Legal
Privacy Policy
Effective Date: 2026-04-17 · Version 1.1 — Last Updated: 2026-04-17
This Privacy Policy explains what personal information Classy Cars Bid collects, why we collect it, and the rights you have over that information, including rights granted under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
1. Data Controller
Classy Cars Bid (the 'Operator') is the data controller for information processed through classycarsbid.com.
- Legal entity: Classy Cars Bid
- Registered jurisdiction: State of California, United States
- Privacy contact: privacy@classycarsbid.com
2. Categories of Data Collected
We collect only the data we need to operate auctions safely. Categories include:
- Identifiers: name, email address, phone number, account handle.
- Device & network data: IP address, browser, operating system, referring URL.
- Geolocation (approximate): derived from IP for fraud-screening and bid-region reporting only.
- Transaction data: bids placed, listings created, messages sent to buyers or sellers.
- Payment details: processed by our payment partners (Stripe and/or Escrow.com); we do not store full card numbers.
3. Purposes of Processing & Legal Basis
Each purpose below is tied to a specific legal basis.
- Run the auction platform — necessary for performance of a contract with you.
- Verify bidders and prevent fraud — legitimate interest.
- Send transactional emails (bid confirmations, outbid alerts) — performance of contract.
- Send marketing emails — only with your explicit consent; opt-out in every email.
- Comply with legal obligations — tax, anti-money-laundering, court orders.
4. Third-Party Sharing
We share data only with vetted service providers bound by confidentiality and data-processing agreements:
- Stripe, Inc. — payment processing
- Escrow.com — optional escrow of vehicle sale funds
- Amazon Web Services — hosting and backups
- SendGrid — transactional email delivery
- Cloudflare — DDoS protection and caching
We do not sell your personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising.
5. International Data Transfers
Data is primarily processed in the United States. Where we transfer data to service providers outside the U.S., we rely on Standard Contractual Clauses or equivalent safeguards.
6. Retention Periods
- Account profile data — retained for the life of the account plus 24 months after closure.
- Bid history and auction records — retained 7 years to satisfy tax and AML requirements.
- Support correspondence — 24 months.
- Marketing consent logs — 36 months after last interaction.
7. Your California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights:
- Right to Know what categories and specific pieces of personal information we have collected about you.
- Right to Delete personal information we hold about you, subject to legal-retention exceptions.
- Right to Correct inaccurate personal information.
- Right to Opt-Out of Sale or Sharing — we do not sell or share, but you may still submit a request to confirm this.
- Right to Limit Use of Sensitive Personal Information.
- Right to Non-Discrimination — we will not deny service, charge different prices, or provide a different level of quality because you exercised a right.
To exercise any right, email privacy@classycarsbid.com. We will respond within 45 days; we may verify your identity before disclosing or deleting information.
Do Not Sell or Share My Personal Information
Although we do not sell or share personal information as those terms are defined under the CCPA, you may affirmatively confirm this preference by emailing privacy@classycarsbid.com with the subject line 'Do Not Sell or Share'.
8. Children's Data
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact privacy@classycarsbid.com and we will delete it promptly.
9. Security Measures
We use encryption in transit (TLS 1.2+), encryption at rest for sensitive fields, role-based access controls, logged administrative access, and annual third-party security reviews. No system is perfectly secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We will post changes on this page with an updated Effective Date and, for material changes, notify registered users by email.
11. Contact
Questions, requests, or complaints: privacy@classycarsbid.com. See also our Terms of Use and Cookie Policy.