Last updated: 28 September 2026
This policy explains what personal data VeyBid collects, why, and what your rights are under the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
1. Who is responsible for your data
Javier Toledano, a private individual resident in Spain.
- Tax ID (NIF): 52344458T
- Postal address: Madrigal de la vera 7, 28044, Madrid, Spain
- Email: privacy@veybid.com
2. What data we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Account: username, email address, password (stored only as a secure hash) | To create and manage your account and let you log in | Contract |
| Listings: product name, description, product and logo URLs, category, contact email | To review, publish and rank your listing, and to contact you about it. The contact email is never shown publicly | Contract |
| Bids and payments: amounts, currency, status, dates, and the payment references given to us by Dodo Payments | To apply your bids to the rankings, handle refunds and keep financial records | Contract and legal obligation |
| Security data: IP address and time of login attempts, server logs kept by our hosting provider | To protect accounts and the service against attacks | Legitimate interest |
| Emails you send us | To answer you | Legitimate interest / contract |
We never receive or store your card details. Payment information (card, billing name and address, email) is collected directly by Dodo Payments, which acts as the merchant of record and processes it under its own privacy policy.
Public information: the name, description, links, logo, category and total of your listings are public on VeyBid. Your email address is not.
3. Who we share data with
We only share personal data with providers that help us run VeyBid:
- Dodo Payments — payment processing, taxes and receipts (as an independent controller for payment data).
- BanaHosting — web hosting and database, where VeyBid’s data is stored. Server location: United States.
We do not sell your data and we do not use it for advertising. We may disclose data when required by law or by a competent authority.
Some of these providers may process data outside the European Economic Area. When they do, the transfer is covered by the safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
4. How long we keep it
- Account and listing data: while your account is active. When you close your account we delete or anonymise it, except what we must keep as described below.
- Payment and bid records: these are financial records and are kept for the period required by Spanish tax and commercial law, currently up to 6 years. For the integrity of the rankings they cannot be altered, only complemented (for example, by a refund record).
- Security logs: for a short period, normally no more than 90 days, unless needed to investigate an incident.
5. Your rights
You can ask us to access, rectify or delete your data, to restrict or object to its processing, and to receive it in a portable format. Write to privacy@veybid.com from the email of your account. We will reply within one month.
Some data cannot be deleted while we are legally required to keep it (see section 4).
If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the authority of your country.
6. Cookies
VeyBid only uses technical cookies that are strictly necessary: the ones WordPress sets to keep you logged in and to protect forms. We do not use analytics, advertising or tracking cookies, so no consent banner is needed. The payment page is hosted by Dodo Payments, which may set its own cookies under its policy.
7. Security
We protect your data with encrypted connections (HTTPS), hashed passwords, limits on login attempts, two-step verification for administrators, restricted database permissions and regular backups.
8. Minors
VeyBid is only for people aged 18 or over. We do not knowingly collect data from minors.
9. Changes
We may update this policy. We will publish the new version here with a new date and, for significant changes, tell registered users by email.