Fair & Transparent Bidding
Every bid is visible, time stamped, and traceable so partners and bidders compete on equal ground without manipulation.
Elite Properties Only
We list only the best properties, hotels and resorts with amazing upgrade opportunities.
Real Time Bid Activity
Instant bid updates, notifications, and price changes so users never miss an opportunity or act on outdated information.
مرحباً بك Register as Product Vendor Register as Hotel Register as Bidder
How would you like to use the platform? Fill in your details to get started.
الشروط والأحكام سياسة الخصوصية سياسة ملفات تعريف الارتباط
TERMS OF USE AND SERVICE AGREEMENT
Governing Your Use of the Bidvers Website, Mobile Application, and All Associated Services
|
Document |
Terms of Use and Service Agreement |
|
Version |
2.0 |
|
Effective Date |
As displayed on the Platform at time of registration |
|
Last Updated |
June 2026 |
|
Oman Entity |
Sireen Investment Global Co. |
|
European Entity |
Bee Group Technology Srl (Romania) |
|
Scope |
Global: Sultanate of Oman, European Union, European Economic Area, and all territories where the Platform operates |
|
Platforms Covered |
www.bidvers.com (website), Bidvers mobile application (iOS and Android), and all subdomains, APIs, and related digital services |
|
Legal Contact |
IMPORTANT LEGAL NOTICE: BY CREATING AN ACCOUNT, ACCESSING THE PLATFORM, PLACING A BID, OR LISTING AN AUCTION ON BIDVERS.COM OR THE BIDVERS MOBILE APPLICATION, YOU IRREVOCABLY ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE LEGALLY BOUND BY THE ENTIRETY OF THESE TERMS. IF YOU DO NOT AGREE, YOU MUST IMMEDIATELY DISCONTINUE ALL USE OF THE PLATFORM.
TABLE OF CONTENTS
2. Definitions and Interpretation
3. Parties, Governing Entities, and Applicable Law
5. Eligibility, Account Registration, and Verification
7. Payments, Commission, and Vendor Payouts
8. Refunds, Returns, and Cancellations
9. User Obligations and Conduct
10. Vendor Obligations, Warranties, and Representations
11. Hotel Partner Specific Provisions
12. Prohibited Items and Activities
13. Dispute Resolution and Investigation
14. Intellectual Property Rights
15. Privacy, Data Protection, and Consent
16. Limitation of Liability and Disclaimers
18. Account Suspension, Termination, and Remedies
19. Anti-Money Laundering and Anti-Fraud
20. Electronic Communications and Consent
21. Third-Party Services and Links
23. Modifications to These Terms
Schedule A: Commission and Payout Summary
Schedule B: Dispute Escalation Matrix
1. PREAMBLE AND RECITALS
1.1 This Terms of Use and Service Agreement (the "Agreement" or "Terms") constitutes a binding legal contract between (a) you, the individual or entity accessing or using the Platform ("you" or "your"), and (b) Bidvers, as defined below, governing your access to and use of the Bidvers website located at www.bidvers.com, the Bidvers mobile application available on iOS and Android, and all associated subdomains, application programming interfaces (APIs), widgets, embedded content, and digital services (collectively, the "Platform").
1.2 WHEREAS, Bidvers operates an online auction marketplace that enables verified Vendors to create and manage timed auctions for the sale of goods (including, without limitation, perfumes and fragrances) and services (including, without limitation, hotel room upgrades and hospitality amenities) to registered Users who participate as bidders;
1.3 WHEREAS, Bidvers acts solely as an intermediary marketplace operator and is not a party to the underlying contract of sale between Users and Vendors;
1.4 WHEREAS, Bidvers collects a commission of ten percent (10%) on each successfully completed auction as consideration for the provision of the Platform and associated services;
1.5 WHEREAS, both Users and Vendors are required to comply with all auction laws, consumer protection laws, payment laws, and regulations applicable in their respective jurisdictions;
1.6 WHEREAS, the Platform is operated by two legal entities: Sireen Investment Global Co. (governing operations in the Sultanate of Oman) and Bee Group Technology Srl (governing operations in Europe), with jurisdiction and governing law determined by the geographic location of the User or Vendor;
1.7 NOW THEREFORE, in consideration of the mutual covenants, terms, and conditions set forth herein, and for other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the parties agree as follows:
2. DEFINITIONS AND INTERPRETATION
2.1 Definitions
In this Agreement, the following terms shall have the meanings ascribed to them below unless the context otherwise requires:
|
Term |
Definition |
|
Agreement / Terms |
This Terms of Use and Service Agreement, including all schedules, appendices, and documents incorporated by reference herein, as amended from time to time. |
|
Auction |
A timed, competitive bidding event created by a Vendor on the Platform for the sale of a Lot, subject to the rules and mechanics set out in Section 6. |
|
Bidders / Users |
Any natural person who registers an account on the Platform for the purpose of participating in Auctions as a buyer. The terms "User" and "Bidder" are used interchangeably. |
|
Bidvers |
Collectively, Sireen Investment Global Co. (for Oman-based operations) and Bee Group Technology Srl (for European and all other operations), acting as the operator of the Platform. |
|
Business Day |
A day (other than Saturday, Sunday, or public holiday) on which commercial banks are open for business in Muscat, Oman (for Oman operations) or Bucharest, Romania (for European operations). |
|
Commission |
The fee of ten percent (10%) of the Winning Bid amount, automatically deducted by Bidvers from the gross auction proceeds prior to Vendor payout. |
|
Dispute |
A formal complaint raised by a User or Vendor through the Platform's dispute resolution process as described in Section 13. |
|
Force Majeure |
Any event beyond a party's reasonable control, including but not limited to natural disaster, war, terrorism, pandemic, epidemic, government action, sanctions, embargo, civil unrest, infrastructure failure, or cyberattack. |
|
Hotel Partner |
A hotel or hospitality establishment registered as a Vendor for the purpose of auctioning room upgrades, amenities, and ancillary guest services. |
|
KYC |
Know Your Customer: the identity verification, anti-money laundering screening, and compliance procedures required for Vendor registration. |
|
Lot |
The item, product, service, upgrade, or amenity being offered for sale through an Auction on the Platform. |
|
Minimum Bid / Reserve Price |
The lowest acceptable bid for a Lot, as set by the Vendor at the time of Auction creation. |
|
Net Payout |
The Winning Bid amount less the Commission and any applicable withholdings, payable to the Vendor. |
|
Payout Threshold |
The minimum accumulated Net Payout balance of USD 300 (or the equivalent in EUR or OMR at the prevailing exchange rate) required before a payout disbursement is initiated. |
|
Platform |
The Bidvers website at www.bidvers.com, the Bidvers mobile application (iOS and Android), all subdomains, APIs, embedded widgets, and related digital services, collectively. |
|
Stripe |
Stripe, Inc. and its affiliates, the third-party payment processing infrastructure provider used by the Platform. |
|
Vendor |
A registered seller on the Platform, including perfume sellers, fragrance distributors, and Hotel Partners, authorised to create and manage Auctions. |
|
Vendor Content |
All photographs, descriptions, text, pricing, logos, and multimedia content uploaded by a Vendor to the Platform in connection with an Auction listing. |
|
Winning Bid |
The highest accepted bid at the close of an Auction, constituting a binding contract of sale. |
|
Winning Bidder |
The User who placed the Winning Bid. |
2.2 Interpretation
- References to "Sections" are references to sections of this Agreement unless otherwise stated.
- Words importing the singular include the plural and vice versa. Words importing any gender include all genders.
- The words "include," "includes," and "including" shall be deemed to be followed by "without limitation" whether or not so followed.
- Headings and table of contents entries are for convenience of reference only and shall not affect the construction or interpretation of this Agreement.
- References to "writing" or "written" include communication by email from the contact addresses specified in Section 26.
- Where this Agreement refers to applicable law, it means any statute, regulation, directive, by-law, ordinance, or subordinate legislation in force from time to time in the relevant jurisdiction.
- All monetary references to "USD" mean United States Dollars, "EUR" means Euro, and "OMR" means Omani Rial.
3. PARTIES, GOVERNING ENTITIES, AND APPLICABLE LAW
3.1 Dual-Entity Operator Structure
The Platform is operated as a single, unified digital marketplace by two distinct legal entities, each governing a defined geographic jurisdiction:
|
Oman Operations |
European & Other Operations |
|
|
Legal Entity |
Sireen Investment Global Co. |
Bee Group Technology Srl |
|
Registered Jurisdiction |
Sultanate of Oman |
Romania |
|
Governing Law |
Laws of the Sultanate of Oman |
Romanian law and applicable EU law |
|
Competent Courts |
Courts of the Sultanate of Oman, Muscat |
Competent courts of Romania, Bucharest |
|
Payout Currency |
Omani Rial (OMR) |
Euro (EUR) |
|
Data Controller |
Sireen Investment Global Co. |
Bee Group Technology Srl |
3.2 Jurisdictional Determination
3.2.1 The applicable legal entity, governing law, dispute resolution forum, payout currency, and data protection regime shall be determined exclusively by the country of registration and billing address provided by the User or Vendor during the account creation process.
3.2.2 Users and Vendors located in the Sultanate of Oman are governed by Sireen Investment Global Co. and the laws of the Sultanate of Oman.
3.2.3 Users and Vendors located in any European Union member state, any European Economic Area member state, or any other country outside the Sultanate of Oman are governed by Bee Group Technology Srl and Romanian law together with applicable EU law.
