This policy explains what personal information Asta Auction collects when you use our mobile app and website, why we collect it, who we share it with, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).
Asta Auction is the responsible party for the personal information described here. We are an auctioneer operating in South Africa.
| Information | Why we need it |
|---|---|
| Name, email address, phone number, date of birth | To create your account and contact you about your bids and purchases. |
| Physical address | Required by the Consumer Protection Act as your address for legal notices, and used for delivery. |
| Identity documents — ID or passport, proof of address, and for companies and trusts, registration documents, resolutions and tax records | Required by the Financial Intelligence Centre Act 38 of 2001 (FICA) and regulation 26(2) of the Consumer Protection Act before anyone may bid at auction. We cannot let you bid without them. |
| Banking details | To refund your registration deposit if you are unsuccessful, and to match your payment against your invoice. |
| Bids, purchases, invoices and payments | To run the auction and to meet our tax and audit obligations. |
| Device push token | Only if you allow notifications, so we can tell you when you are outbid or a lot is closing. |
| Photographs you choose to upload | For your profile and for the documents above. We never access your photo library beyond the items you select. |
FICA obliges us to keep identity and verification records for five years after our business relationship ends. Invoices and payment records are kept for the period required by tax law. When you delete your account we erase your personal information immediately, except where one of these obligations requires us to retain a record.
You can delete your account at any time from the app: Account → Settings → Delete my account. You confirm with your password or a code we email you, and it happens immediately — you do not need to email us. If you have already uninstalled the app, or you cannot sign in, use our deletion request page and we will do it for you within 30 days.
Your name, contact details, address, banking details, profile photo and notification history are erased, and every device signed in to the account is signed out. Two things survive, and only these:
Traffic between the app and our servers is encrypted in transit. Identity documents are stored in private storage and are only reachable through short-lived links issued to you or to the staff member reviewing your verification. Passwords are stored hashed, never in plain text.
You must be 18 or older to hold an account and to bid. The service is not directed at children.
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app.