1. Introduction

This Privacy Policy explains how Walvis LTD (hereinafter “the Company”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Company is the data controller for the personal data collected through its websites and related services.

​

2. Data we collect

We only collect data necessary to provide our services:

• Identification data: name, address, phone, e-mail.

• Professional data: business name, VAT number, company registration number.

• Transaction data: bids, purchases, payments, invoices.

• Technical data: IP addresses, login details, cookies, analytics data.

• Expertise-related data (if applicable): photographs or descriptions of submitted items.
   

3. Purposes of processing

Your data are processed to:

• Manage registration, bidding, and transactions.

• Issue invoices and comply with legal, accounting, and tax obligations.

• Communicate with you (customer support, updates, notifications).

• Ensure service security and legal compliance (identity checks, fraud prevention).

• Send marketing communications, if you have consented.
   

4. Legal basis

Processing is based on:

• Legal obligations (accounting, AML compliance);

• Explicit consent (newsletter, marketing cookies);

• Legitimate interest (security, improvement of services, fraud prevention).
   

5. Data retention

Data are stored:

• for the duration of the service;

• and archived for 5 years after the last transaction to comply with legal and tax obligations;

• marketing data are kept until withdrawal of consent.
   

6. Data sharing and transfers

We do not sell or rent your personal data. Data may be shared only with:

• Technical providers (auction platform, hosting, payment, delivery);

• Legal and accounting advisors, where necessary;

• Public authorities, if legally required.

All transfers are governed by UK GDPR-compliant contracts.

​

7. Security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, destruction, or accidental disclosure.

 

8. Your rights

Under UK GDPR, you have the following rights:

• Right of access;

• Right to rectification and erasure;

• Right to object and restrict processing;

• Right to data portability;

• Right to withdraw consent at any time.

You may exercise these rights by contacting us at info@walvis.co.uk.
 

9. Cookies

Our website uses cookies necessary for functionality and, with your consent, analytical and marketing cookies. You can manage your preferences in the cookie banner.

​

10. Contact and complaints

For any questions or to exercise your rights:

• E-mail: info@walvis.co.uk

• Postal address: 292 Wake Green Road, Birmingham, West Midlands, England, B13 9QP

• Supervisory authority: Information Commissioner’s Office (ICO) — www.ico.org.uk