3.2.4 Users and Vendors are solely responsible for providing accurate and truthful geographic and billing information. The deliberate provision of false location data to circumvent jurisdictional rules, applicable tax obligations, or regulatory requirements constitutes a material breach of this Agreement and grounds for immediate account termination.
3.3 Unified Platform Experience
3.3.1 Notwithstanding the dual-entity ownership structure, the Platform operates as a single, functionally unified marketplace. The user interface, auction mechanics, and service features are identical regardless of the User's or Vendor's geographic location.
3.3.2 Jurisdictional differences apply exclusively to: (a) governing law; (b) competent courts; (c) data protection regime; (d) payout currency; and (e) local regulatory compliance obligations.
3.4 Consumer Rights Reservation
3.4.1 Nothing in this Agreement shall be construed to deprive any consumer of the protection afforded by the mandatory provisions of the law of the country in which the consumer has their habitual residence, where such provisions cannot be derogated from by agreement. This includes, without limitation, rights under EU Directive 2011/83/EU (Consumer Rights Directive), EU Directive 2019/2161 (Omnibus Directive), applicable national implementations thereof, and the Omani Consumer Protection Law (Royal Decree No. 66/2014) and its amendments.
4. SCOPE OF THE PLATFORM
4.1 Platform Services
4.1.1 Bidvers provides an online marketplace infrastructure enabling: (a) Vendors to create, manage, and conduct timed auctions for the sale of Lots; (b) Users to browse, bid on, and purchase Lots through a competitive auction process; and (c) the facilitation of payment processing, dispute resolution, and communication between Users and Vendors.
4.1.2 The Platform currently facilitates auctions in the following categories, and Bidvers reserves the right to add, modify, or discontinue categories at its sole discretion with prior notice:
- Perfumes and Fragrances: physical goods sold by licensed perfume sellers and distributors, requiring delivery to the Winning Bidder;
- Hotel Room Upgrades and Amenities: non-physical services sold by Hotel Partners to hotel guests, including but not limited to room category upgrades, spa packages, dining credits, late checkout, and other ancillary hospitality services. This category does not involve the delivery of physical goods.
4.2 Role of Bidvers
4.2.1 Bidvers acts exclusively as an intermediary marketplace operator. Bidvers is not the seller, supplier, manufacturer, distributor, or provider of any Lot. Bidvers is not a party to the contract of sale formed between the User and the Vendor upon the close of a successful Auction.
4.2.2 Bidvers does not inspect, verify, test, authenticate, take title to, or take physical or constructive possession of any Lot at any time during the auction process.
4.2.3 Bidvers does not guarantee the accuracy, completeness, legality, or quality of any Lot listing, Vendor Content, or Vendor representation.
4.2.4 Bidvers does not act as an agent, broker, or fiduciary for any User or Vendor.
4.3 Platform Availability
4.3.1 Bidvers uses commercially reasonable efforts to ensure the Platform is available and operational. However, the Platform may be temporarily unavailable due to scheduled maintenance, system upgrades, or unforeseeable technical failures.
4.3.2 Bidvers does not guarantee uninterrupted, error-free, or continuous access to the Platform and shall not be liable for any loss, damage, or inconvenience arising from Platform downtime, whether planned or unplanned.
5. ELIGIBILITY, ACCOUNT REGISTRATION, AND VERIFICATION
5.1 General Eligibility Requirements
5.1.1 To register an account and use the Platform in any capacity (as a User or a Vendor), you must satisfy all of the following conditions:
- You are at least eighteen (18) years of age, or the age of legal majority in your jurisdiction, whichever is higher;
- You have full legal capacity to enter into binding contracts under the laws of your country of residence;
- You are not subject to any legal prohibition, court order, or regulatory restriction on participating in online auctions, electronic commerce, or the purchase or sale of the relevant category of goods or services;
- You provide accurate, current, and complete registration information, including your full legal name, country of residence, billing address, email address, and telephone number;
- You have not been previously suspended, banned, or otherwise prohibited from using the Platform by Bidvers.
5.2 Payment Card Requirement (Users / Bidders)
5.2.1 Attachment and successful verification of a valid payment card (credit card or debit card) is a strict, non-negotiable prerequisite for placing any bid on the Platform. Users who do not have a verified payment card linked to their account are prohibited from participating in any Auction.
5.2.2 The payment card must be issued in the User's own name and must be capable of processing charges through the Stripe payment infrastructure. Prepaid cards, virtual cards, and corporate cards may be accepted subject to Stripe's verification requirements.
5.2.3 Bidvers reserves the right to re-verify card validity at any time and to suspend bidding privileges immediately and without notice if a card fails verification, expires, is reported stolen, or is otherwise compromised.
5.3 Vendor Registration and KYC
5.3.1 In addition to the general eligibility requirements in Section 5.1, Vendors must satisfy the following conditions before creating any Auction:
- Completion of Bidvers's KYC verification process, including submission of government-issued identification, proof of business registration (for entities), and any additional documentation reasonably requested by Bidvers or required by applicable anti-money laundering legislation;
- Provision and maintenance of a valid business bank account or Stripe Connect account in the Vendor's legal name for the receipt of payouts;
- Possession of all licences, permits, authorisations, and registrations required under applicable law to sell the Lots they intend to list on the Platform;
- Execution of Bidvers's Vendor Agreement (if separately required) and acceptance of the commission and payout terms set out in Section 7.
5.4 Hotel Partner Additional Requirements
5.4.1 In addition to all Vendor requirements, Hotel Partners must:
- Be a licensed hospitality establishment operating lawfully in their jurisdiction;
- Have the legal authority and operational capacity to offer and honour the room upgrades, amenities, and services listed in their Auctions;
- Comply with all applicable local hospitality regulations, consumer protection laws, and tourism laws, including (for Hotel Partners operating in Poland) the Polish Act on Tourist Services, the Polish Consumer Rights Act, and applicable EU directives;
- Ensure that all auctioned upgrades and amenities are linked to genuine guest reservations or are clearly described as applicable to future bookings with specified validity periods.
5.5 Account Security and Responsibility
5.5.1 You are solely responsible for maintaining the confidentiality of your account credentials, including your password, two-factor authentication tokens, and any associated security codes.
5.5.2 You must notify Bidvers immediately at security@bidvers.com upon suspecting or becoming aware of any unauthorised access to your account, any security breach, or any unauthorised use of your credentials.
5.5.3 Bidvers shall not be liable for any loss, damage, or unauthorised activity arising from your failure to safeguard your account credentials. All actions taken through your account are deemed to have been authorised by you unless and until you notify Bidvers of a compromise in accordance with this Section.
5.5.4 You must not share your account credentials with any third party, permit any third party to access or use your account, or create multiple accounts for the same natural or legal person without Bidvers's prior written approval.
6. AUCTION MECHANICS
6.1 Auction Creation by Vendors
6.1.1 Vendors may create Auctions on the Platform subject to the following mandatory requirements:
- Each Lot must be described with complete, accurate, truthful, and non-misleading information, including condition, specifications, dimensions, weight (where applicable), origin, authenticity, photographs taken of the actual item (not stock images, unless clearly labelled as representative), and any limitations, restrictions, or defects known to the Vendor;
- The Vendor must set a Minimum Bid (Reserve Price) for each Lot. The Minimum Bid represents the lowest amount the Vendor is willing to accept;
- The Vendor must set an Auction duration and end time. For Hotel Partners, the Auction end time must occur before the expected date of service delivery. Bidvers strongly recommends that Hotel Partners set Auction end times no less than 24 hours before the guest's check-in date or the scheduled service delivery;
- The Vendor represents and warrants that they hold valid legal title to, or the contractual right and authority to sell or provide, all Lots listed;
- The Vendor must not list any Lot that falls within the categories of prohibited items described in Section 12;
- Auctions are subject to Bidvers's review and compliance checks and will go live only upon approval by Bidvers. Bidvers reserves the right to reject, suspend, or remove any Auction listing that does not comply with this Agreement.
6.2 Bidding Process
6.2.1 By placing a bid on the Platform, the User makes a legally binding and irrevocable offer to purchase the Lot at the stated bid amount, subject only to the User being outbid by a higher qualifying bid before the close of the Auction.
6.2.2 To place a bid, the User must have a verified payment card on file in accordance with Section 5.2.
6.2.3 Each bid must meet or exceed the current highest bid plus any minimum bid increment set by the Vendor, and must not fall below the Minimum Bid.
6.2.4 At the moment a User's bid is accepted as the leading bid on the Platform, the User's verified payment card is charged immediately for the full bid amount. This charge is authorised by the User at the time of bid placement and is irrevocable for the duration of the Auction.
6.2.5 If a User is subsequently outbid by a higher qualifying bid, the previously charged amount will be refunded to the User's original payment card. Refunds are processed through Stripe and are typically completed within three (3) to five (5) Business Days, subject to Stripe's processing timelines and the User's issuing bank.
6.2.6 Users must ensure that sufficient funds or available credit are present on their payment card at the time of placing any bid. A bid placed without sufficient funds constitutes a breach of this Agreement.
6.2.7 Users acknowledge that Auctions are competitive and that placing a bid does not guarantee winning the Lot.
6.3 Winning an Auction
6.3.1 The User who holds the highest accepted bid at the close of an Auction is the Winning Bidder. The close of the Auction constitutes formation of a binding contract of sale between the Winning Bidder and the Vendor.
6.3.2 Upon Auction close:
- The Winning Bidder's payment card, already charged at the time of the leading bid, is confirmed as the final purchase payment and will not be refunded except as provided in Sections 8 and 13;
- Bidvers will notify both the Winning Bidder and the Vendor through the Platform and by email;
- The Vendor is unconditionally obligated to fulfil the Lot in accordance with the Auction description, these Terms, and applicable law.
