communications, we will do so in accordance with applicable law.

You may request that we stop sending direct marketing communications where applicable. Important operational communications relating to your account, payments, auctions, security, membership and transactions may still be sent because they are necessary for the operation of your account.

P2P Auctioneer may use cookies, local storage and similar technologies to keep you signed in, maintain sessions, remember preferences, improve security, understand how the platform is used and improve platform functionality.

You may be able to control certain cookies through your browser or device settings. Disabling certain technologies may affect the functionality of the platform.

P2P Auctioneer is intended for adults who are legally capable of participating in the services provided.

We do not knowingly collect personal information from children for purposes that are prohibited by applicable law. If we become aware that information has been collected from a child in circumstances where the processing is not permitted, we will take reasonable steps to address the situation.

Some of our technology or service providers may process or store information outside South Africa.

Where personal information is transferred or processed outside South Africa, we will take reasonable steps to ensure that applicable legal requirements and appropriate safeguards are considered.

If we become aware of a security compromise involving personal information, we will assess the incident and take appropriate steps in accordance with applicable law.

This may include investigating the incident, taking steps to contain and remedy the compromise, and providing notifications where legally required.

We may update this Privacy Policy from time to time.

When we make material changes, we may notify members through the platform, email or another appropriate communication method. The Last Updated date at the beginning of this Privacy Policy will indicate when the policy was most recently revised.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal information is handled, please contact us:

P2P Auctioneer

Email: p2pauctioneer@outlook.com

We will respond to privacy-related requests in accordance with applicable law.

If you believe that your personal information has been handled unlawfully and you are not satisfied with our response, you may have the right to lodge a complaint with the South African Information Regulator.

By registering for and using P2P Auctioneer, you acknowledge that you have had an opportunity to read this Privacy Policy and understand how your personal information may be processed.

Where applicable, any separate consent required by law will be obtained through the appropriate mechanism.