Legal
Privacy Policy
1. Who this covers
This policy covers business contacts who use the site: buyers, brand owners, licensors, partners, and vendors. Lot pages and the team area are restricted to approved users.
2. Privacy laws we follow
We comply with applicable privacy and data protection laws, including:
- General Data Protection Regulation (GDPR) – EU/EEA
- California Consumer Privacy Act (CCPA) as amended by CPRA
- New York SHIELD Act
- Other applicable U.S. state privacy and data security laws
3. Data we collect
- Identifiers you submit: name, company, role, and business email
- The content of your enquiry, interest, or meeting request
- Sign-in and access records for lot pages
- Basic visit statistics
We treat this data as confidential.
4. Why we use it
- To reply to your enquiry and arrange meetings
- To grant and secure access to lot pages
- To keep business records in our CRM
- To send business follow-up about lots you asked to see
- Security, compliance, auditing, and recordkeeping
We use your data for business-to-business dealings only, never for consumer advertising.
5. GDPR disclosures (EU / EEA)
Our legal bases are performance of a contract, legitimate business interests, and legal compliance. You may request access, correction, erasure, restriction, or objection. We may keep data the law or security requires.
6. California privacy rights (CCPA / CPRA)
- We do not sell or share personal information
- We use personal data for business purposes only
- You may request access, correction, or deletion, subject to legal exceptions
7. New York data security
- We keep reasonable administrative, technical, and physical safeguards
- Access to your data is limited to authorized team members
- Access to confidential information is logged
8. Who receives your data
- Authorized team members
- Service providers that run the site, our CRM, email, and outreach tools
Every recipient is bound by confidentiality obligations.
9. Security
- Role-based access controls
- Single-use, time-limited sign-in links
- Monitoring and audit logs
- Incident response procedures
10. Retention
We keep data only as long as business operations, legal compliance, and security require.
11. Contact
For privacy questions or rights requests, email hello@thirdwheelbrands.com.