6.4 Vendor Cancellation of Active Auctions
6.4.1 A Vendor may cancel an active Auction before its scheduled close time under the following circumstances only:
- A material error in the Lot description, including incorrect pricing, specifications, photographs, or condition;
- Unavailability of inventory or inability to fulfil the Lot for reasons beyond the Vendor's control;
- A technical or administrative error made at the time of Auction creation.
6.4.2 Upon Vendor cancellation:
- All active bids are voided immediately;
- All amounts previously charged to Bidders' payment cards are refunded within three (3) to five (5) Business Days;
- No Commission is charged to the Vendor for a cancelled Auction.
6.4.3 Current Platform policy does not impose financial penalties on Vendors for Auction cancellations. However, Bidvers reserves the right, at its sole discretion and upon reasonable prior notice, to introduce a cancellation fee or penalty framework in the future if cancellation patterns indicate misuse, negligence, or bad faith by a Vendor.
6.4.4 Bidvers reserves the right to require a written explanation from any Vendor who cancels more than three (3) Auctions within a rolling 30-day period, and may impose additional verification requirements or temporary restrictions on Auction creation.
6.5 Reserve Not Met
6.5.1 If an Auction closes without any bid meeting or exceeding the Minimum Bid, no sale is completed, no payment is processed, and the Vendor retains the Lot with no obligation to sell.
6.6 Proxy Bidding and Automated Bidding
6.6.1 Bidvers may, at its discretion, offer a proxy bidding feature that allows Users to set a maximum bid amount, with the Platform automatically placing incremental bids on the User's behalf up to that maximum. All proxy bids are subject to the same rules and card charge mechanics described in this Section 6.
6.6.2 The use of third-party scripts, bots, browser extensions, or automated software to place bids is strictly prohibited and constitutes grounds for immediate account termination.
7. PAYMENTS, COMMISSION, AND VENDOR PAYOUTS
7.1 Payment Processing Infrastructure
7.1.1 All payments on the Platform are processed by Stripe. By using the Platform, all Users and Vendors expressly agree to Stripe's Terms of Service and Privacy Policy (available at stripe.com/legal) as they apply to transactions conducted through the Platform.
7.1.2 Bidvers does not store full card numbers, CVV codes, or any other sensitive cardholder data. All such data is handled exclusively by Stripe's PCI-DSS Level 1 compliant infrastructure.
7.1.3 For Oman-based transactions, Bidvers intends to integrate a local payment processor in the future to complement Stripe. Users and Vendors will be notified of any new payment processor integration and will be required to accept updated payment terms before using the local processor.
7.2 Card Charge Authorisation
7.2.1 By placing a bid, the User provides express, irrevocable authorisation for Bidvers and Stripe to charge the full bid amount to the User's verified payment card at the moment the bid becomes the leading bid on the Platform.
7.2.2 This authorisation remains in effect for the duration of the Auction. Users must maintain sufficient available funds or credit on their payment card throughout the Auction period.
7.2.3 Bidvers is not responsible for any overdraft charges, declined transaction fees, or other banking penalties incurred by the User as a result of insufficient funds at the time of bid processing.
7.3 Commission
7.3.1 Bidvers charges a Commission of ten percent (10%) of the Winning Bid amount on every successfully completed Auction.
7.3.2 The Commission is automatically and immediately deducted from the gross Winning Bid amount before the Net Payout to the Vendor is calculated.
7.3.3 The Commission is earned by Bidvers upon successful close of the Auction and is non-refundable, except in the following limited circumstances:
- A Platform error attributable solely to Bidvers's systems caused the Auction to close incorrectly;
- A Dispute is resolved by Bidvers in favour of the User and Bidvers determines, in its sole discretion, that a full refund (including Commission) is warranted.
7.3.4 Bidvers reserves the right to modify the Commission rate upon thirty (30) days' prior written notice to Vendors. Any modified rate will apply only to Auctions created after the effective date of the modification.
7.4 Vendor Payout Schedule and Mechanics
7.4.1 Net Payouts to Vendors are processed on a monthly cycle, disbursed on or before the fifteenth (15th) Business Day of the calendar month following the month in which the relevant Auction(s) successfully closed.
7.4.2 Payouts are made in the following currencies:
- Omani Rial (OMR) for Vendors registered in the Sultanate of Oman;
- Euro (EUR) for Vendors registered in any European country or any other country outside the Sultanate of Oman.
7.4.3 A Payout Threshold of USD 300 (three hundred United States Dollars), or the equivalent in OMR or EUR at the prevailing exchange rate on the date of calculation, applies to all Vendor payouts.
7.4.4 If a Vendor's accumulated Net Payout balance does not meet the Payout Threshold at the end of a given calendar month, the balance will roll over to the following month and continue to accumulate until the Payout Threshold is reached. There is no expiration of rolled-over balances.
7.4.5 Currency conversion costs, where applicable, are borne entirely by Bidvers and will not be deducted from the Vendor's Net Payout.
7.4.6 Payouts are conditional upon the Vendor maintaining: (a) a valid, verified Stripe Connect account (or Oman local payment account, when available) in good standing; and (b) current KYC documentation.
7.4.7 Bidvers reserves the right to withhold any payout, in whole or in part, if:
- A Dispute relating to one or more of the Vendor's Auctions is open and unresolved;
- Bidvers suspects fraudulent activity, misrepresentation, or a material breach of this Agreement;
- A chargeback has been initiated by a Winning Bidder and is under investigation;
- A court order, regulatory directive, or law enforcement request requires a hold on funds.
7.4.8 Withheld payouts will be released within five (5) Business Days of the resolution of the underlying hold event, provided the resolution is in the Vendor's favour.
7.5 Taxes
7.5.1 Each User and Vendor is solely and exclusively responsible for determining, calculating, collecting, reporting, and remitting all applicable taxes, duties, tariffs, and levies arising from their use of the Platform, including but not limited to value-added tax (VAT), goods and services tax (GST), income tax, corporate tax, withholding tax, customs duties, and any other taxes imposed by any governmental authority.
7.5.2 Bidvers does not provide tax advice and is not responsible for collecting or remitting taxes on behalf of Users or Vendors, except where Bidvers is legally required to do so as a deemed supplier or platform operator under applicable law, including but not limited to EU VAT rules for digital marketplace operators under Council Directive 2006/112/EC as amended.
7.5.3 Vendors acknowledge and agree that the Commission charged by Bidvers may be subject to VAT or other transaction taxes, and that Bidvers will issue invoices in compliance with applicable invoicing requirements.
7.6 Chargebacks
7.6.1 If a User initiates a chargeback or payment reversal with their card issuer in respect of a successfully completed Auction without first raising a Dispute with Bidvers under Section 13, Bidvers reserves the right to:
- Immediately suspend the User's account pending investigation;
- Recover the reversed amount plus any chargeback fees assessed by Stripe from the User;
- Permanently ban the User from the Platform if the chargeback is determined by Bidvers or Stripe to be fraudulent, vexatious, or in bad faith.
7.6.2 Bidvers will notify the affected Vendor of any chargeback and will cooperate with the Vendor in providing documentation to contest illegitimate chargebacks through Stripe's dispute process.
8. REFUNDS, RETURNS, AND CANCELLATIONS
8.1 Automatic Refunds (Outbid Users)
8.1.1 Users who are outbid during an active Auction receive an automatic refund of the previously charged bid amount. Refunds are processed through Stripe and will be credited to the original payment card within three (3) to five (5) Business Days, subject to Stripe's processing timelines and the User's card issuer.
8.1.2 Bidvers is not liable for delays in refund processing caused by the User's card issuer, banking institution, or any intermediary payment network.
8.2 Refunds on Vendor Cancellation
8.2.1 If a Vendor cancels an Auction after bids have been charged, all affected Bidders will receive a full refund of their charged amounts within three (3) to five (5) Business Days of the cancellation.
8.3 Returns and Refunds for Physical Goods (Including Perfumes)
8.3.1 All sales of physical goods on the Platform are final upon Auction close, except where a valid Dispute is raised and upheld by Bidvers.
8.3.2 A Winning Bidder may raise a Dispute with Bidvers in the following circumstances:
- The delivered item is materially different from the Lot description (including wrong item, wrong quantity, wrong product, or counterfeit goods);
- The item arrives visibly damaged due to the Vendor's inadequate packaging or handling (not attributable to carrier damage);
- The item is not delivered at all within the fulfilment timeframe specified in the Auction listing or, where no timeframe is stated, within fourteen (14) calendar days of Auction close.
8.3.3 Disputes must be raised within forty-eight (48) hours of confirmed delivery, or within fourteen (14) calendar days of expected delivery if the item has not arrived.
8.3.4 Upon receiving a Dispute, Bidvers will investigate. If the Dispute is upheld:
- The Winning Bidder will receive a full refund of the purchase amount;
- Return logistics and associated shipping costs are the responsibility of the Vendor;
- The corresponding payout to the Vendor (if not yet disbursed) will be cancelled. If the payout has already been disbursed, the refund amount will be deducted from the Vendor's future payouts or recovered directly from the Vendor.
8.3.5 If the Dispute is dismissed as unsubstantiated, no refund will be issued and the sale stands.
8.3.6 Where an item arrives damaged due to carrier handling (not the Vendor's packaging), Bidvers will assist in facilitating the claim but resolution is subject to the shipping carrier's own claims policy. Bidvers bears no liability for carrier-caused damage.
