Privacy Policy

Clumber Auction House Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect when you use our website, register to bid, buy or sell with us, or contact us, why we collect it, how long we keep it and what rights you have. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The data controller is Clumber Auction House Ltd, 1 Station Road, Laughton Common, Dinnington, Sheffield S25 3RW. If you have any questions about this policy or about your data, email info@clumberauctionhouse.com or call 07867 201883.

What personal data we collect

• Account registration — When you create a bidding account we collect your name, email address, telephone number, password (stored in encrypted form), billing address and, if different, shipping address, together with your marketing preferences.
• Bidding and purchase records — The bids you place (live, absentee or telephone), lots you win, invoices, payments and collection or shipping details. Bids placed in the saleroom are recorded against your bidder number.
• Identity verification — We may ask for photographic identification (for example a passport or driving licence) and proof of address before approving you to bid, when you pay in cash, or when we are required to carry out checks under the Money Laundering Regulations.
• Payment details — Card payments are processed by Stripe, either directly or through the BidSpirit platform. We do not store your full card number on our own systems. Bank transfer details appear on our bank statements.
• Consignment records — If you sell with us we record your name, address, contact details, the items consigned, reserves, sale results, settlement statements and the bank details you give us for payment.
• Enquiries — Messages sent through our contact and valuation forms, by email, by telephone or by WhatsApp, including any photographs you send us of items for valuation.
• Website usage — Technical information such as your IP address, browser type and pages visited, collected through cookies and server logs. See our Cookie Policy.

Why we use your data and our lawful basis

• To run the auction — Registering you, accepting your bids, invoicing you, paying you as a seller and arranging collection or delivery. Lawful basis: performance of a contract with you.
• To comply with the law — Identity and anti-money laundering checks, keeping accounting and tax records, and responding to lawful requests from HMRC, the police or other authorities. Lawful basis: legal obligation.
• To answer your enquiries — Replying to valuation requests and messages. Lawful basis: our legitimate interest in responding to you, or steps taken at your request before entering a contract.
• To protect our business — Preventing fraud and non-payment, keeping records of disputed bids, and maintaining the security of our website. Lawful basis: legitimate interests.
• To keep you informed — Sending you notice of forthcoming auctions and news by email, where you have opted in. Lawful basis: consent. You can withdraw consent at any time using the unsubscribe link in any email or by contacting us.

Who we share your data with

We share personal data only where necessary, with:

• BidSpirit — The online bidding platform that powers registration, catalogues and live bidding on this website. BidSpirit processes your account and bidding data under its own terms of use and privacy policy.
• Payment providers — Stripe and our bank, to take and make payments.
• Couriers and shippers — Your name, address and telephone number where you ask us to arrange delivery.
• Professional advisers and authorities — Our accountants, insurers and legal advisers, and public bodies such as HMRC where the law requires.
• Website and IT suppliers — Companies that host and maintain our website and email, who act on our instructions.

We do not sell your personal data to anyone. Where a supplier is based outside the UK, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep your data

We keep bidder, buyer and seller records, invoices and settlement statements for six years after the end of the financial year in which the transaction took place, to meet our accounting and tax obligations. Identity documents collected for anti-money laundering purposes are kept for five years after the end of our relationship with you, as required by the Money Laundering Regulations. Enquiries that do not lead to a transaction are kept for up to two years. Account data is kept while your account is active and for a reasonable period afterwards so that we can deal with any follow-up; you can ask us to close your account at any time.

How we protect your data

Our website is served over HTTPS. Bidding accounts are password-protected and card details are handled by our payment providers rather than stored by us. Paper records, including consignment forms and identity checks, are kept securely at our premises with access restricted to staff who need them.

Your rights

Under UK GDPR you have the right to:

• Access — Ask for a copy of the personal data we hold about you.
• Rectification — Ask us to correct data that is inaccurate or incomplete.
• Erasure — Ask us to delete your data where we no longer need it. Note that we must keep certain transaction and AML records for the periods described above.
• Restriction and objection — Ask us to limit how we use your data, or object to processing based on legitimate interests, including direct marketing.
• Portability — Receive the data you have given us in a commonly used electronic format.
• Withdraw consent — Where we rely on your consent, for example for marketing emails, you can withdraw it at any time.

To exercise any of these rights, email info@clumberauctionhouse.com. We will respond within one month. We may need to confirm your identity first.

Complaints

If you are unhappy with how we have handled your data, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The current version will always be published on this page. This version was last reviewed in September 2026.