8.3.7 Change-of-mind returns are not accepted on the Platform. Once an Auction closes successfully, the Winning Bidder is contractually bound to complete the purchase and the Vendor is contractually bound to fulfil the Lot.
8.4 Refunds for Hotel Upgrades, Amenities, and Services
8.4.1 Hotel Auctions involve the sale of non-physical services. No physical goods are delivered.
8.4.2 If the Winning Bidder cancels their hotel stay or does not attend (no-show), refund eligibility is determined exclusively by:
- The consumer protection and refund laws applicable in the country where the hotel is located;
- The consumer protection laws of the Winning Bidder's country of residence;
- Any mandatory statutory rights applicable to the Winning Bidder as a consumer under applicable EU or Omani consumer protection legislation.
8.4.3 Bidvers does not impose a uniform refund policy for hotel stay cancellations beyond the statutory rights described above. Bidvers will facilitate the refund process in accordance with applicable law.
8.4.4 If a Hotel Partner is unable to honour a confirmed Auction win due to overbooking, operational failure, or any other reason attributable to the Hotel Partner, the Winning Bidder is entitled to a full refund of the Winning Bid amount. The refund will be processed by Bidvers within five (5) Business Days and the corresponding amount will be charged back to the Hotel Partner.
8.4.5 If a Hotel Partner cancels an Auction before close, all charged bids are refunded per Section 8.2.
9. USER OBLIGATIONS AND CONDUCT
9.1 Accurate Information
9.1.1 Users must provide and maintain accurate, current, and complete account information at all times. Any change in billing address, country of residence, email address, telephone number, or payment card must be updated promptly in account settings.
9.1.2 Bidvers may, at any time, request documentation to verify the accuracy of your registration information. Failure to comply with a verification request within ten (10) Business Days may result in account suspension.
9.2 Bid Integrity
9.2.1 Users shall not:
- Place bids without a genuine, bona fide intent to purchase the Lot;
- Engage in bid rigging, price fixing, or any form of collusion with other Users or Vendors to manipulate Auction outcomes;
- Use automated scripts, bots, browser extensions, web crawlers, or any non-human software to place bids, monitor Auctions, or interact with the Platform (unless using Bidvers's own proxy bidding feature);
- Engage in shill bidding, which includes placing bids on Lots in which the User has a direct or indirect financial, commercial, or personal interest as a Vendor, associate, employee, relative, or agent of the Vendor;
- Attempt to contact Vendors outside the Platform to negotiate off-platform transactions, circumvent the auction process, or avoid the Commission;
- Place bids using stolen, fraudulent, or unauthorised payment cards;
- Engage in any activity designed to artificially inflate or deflate the price of a Lot.
9.3 General Conduct
9.3.1 Users shall not:
- Use the Platform for any purpose that is unlawful, fraudulent, or in violation of any applicable law or regulation;
- Upload, post, transmit, or distribute any content that is false, misleading, defamatory, obscene, threatening, abusive, discriminatory, or in violation of any third-party intellectual property rights;
- Attempt to gain unauthorised access to the Platform's systems, databases, servers, or any other User's or Vendor's account;
- Interfere with, disrupt, or impose an unreasonable burden on the Platform's infrastructure or network;
- Harass, abuse, threaten, stalk, or intimidate any Vendor, Hotel Partner, other User, or Bidvers personnel;
- Impersonate any person or entity, or misrepresent your affiliation with any person or entity;
- Circumvent, disable, or interfere with any security, authentication, or access control features of the Platform.
9.4 Dual Role: Vendor and Bidder
9.4.1 A registered Vendor may hold a separate User account for the purpose of bidding on other Vendors' Lots, provided:
- The Vendor does not bid on any Auction for a Lot that they, their employees, agents, affiliates, or immediate family members have listed;
- The Vendor discloses the dual-account arrangement to Bidvers upon request.
9.4.2 Bidding on one's own Lots, or the Lots of a closely affiliated Vendor, constitutes shill bidding, which is a material breach of this Agreement and may constitute a criminal offence in certain jurisdictions.
10. VENDOR OBLIGATIONS, WARRANTIES, AND REPRESENTATIONS
10.1 Lot Accuracy and Authenticity
10.1.1 Vendors are solely and exclusively responsible for the accuracy, completeness, and lawfulness of all Lot listings and Vendor Content. All physical goods (including perfumes) must be genuine, authentic, unaltered, and in the condition described.
10.1.2 Listing counterfeit, stolen, adulterated, tampered-with, or prohibited goods on the Platform constitutes a criminal offence in the Sultanate of Oman, the European Union, and most other jurisdictions. Bidvers will immediately terminate the Vendor's account and refer the matter to the relevant law enforcement authorities.
10.2 Fulfilment Obligations
10.2.1 Upon a successful Auction close, the Vendor must:
- Fulfil the Lot within the timeframe stated in the Auction listing. Where no timeframe is stated, fulfilment must occur within seven (7) Business Days for physical goods;
- Package physical goods with appropriate, industry-standard protective packaging to prevent damage in transit;
- Provide the Winning Bidder with a valid tracking number and shipping details within twenty-four (24) hours of dispatch;
- For Hotel Partners: honour the confirmed upgrade, amenity, or service at the relevant time of the guest's stay, without requiring any additional payment beyond the Winning Bid amount, and without downgrading the service from what was described in the Auction listing.
10.3 Vendor Representations and Warranties
10.3.1 By creating an Auction and listing a Lot on the Platform, the Vendor represents, warrants, and covenants that:
- The Vendor has full, unencumbered legal title to, or the contractual right and authority to sell or provide, the Lot;
- The Lot does not infringe any third-party intellectual property rights, including trademarks, copyrights, patents, or trade secrets;
- All required permits, licences, customs clearances, health and safety certifications, and regulatory approvals applicable to the manufacturing, sale, export, import, and delivery of the Lot have been obtained and are current;
- The Lot complies with all applicable product safety, labelling, ingredient disclosure, and consumer protection laws in both the Vendor's jurisdiction and the Winning Bidder's jurisdiction;
- All Vendor Content, including photographs, descriptions, and pricing, is accurate, truthful, and not misleading in any material respect;
- The Vendor is in full compliance with all applicable tax obligations, including VAT registration and collection where required;
- The Vendor is not acting on behalf of, or for the benefit of, any sanctioned person, entity, or country.
10.4 KYC and Ongoing Compliance
10.4.1 Vendors must complete KYC verification before any Auction can be created. Vendors must maintain their KYC documentation in current and accurate condition at all times. Failure to update KYC information within ten (10) Business Days of any material change will result in automatic suspension of Auction creation privileges and withholding of all pending payouts until compliance is restored.
10.5 Vendor Record Keeping
10.5.1 Vendors must maintain accurate records of all transactions conducted through the Platform, including invoices, shipping receipts, proof of delivery, and customer communications, for a minimum period of five (5) years or such longer period as required by applicable law.
11. HOTEL PARTNER SPECIFIC PROVISIONS
11.1 Nature of Hotel Auctions
11.1.1 Hotel Auctions involve the sale of non-physical services, including room upgrades, amenity packages, spa credits, dining credits, late checkout, early check-in, and other ancillary hospitality services.
11.1.2 No physical goods are delivered in connection with Hotel Auctions. Accordingly, customs, import/export, and shipping provisions of this Agreement do not apply to Hotel Auctions.
11.2 Auction Timing
11.2.1 Hotel Partners must set Auction end times that allow sufficient time for the guest to be notified of the Auction outcome and for the hotel to prepare the upgraded service. Bidvers recommends ending Hotel Auctions no less than twenty-four (24) hours before the guest's check-in date or the scheduled service delivery date.
11.2.2 If a Hotel Auction ends after the guest has already checked in, the Hotel Partner is still obligated to honour the Auction result, provided the upgrade or amenity can reasonably be provided during the remaining stay.
11.3 Overbooking and Inability to Fulfil
11.3.1 If a Hotel Partner is unable to honour a Winning Bid due to overbooking, operational constraints, renovation, force majeure at the property level, or any other reason attributable to the Hotel Partner:
- The Winning Bidder will receive a full refund of the Winning Bid amount within five (5) Business Days;
- The Hotel Partner will bear all costs associated with the refund, including any Stripe processing fees;
- Bidvers reserves the right to flag the Hotel Partner's account for review. Repeated inability to fulfil Auction wins may result in account suspension or termination.
11.4 Guest Verification
11.4.1 Hotel Partners are responsible for verifying that the Winning Bidder is a legitimate guest with a confirmed reservation at the property, unless the Auction listing explicitly states that the upgrade or amenity is available to non-guests or for future bookings.
11.5 Compliance with Local Hospitality Laws
11.5.1 Hotel Partners operating in Poland must comply with all applicable Polish laws and regulations governing hospitality, consumer protection, and tourism, including (without limitation) the Polish Act on Tourist Services (Ustawa o usługach turystycznych), the Polish Act on Consumer Rights (Ustawa o prawach konsumenta), and all applicable EU directives and regulations as implemented in Polish law.
11.5.2 Hotel Partners operating in any other jurisdiction must comply with all equivalent local laws and regulations applicable to their operations.
12. PROHIBITED ITEMS AND ACTIVITIES
12.1 Prohibited Lots
12.1.1 The following categories of Lots are strictly prohibited on the Platform and must not be listed, offered, or sold by any Vendor:
- Counterfeit, replica, imitation, or inauthentic goods of any kind, including perfumes;
- Stolen goods or goods obtained through fraud, theft, or coercion;
- Goods subject to international trade sanctions, embargoes, or export controls imposed by the United Nations, the European Union, the United States, the Sultanate of Oman, or any other applicable sanctioning authority;
- Controlled substances, narcotics, psychotropic substances, or prescription medications without proper authorisation from the relevant regulatory authority;
- Weapons, ammunition, explosives, or any component thereof;
- Hazardous materials, toxic substances, or goods requiring special handling certifications that the Vendor does not hold;
- Goods that infringe any intellectual property right, including trademark, copyright, patent, or design right;
- Any goods or services prohibited by the laws of the Sultanate of Oman, the European Union, or the Vendor's or Winning Bidder's jurisdiction;
- Any goods requiring a special government licence to sell where the Vendor cannot demonstrate current possession of such licence;
- Hotel amenities, upgrades, or services that the Hotel Partner does not have the operational authority or capacity to provide;
- Human remains, body parts, organs, or biological material;
- Any item or service that Bidvers determines, in its sole reasonable discretion, to be inappropriate, offensive, or harmful to the reputation or integrity of the Platform.
12.2 Prohibited Activities
12.2.1 The following activities are strictly prohibited on the Platform:
- Circumventing the Commission by arranging off-platform transactions with Users introduced through the Platform;
- Creating multiple accounts to gain an unfair advantage in bidding, to evade a suspension or ban, or to circumvent the Payout Threshold;
- Posting false, fabricated, or incentivised reviews, or manipulating Platform rating or feedback systems;
- Reverse engineering, decompiling, disassembling, scraping, crawling, or otherwise attempting to derive the source code, algorithms, or data structures of the Platform;
- Using the Platform to launder money, finance terrorism, evade taxes, or engage in any form of financial crime;
- Sending unsolicited commercial communications (spam) through the Platform's messaging features;
- Interfering with or disrupting the Platform's infrastructure, including through denial-of-service attacks, injection attacks, or the introduction of malware;
- Attempting to manipulate Auction outcomes through any technical, social, or financial means;
- Any other activity that Bidvers determines, in its sole reasonable discretion, to be harmful to the Platform, its Users, its Vendors, or its reputation.
12.2.2 Breach of any provision in this Section 12 constitutes grounds for immediate account termination without prior notice and may result in civil liability and criminal prosecution.
13. DISPUTE RESOLUTION AND INVESTIGATION
13.1 Raising a Dispute
13.1.1 Either a User or a Vendor may raise a formal Dispute with Bidvers by submitting a detailed written complaint to disputes@bidvers.com. The complaint must include: the Auction reference number, a description of the issue, all supporting evidence (photographs, delivery records, correspondence), and the outcome sought by the complainant.
13.1.2 Disputes must be raised within the following timeframes:
- For physical goods: within forty-eight (48) hours of confirmed delivery;
- For non-delivery of physical goods: within fourteen (14) calendar days of the expected delivery date;
- For hotel upgrades and amenities: within forty-eight (48) hours of the expected service delivery date;
- For payment-related issues: within fourteen (14) calendar days of the date of the relevant transaction.
13.1.3 Disputes raised outside these timeframes may be declined at Bidvers's discretion, except where applicable consumer protection law mandates a longer period.
13.2 Dispute Investigation
13.2.1 Bidvers will acknowledge receipt of a Dispute within two (2) Business Days and will commence an investigation within five (5) Business Days of receipt.
13.2.2 Both parties must cooperate fully and in good faith with the investigation, including providing all requested evidence, documentation, photographs, delivery records, and communications within the timeframes specified by Bidvers.
13.2.3 Failure by either party to cooperate with a Dispute investigation may result in an adverse determination against the non-cooperating party.
13.3 Dispute Outcomes
13.3.1 Following investigation, Bidvers may, at its sole discretion:
- Uphold the User's claim in full and issue a complete refund, with the refund amount charged back to the Vendor;
- Uphold the User's claim in part and issue a partial refund, with the corresponding amount charged back to the Vendor;
- Dismiss the claim as unsubstantiated, in which case the sale stands and no refund is issued;
- Require the Vendor to re-fulfil the Lot at the Vendor's expense;
- Suspend or terminate the account of either party if the investigation reveals a material breach of this Agreement;
- Escalate the matter to relevant law enforcement, regulatory authorities, or consumer protection agencies in cases of suspected fraud, counterfeiting, or criminal conduct.
13.3.2 Bidvers's internal Dispute resolution decisions are final and binding within the Platform. Nothing in this Section limits either party's right to pursue independent legal remedies through the competent courts.
13.4 Governing Law and Jurisdiction
13.4.1 Disputes that cannot be resolved through Bidvers's internal process are subject to the following:
- For Users and Vendors based in the Sultanate of Oman: the exclusive jurisdiction of the courts of the Sultanate of Oman, located in Muscat, and Omani law shall apply;
- For Users and Vendors based in Europe or any other country outside the Sultanate of Oman: the exclusive jurisdiction of the competent courts of Romania, located in Bucharest, and Romanian law together with applicable EU regulations shall apply;
- For cross-border Disputes involving parties from both Oman and Europe: the parties agree to first attempt resolution through good-faith negotiation for a period of thirty (30) calendar days. If no resolution is reached, the matter shall be referred to the competent courts of Romania with Romanian and applicable EU law governing the proceedings.
13.4.2 Notwithstanding the foregoing, nothing in this Section deprives any consumer of the right to bring proceedings before the courts of the country in which the consumer is domiciled, in accordance with applicable EU consumer protection law, the Brussels I Regulation (EU) No 1215/2012, or equivalent Omani consumer protection provisions.
13.5 European Online Dispute Resolution (ODR)
13.5.1 For Users and Vendors in the European Union, the European Commission provides an Online Dispute Resolution platform accessible at https://ec.europa.eu/consumers/odr. Bidvers is not obligated to participate in alternative dispute resolution procedures before a consumer arbitration board, but will comply with applicable EU law regarding consumer dispute resolution.
14. INTELLECTUAL PROPERTY RIGHTS
14.1 Platform Ownership
14.1.1 All intellectual property rights in and to the Platform, including but not limited to its design, user interface, software, source code, algorithms, database architecture, trademarks (including the BIDVERS name and logo), trade dress, trade secrets, patents, copyrights, and all original content created by or on behalf of Bidvers, are and shall remain the exclusive property of Sireen Investment Global Co. and Bee Group Technology Srl or their licensors.
14.1.2 No provision of this Agreement grants any User or Vendor any licence, right, title, or interest in or to Bidvers's intellectual property, except a limited, non-exclusive, non-transferable, revocable right to access and use the Platform in accordance with this Agreement for its intended purpose.
14.2 Vendor Content Licence
14.2.1 Vendors retain ownership of all Vendor Content. By uploading Vendor Content to the Platform, the Vendor grants Bidvers a non-exclusive, royalty-free, worldwide, sublicensable (to Bidvers's service providers only), licence to use, display, reproduce, modify, adapt, and distribute the Vendor Content solely for the purposes of operating, promoting, and improving the Platform and displaying the Vendor's Lot listings.
14.2.2 This licence terminates upon the permanent deletion of the Vendor's account and all associated Lot listings, subject to a reasonable transition period of up to ninety (90) days for the removal of cached content.
14.3 No Reverse Engineering
14.3.1 Users and Vendors must not reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, algorithms, or proprietary processes of the Platform or any associated software, whether by manual or automated means.
14.4 Infringement Reporting
14.4.1 If you believe that any Lot listing or Vendor Content infringes your intellectual property rights, please submit a detailed written notice to legal@bidvers.com, including: identification of the copyrighted work or trademark; identification of the infringing material on the Platform; your contact information; and a statement under penalty of perjury that you are the rights holder or authorised agent.
15. PRIVACY, DATA PROTECTION, AND CONSENT
15.1 Privacy Policy
15.1.1 The collection, processing, use, retention, and deletion of personal data by Bidvers is governed by Bidvers's Privacy Policy, available at www.bidvers.com/privacy-policy The Privacy Policy is incorporated into this Agreement by reference and forms an integral part of this Agreement.
15.2 European Data Protection (GDPR)
15.2.1 For Users and Vendors located in the European Economic Area, Bee Group Technology Srl is the data controller and processes all personal data in strict compliance with the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679.
15.2.2 European Users and Vendors have the right to: (a) access their personal data; (b) rectify inaccurate data; (c) erase their data (right to be forgotten); (d) restrict processing; (e) data portability; (f) object to processing; and (g) lodge a complaint with a supervisory authority. These rights may be exercised by contacting privacy@bidvers.com.
15.3 Oman Data Protection
15.3.1 For Users and Vendors located in the Sultanate of Oman, Sireen Investment Global Co. processes personal data in compliance with the Personal Data Protection Law of Oman (Royal Decree No. 6/2022) and any implementing regulations.
15.4 Data Sharing with Third Parties
15.4.1 Bidvers shares necessary financial and identity data with Stripe for payment processing, KYC verification, and fraud prevention purposes. Stripe's own privacy policy governs Stripe's use of such data.
15.4.2 Bidvers does not sell, rent, lease, or otherwise commercially exploit personal data to or with any third party for marketing, advertising, or profiling purposes.
15.4.3 Bidvers may disclose personal data to law enforcement, regulatory authorities, or courts when required to do so by applicable law, court order, or regulatory direction.
15.5 Cookies and Tracking
15.5.1 The Platform uses cookies and similar tracking technologies as described in the Privacy Policy and the Cookie Policy available at www.bidvers.com/cookie-policy. By using the Platform, you consent to the use of cookies in accordance with the Cookie Policy and applicable law, including the ePrivacy Directive (Directive 2002/58/EC) as implemented in the relevant EU member state.
16. LIMITATION OF LIABILITY AND DISCLAIMERS
16.1 Marketplace Disclaimer
16.1.1 BIDVERS OPERATES AS AN ONLINE MARKETPLACE FACILITATING TRANSACTIONS BETWEEN USERS AND VENDORS. BIDVERS IS NOT THE SELLER, MANUFACTURER, SUPPLIER, DISTRIBUTOR, OR PROVIDER OF ANY LOT. BIDVERS MAKES NO REPRESENTATION OR WARRANTY REGARDING THE QUALITY, SAFETY, LEGALITY, AUTHENTICITY, OR AVAILABILITY OF ANY LOT.
16.2 Disclaimer of Warranties
16.2.1 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE PLATFORM IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. BIDVERS SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
16.2.2 BIDVERS DOES NOT WARRANT THAT: (A) THE PLATFORM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE; (B) THE RESULTS OBTAINED FROM USING THE PLATFORM WILL BE ACCURATE OR RELIABLE; (C) THE PLATFORM WILL BE FREE FROM VIRUSES, MALWARE, OR OTHER HARMFUL COMPONENTS; OR (D) ANY DEFECTS IN THE PLATFORM WILL BE CORRECTED.
16.3 Limitation of Aggregate Liability
16.3.1 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, BIDVERS'S TOTAL AGGREGATE LIABILITY TO ANY USER OR VENDOR ARISING FROM OR IN CONNECTION WITH THIS AGREEMENT, THE PLATFORM, OR ANY TRANSACTION CONDUCTED THROUGH THE PLATFORM, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR OTHERWISE, SHALL NOT EXCEED THE GREATER OF:
- The total Commission fees paid by or on behalf of the claimant to Bidvers in the six (6) months immediately preceding the event giving rise to the claim; or
- Five hundred United States Dollars (USD 500).
16.4 Exclusion of Consequential Damages
16.4.1 IN NO EVENT SHALL BIDVERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF DATA, LOSS OF BUSINESS, LOSS OF GOODWILL, BUSINESS INTERRUPTION, OR PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, EVEN IF BIDVERS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
16.5 Consumer Rights Carve-Out
16.5.1 NOTHING IN THIS SECTION 16 SHALL LIMIT OR EXCLUDE ANY LIABILITY THAT CANNOT BE LIMITED OR EXCLUDED UNDER APPLICABLE MANDATORY CONSUMER PROTECTION LAW, INCLUDING BUT NOT LIMITED TO LIABILITY FOR DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE, LIABILITY FOR FRAUD OR FRAUDULENT MISREPRESENTATION, OR ANY OTHER LIABILITY THAT CANNOT BE EXCLUDED BY LAW.
17. INDEMNIFICATION
17.1 Vendor Indemnification
17.1.1 Each Vendor shall indemnify, defend, and hold harmless Bidvers, its parent companies, subsidiaries, affiliates, directors, officers, employees, agents, successors, and assigns from and against any and all claims, demands, actions, proceedings, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees and court costs) arising from or in connection with:
- The Vendor's breach of any provision, representation, or warranty in this Agreement;
- Any inaccuracy, misrepresentation, or omission in a Lot listing or Vendor Content;
- The Vendor's failure to fulfil a Lot in accordance with the Auction description and applicable law;
- Any claim brought by a Winning Bidder, third party, or governmental authority relating to the Lot, its sale, delivery, quality, authenticity, safety, or regulatory compliance;
- The Vendor's violation of any applicable law, regulation, or third-party right.
17.2 User Indemnification
17.2.1 Each User shall indemnify, defend, and hold harmless Bidvers, its parent companies, subsidiaries, affiliates, directors, officers, employees, agents, successors, and assigns from and against any and all claims, demands, actions, proceedings, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising from or in connection with:
- The User's breach of any provision of this Agreement;
- The User's fraudulent or bad-faith use of the Platform, including fraudulent chargebacks;
- The User's violation of any applicable law, regulation, or third-party right.
18. ACCOUNT SUSPENSION, TERMINATION, AND REMEDIES
18.1 Termination by User or Vendor
18.1.1 Users and Vendors may terminate their account at any time by submitting a written request to accounts@bidvers.com. Account termination will be processed within ten (10) Business Days, subject to the following conditions:
- All active Auctions created by the terminating Vendor must be completed or cancelled;
- All pending Disputes in which the terminating party is involved must be resolved;
- Outstanding payouts that meet the Payout Threshold at the time of termination will be disbursed in the next regular payout cycle;
- Outstanding payouts below the Payout Threshold at the time of termination will be paid out to the Vendor's account within sixty (60) days of account closure, regardless of the Threshold.
18.2 Suspension and Termination by Bidvers
18.2.1 Bidvers reserves the right to suspend or terminate any account, with or without prior notice, in the following circumstances:
- Material breach of any provision of this Agreement;
- Suspected fraudulent, illegal, or abusive activity;
- Failure to complete or maintain KYC verification;
- A pattern of chargebacks indicating abuse or bad faith;
- Listing of prohibited items or engagement in prohibited activities;
- Non-cooperation with a Dispute investigation;
- Receipt of a court order, regulatory directive, or law enforcement request;
- Extended account inactivity of twelve (12) months or more;
- Repeated Auction cancellations indicating negligence or bad faith;
- Any conduct that Bidvers reasonably determines to be harmful to the Platform, its Users, its Vendors, or its reputation.
18.3 Effect of Termination
18.3.1 Upon termination of an account:
- The terminated party's right to access and use the Platform ceases immediately;
- All active Auctions created by a terminated Vendor are cancelled and all affected Bidders are refunded in full;
- Bidvers will retain the terminated party's data in accordance with the Privacy Policy and applicable data retention laws;
- All accrued rights, obligations, and liabilities arising prior to termination survive and remain in full force and effect;
- The terminated party remains liable for all outstanding obligations, including any unpaid amounts owed to Bidvers.
18.4 Reinstatement
18.4.1 Bidvers may, at its sole discretion, reinstate a suspended or terminated account upon the party's demonstration of compliance with the conditions that led to suspension or termination. Reinstatement is not guaranteed and Bidvers's decision is final.
19. ANTI-MONEY LAUNDERING AND ANTI-FRAUD
19.1 Bidvers is committed to complying with all applicable anti-money laundering (AML), counter-terrorism financing (CTF), and sanctions laws and regulations, including but not limited to the Omani Anti-Money Laundering Law (Royal Decree No. 30/2016), EU Directive 2015/849 (Fourth Anti-Money Laundering Directive) as amended by EU Directive 2018/843 (Fifth Anti-Money Laundering Directive), and all applicable national implementations thereof.
19.2 Bidvers may implement transaction monitoring systems, suspicious activity reporting, and enhanced due diligence procedures. Bidvers may request additional documentation or information from any User or Vendor where suspicious activity is detected or where required by law.
19.3 Users and Vendors acknowledge that Bidvers may be required to report suspicious transactions to relevant financial intelligence units, law enforcement agencies, or regulatory authorities, and that Bidvers is prohibited by law from disclosing the existence of such reports to the affected party.
19.4 Users and Vendors represent and warrant that all funds used on the Platform are derived from lawful sources and that they are not acting on behalf of, or for the benefit of, any sanctioned person, entity, or country.
20. ELECTRONIC COMMUNICATIONS AND CONSENT
20.1 By registering an account on the Platform, you consent to receive electronic communications from Bidvers, including:
- Account registration confirmations and verification emails;
- Auction notifications, bid status updates, and payment confirmations;
- Dispute and investigation correspondence;
- Platform announcements, service updates, and Terms modification notices;
- Marketing and promotional communications (where you have opted in or where permitted by applicable law).
20.2 You agree that all notices, disclosures, agreements, and other communications that Bidvers provides to you electronically satisfy any legal requirement that such communications be in writing.
20.3 You may opt out of marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting support@bidvers.com. Opting out of marketing communications does not affect your receipt of transactional, legal, or account-related communications.
21. THIRD-PARTY SERVICES AND LINKS
21.1 The Platform may contain links to, or integrations with, third-party websites, services, or applications, including Stripe, shipping carriers, and hotel booking systems.
21.2 Bidvers does not control, endorse, or assume any responsibility for the content, privacy policies, practices, availability, or security of any third-party service. Your use of third-party services is governed by their own terms and policies.
21.3 Bidvers shall not be liable for any loss or damage arising from your reliance on, or interaction with, any third-party service accessed through or linked from the Platform.
22. FORCE MAJEURE
22.1 No party shall be liable for any delay or failure in performing its obligations under this Agreement to the extent that such delay or failure is caused by a Force Majeure event.
22.2 The affected party must: (a) notify the other parties as soon as reasonably practicable of the Force Majeure event; (b) use commercially reasonable efforts to mitigate its effects; and (c) resume performance of its obligations as soon as the Force Majeure event ceases.
22.3 If a Force Majeure event continues for a period exceeding sixty (60) calendar days, either party may terminate the affected transactions without liability, provided that all refunds due to Users are processed promptly.
23. MODIFICATIONS TO THESE TERMS
23.1 Bidvers reserves the right to amend, modify, supplement, or replace these Terms at any time, in its sole discretion.
23.2 For material modifications, Bidvers will provide at least thirty (30) calendar days' prior notice by: (a) posting the revised Terms on the Platform with a prominent notice indicating the effective date of the changes; and (b) sending an email notification to all registered account holders at the email address associated with their account.
23.3 For non-material modifications (such as typographical corrections, formatting changes, or clarifications that do not substantively alter your rights or obligations), Bidvers may update the Terms without prior notice.
23.4 Your continued use of the Platform after the effective date of any modification constitutes your irrevocable acceptance of the revised Terms in their entirety. If you do not accept any modification, you must immediately cease all use of the Platform and close your account.
23.5 Bidvers will maintain an archive of prior versions of these Terms, accessible upon request to legal@bidvers.com.
24. SURVIVAL
24.1 The following Sections shall survive the expiration or termination of this Agreement for any reason: Section 2 (Definitions), Section 7 (Payments, to the extent of accrued obligations), Section 8 (Refunds and Returns, to the extent of accrued obligations), Section 13 (Disputes), Section 14 (Intellectual Property), Section 15 (Privacy), Section 16 (Limitation of Liability), Section 17 (Indemnification), Section 19 (Anti-Money Laundering), Section 24 (Survival), and Section 25 (General Provisions).
25. GENERAL PROVISIONS
25.1 Entire Agreement
25.1.1 This Agreement, together with the Privacy Policy, Cookie Policy, and any additional terms presented at the time of specific transactions or services, constitutes the entire agreement between the parties with respect to the subject matter herein and supersedes all prior and contemporaneous agreements, proposals, negotiations, representations, and understandings, whether written or oral.
25.2 Severability
25.2.1 If any provision of this Agreement is found to be invalid, unlawful, void, or unenforceable by a court of competent jurisdiction, that provision shall be deemed severed from this Agreement without affecting the validity, legality, or enforceability of the remaining provisions, which shall continue in full force and effect. The severed provision shall be replaced by a valid and enforceable provision that most closely reflects the original intent.
25.3 No Waiver
25.3.1 The failure or delay by Bidvers in exercising any right, power, or remedy under this Agreement shall not constitute a waiver of that right, power, or remedy, nor shall any single or partial exercise of any right preclude any other or further exercise of that right or any other right.
25.4 Assignment
25.4.1 Users and Vendors may not assign, transfer, delegate, or sublicence any rights or obligations under this Agreement without the prior written consent of Bidvers. Any attempted assignment without consent is null and void.
25.4.2 Bidvers may assign this Agreement, in whole or in part, to any affiliate, subsidiary, or successor entity in connection with a merger, acquisition, reorganisation, or sale of all or substantially all of its assets, provided that the assignee assumes all of Bidvers's obligations under this Agreement.
25.5 Independent Contractors
25.5.1 Bidvers and each User and Vendor are independent contractors. Nothing in this Agreement creates a partnership, joint venture, agency, employment, or franchise relationship between any parties.
25.6 No Third-Party Beneficiaries
25.6.1 This Agreement is for the sole benefit of the parties hereto and does not confer any rights or remedies upon any third party, except for the indemnified parties described in Section 17.
25.7 Notices
25.7.1 All legal notices to Bidvers must be sent in writing to legal@bidvers.com or to the registered address of the relevant entity. Notices sent by email are deemed received on the next Business Day following transmission. Notices sent by registered post are deemed received five (5) Business Days after posting.
25.8 Language
25.8.1 This Agreement is written and executed in the English language. In the event of any conflict, discrepancy, or ambiguity between the English version and any translation, the English version shall prevail and govern.
25.9 Headings
25.9.1 Section headings and the table of contents are included for convenience of reference only and shall not affect the construction, interpretation, or enforcement of any provision of this Agreement.
25.10 Counterparts
25.10.1 Acceptance of this Agreement by electronic means (including clicking "I Agree," creating an account, or using the Platform) shall have the same legal effect as a handwritten signature on a physical document.
26. CONTACT INFORMATION
|
Purpose |
Oman (Sireen Investment Global Co.) |
Europe (Bee Group Technology Srl) |
|
General Support |
||
|
Legal Notices |
||
|
Disputes |
||
|
Privacy / Data Protection |
||
|
Security Incidents |
||
|
Account / Payout Issues |
||
|
KYC / Vendor Onboarding |
||
|
IP Infringement Reports |
SCHEDULE A: COMMISSION AND PAYOUT SUMMARY
|
Parameter |
Value |
|
Commission Rate |
10% of the Winning Bid amount |
|
Commission Deduction |
Automatic, deducted before Net Payout |
|
Payout Cycle |
Monthly, on or before the 15th Business Day of the following month |
|
Payout Threshold |
USD 300 (or equivalent in EUR / OMR) |
|
Sub-Threshold Handling |
Balance rolls over to next month until Threshold is met |
|
On-Termination Payout (below Threshold) |
Disbursed within 60 days of account closure |
|
Payout Currency (Oman) |
Omani Rial (OMR) |
|
Payout Currency (Europe) |
Euro (EUR) |
|
Currency Conversion Costs |
Borne entirely by Bidvers |
|
Payout Withholding (Disputes) |
Held until Dispute resolution; released within 5 Business Days |
|
Refund Processing Time |
SCHEDULE B: DISPUTE ESCALATION MATRIX
|
Stage |
Timeframe |
Action |
Owner |
|
Within 48 hours of delivery (goods) or service date (hotels); 14 days for payment issues |
User or Vendor submits written Dispute to disputes@bidvers.com with evidence |
Claimant |
|
|
Within 2 Business Days of receipt |
Bidvers acknowledges Dispute and assigns case reference |
Bidvers |
|
|
Within 5 Business Days of acknowledgement |
Bidvers requests and reviews evidence from both parties |
Bidvers |
|
|
Within 5 Business Days of Bidvers's request |
Responding party provides requested evidence and documentation |
Responding Party |
|
|
Within 10 Business Days of evidence receipt |
Bidvers issues determination (refund, dismissal, re-fulfilment, or escalation) |
Bidvers |
|
|
Refund processed via Stripe to original payment method |
Bidvers / Stripe |
||
|
If internal resolution fails |
Claimant may pursue remedies in competent courts per Section 13.4 |
Claimant |
BY USING BIDVERS.COM, THE BIDVERS MOBILE APPLICATION, OR ANY ASSOCIATED SERVICES, YOU IRREVOCABLY ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE LEGALLY BOUND BY THE ENTIRETY OF THIS AGREEMENT.
END OF TERMS OF USE AND SERVICE AGREEMENT
PRIVACY POLICY
Governing the Collection, Use, Storage, and Processing of Personal Data across the Bidvers Website, Mobile Application, and All Associated Services
Document | Privacy Policy |
Version | 1.0 |
Effective Date | As displayed on the Platform at time of registration |
Last Updated | June 2026 |
Data Controller (Oman) | Sireen Investment Global Co. |
Data Controller (Europe) | Bee Group Technology Srl (Romania) |
Scope | Global: All Users, Vendors, Hotel Partners, and visitors to the Platform |
Platforms Covered | www.bidvers.com, Bidvers mobile application (iOS and Android), all subdomains, APIs, and related digital services |
DPO / Privacy Contact |
THIS PRIVACY POLICY DESCRIBES HOW BIDVERS COLLECTS, USES, STORES, SHARES, AND PROTECTS YOUR PERSONAL DATA. BY ACCESSING OR USING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY IN ITS ENTIRETY.
TABLE OF CONTENTS
1. Introduction and Commitment to Privacy
2. Data Controllers and Contact Information
6. Legal Bases for Processing (GDPR)
8. Automated Decision-Making and Profiling
9. Data Sharing and Third-Party Recipients
10. International Data Transfers
12. Your Rights as a Data Subject
13. Rights Under Omani Data Protection Law
15. Cookies and Tracking Technologies
18. Vendor and Hotel Partner Data Responsibilities
19. Third-Party Links and Services
21. Changes to This Privacy Policy
22. Complaints and Supervisory Authorities
Schedule A: Cookie and Tracking Technology Register
Schedule B: Sub-Processor Register
Schedule C: Data Subject Rights Comparison Table
1. INTRODUCTION AND COMMITMENT TO PRIVACY
1.1 Bidvers.com ("Bidvers," "we," "us," or "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the Platform, whether as a User (Bidder), Vendor, Hotel Partner, or casual visitor.
1.2 This Privacy Policy (the "Policy") describes the categories of personal data we collect, the purposes for which we process it, the legal bases for processing, the parties with whom we share it, the duration for which we retain it, and the rights you have over your data.
1.3 This Policy applies to all personal data collected through: (a) the Bidvers website at www.bidvers.com and all subdomains; (b) the Bidvers mobile application on iOS and Android; (c) all application programming interfaces (APIs), embedded widgets, and related digital services; (d) email, telephone, and other communications with Bidvers; and (e) in-person interactions at events or conferences where data is collected on behalf of Bidvers.
1.4 This Policy should be read in conjunction with our Terms of Use and Service Agreement (available at www.bidvers.com/terms-of-use) and our Cookie Policy (available at www.bidvers.com/cookie-policy), which are incorporated herein by reference.
1.5 We process personal data in accordance with the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, the ePrivacy Directive 2002/58/EC as amended, the Personal Data Protection Law of the Sultanate of Oman (Royal Decree No. 6/2022), and all applicable national data protection legislation in the jurisdictions where we operate.
2. DATA CONTROLLERS AND CONTACT INFORMATION
2.1 Dual Data Controller Structure
2.1.1 Bidvers operates a dual data controller structure. The identity of the data controller responsible for processing your personal data depends on your geographic location:
Oman Operations | European & Other Operations | |
Data Controller | Sireen Investment Global Co. | Bee Group Technology Srl |
Registered Jurisdiction | Sultanate of Oman | Romania |
Applicable Data Protection Law | Omani Personal Data Protection Law (Royal Decree No. 6/2022) | GDPR (EU) 2016/679, Romanian Law No. 190/2018, and applicable national implementations |
Privacy Contact | ||
Data Protection Officer | Appointed per Omani PDPL requirements | Appointed per GDPR Article 37 requirements |
2.2 Jurisdictional Determination
2.2.1 The applicable data controller is determined by the country of registration and billing address provided during your account creation. If you are a visitor who has not registered an account, the data controller is determined by your IP-based geographic location at the time of access.
2.2.2 Users and Vendors located in the Sultanate of Oman fall under the controllership of Sireen Investment Global Co.
2.2.3 Users and Vendors located in the European Union, the European Economic Area, or any other country outside the Sultanate of Oman fall under the controllership of Bee Group Technology Srl.
2.3 Joint Controller Arrangements
2.3.1 Where both entities process the same personal data for Platform operations (for example, in cross-border auction transactions), Sireen Investment Global Co. and Bee Group Technology Srl act as joint controllers within the meaning of Article 26 of the GDPR. A joint controller arrangement agreement is in place between the two entities, and a summary of the arrangement is available upon request by contacting privacy@bidvers.com.
2.3.2 Regardless of the joint controller arrangement, you may exercise your data protection rights against and with respect to either entity.
3. DEFINITIONS
3.1 In this Policy, the following terms have the meanings set out below. Terms defined in the Terms of Use and Service Agreement have the same meaning in this Policy unless otherwise stated.
Term | Definition |
Personal Data | Any information relating to an identified or identifiable natural person ("Data Subject"), as defined in Article 4(1) of the GDPR and the Omani PDPL. |
Special Category Data | Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification purposes, health data, or data concerning a person's sex life or sexual orientation (Article 9, GDPR). |
Processing | Any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction. |
Data Controller | The entity that determines the purposes and means of Processing Personal Data. |
Data Processor | An entity that processes Personal Data on behalf of the Data Controller. |
Data Subject | The natural person to whom the Personal Data relates. |
Sub-Processor | A third-party entity engaged by a Data Processor (or by Bidvers directly) to process Personal Data on behalf of Bidvers. |
Consent | A freely given, specific, informed, and unambiguous indication of the Data Subject's wishes, by which the Data Subject signifies agreement to the Processing of their Personal Data. |
Supervisory Authority | An independent public authority established by an EU member state to monitor GDPR compliance, or the relevant Omani regulatory body under the PDPL. |
4. PERSONAL DATA WE COLLECT
4.1 We collect the following categories of personal data, depending on your role on the Platform and your interactions with us:
4.2 Account and Identity Data
- Full legal name (first name, last name);
- Email address;
- Telephone number (including country code);
- Country of residence and billing address;
- Date of birth (for age verification purposes);
- Username and account password (stored in hashed, encrypted form);
- Profile photograph (optional);
- Preferred language and communication preferences.
4.3 Vendor and Hotel Partner Verification Data (KYC)
- Business registration documents, trade licences, and commercial registration numbers;
- Government-issued photo identification (passport, national ID, or equivalent);
- Proof of address (utility bill, bank statement, or equivalent);
- Tax identification number (TIN), VAT registration number, or equivalent fiscal identifier;
- Beneficial ownership information (for corporate Vendors);
- Hotel operating licences and hospitality permits (for Hotel Partners);
- Bank account details and Stripe Connect account information for payout purposes.
4.4 Financial and Transaction Data
- Payment card details (processed and stored exclusively by Stripe; Bidvers does not store full card numbers, CVVs, or sensitive cardholder data);
- Billing address associated with the payment card;
- Transaction history, including auction participation, bids placed, auctions won, amounts charged, refunds processed, and payouts received;
- Commission calculations and payout records;
- Chargeback and dispute records;
- Invoice and receipt data.
4.5 Auction and Behavioural Data
- Auction listings viewed, bid history, and watchlist activity;
- Search queries and browsing patterns on the Platform;
- Auction creation history and Lot listing details (for Vendors);
- Communication between Users and Vendors through the Platform's messaging system;
- Ratings, reviews, and feedback submitted on the Platform.
4.6 Technical and Device Data
- IP address (IPv4 and IPv6);
- Device type, model, operating system, and version;
- Browser type, version, and language;
- Screen resolution and viewport dimensions;
- Unique device identifiers (IDFA, GAID, or equivalent);
- Mobile network carrier and connection type (WiFi, cellular);
- Time zone, locale, and system clock data;
- Referring URL and exit page data.
4.7 Location Data
- Country-level geolocation derived from IP address (collected automatically);
- Precise geolocation from the mobile application (collected only with your explicit, opt-in consent via the device operating system permission dialogue; you may revoke this consent at any time through your device settings).
4.8 Communication Data
- Records of emails, support tickets, live chat conversations, and telephone calls with Bidvers support;
- Feedback and survey responses;
- Content of dispute submissions and supporting evidence.
4.9 Special Category Data
4.9.1 Bidvers does not intentionally collect or process Special Category Data as defined in Article 9 of the GDPR. If you voluntarily disclose Special Category Data to us (for example, in a dispute submission or support communication), we will process it only to the extent strictly necessary to resolve the matter and on the basis of your explicit consent or the establishment, exercise, or defence of legal claims.
5. HOW WE COLLECT YOUR DATA
5.1 Data You Provide Directly
5.1.1 We collect data that you voluntarily provide to us when you:
- Create or update your account on the Platform;
- Complete the KYC verification process (Vendors and Hotel Partners);
- Place a bid, create an Auction, or list a Lot;
- Add or update your payment card through the Stripe integration;
- Submit a dispute, complaint, or support request;
- Respond to surveys, promotions, or feedback requests;
- Communicate with us via email, telephone, live chat, or the Platform's messaging system.
5.2 Data We Collect Automatically
5.2.1 When you access or use the Platform, we automatically collect certain technical, device, and behavioural data through:
- Server logs that record every HTTP request to our infrastructure;
- Cookies and similar tracking technologies (see Section 15 and Schedule A);
- Analytics tools integrated into the Platform (see Section 9 for details on analytics providers);
- Application performance monitoring tools;
- The Stripe payment integration (Stripe collects certain device and browser data as part of its fraud detection systems).
5.3 Data We Receive from Third Parties
5.3.1 We may receive personal data about you from the following third-party sources:
- Stripe: payment verification data, card validation outcomes, fraud risk scores, and chargeback notifications;
- KYC and identity verification providers: verification outcomes, document authentication results, and sanctions screening results;
- Public databases and commercial registries: business registration data, beneficial ownership data, and sanctions lists;
- Law enforcement or regulatory authorities: data provided pursuant to a lawful request or court order;
- Social media platforms: if you choose to register or log in via a social media account (where available), we receive the profile data you authorise for sharing.
5.4 Data We Do Not Collect
5.4.1 Bidvers does not collect: (a) full payment card numbers, CVV codes, or PINs (these are processed exclusively by Stripe); (b) biometric data (fingerprints, facial recognition templates); (c) genetic or health data; or (d) data regarding political opinions, religious beliefs, trade union membership, or sexual orientation, except where voluntarily disclosed by you.
6. LEGAL BASES FOR PROCESSING (GDPR)
6.1 For Users and Vendors located in the European Economic Area, we process your personal data on the following legal bases as defined in Article 6(1) of the GDPR:
Legal Basis | GDPR Article | Processing Activity | Examples |
Performance of Contract | Art. 6(1)(b) | Processing necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract | Account creation, bid processing, payment processing, auction management, payout disbursement, dispute resolution |
Legitimate Interest | Art. 6(1)(f) | Processing necessary for the legitimate interests pursued by Bidvers or a third party, except where overridden by your fundamental rights and freedoms | Fraud prevention, platform security, analytics, product improvement, internal administration, enforcement of Terms |
Legal Obligation | Art. 6(1)(c) | Processing necessary for compliance with a legal obligation to which Bidvers is subject | Tax reporting, AML/KYC compliance, response to court orders, regulatory reporting, data retention mandates |
Consent | Art. 6(1)(a) | Processing based on your freely given, specific, informed, and unambiguous consent | Marketing communications, non-essential cookies, precise geolocation, optional profiling, surveys |
Vital Interests | Art. 6(1)(d) | Processing necessary to protect vital interests of the Data Subject or another person | Emergency situations involving health or safety (extremely rare) |
Public Interest | Art. 6(1)(e) | Processing necessary for a task carried out in the public interest | Not currently relied upon by Bidvers |
6.2 Where we rely on Consent as the legal basis, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6.3 Where we rely on Legitimate Interest, we have conducted a Legitimate Interest Assessment (LIA) for each processing activity to ensure that our interests do not override your fundamental rights and freedoms. You may request a copy of the relevant LIA by contacting privacy@bidvers.com.
7. PURPOSES OF PROCESSING
7.1 We process your personal data for the following specific purposes:
7.2 Platform Operations and Service Delivery
- To register, create, and manage your account;
- To verify your identity and eligibility to use the Platform;
- To process bids, manage Auctions, and facilitate the auction process;
- To process payments, charges, refunds, and payouts through Stripe;
- To calculate and deduct the Commission;
- To communicate with you regarding your account, bids, Auctions, and transactions;
- To provide customer support and respond to enquiries;
- To resolve disputes and conduct investigations.
7.3 KYC, Compliance, and Legal Obligations
- To conduct Know Your Customer (KYC) and identity verification for Vendors and Hotel Partners;
- To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) legislation;
- To screen against international sanctions lists;
- To comply with tax reporting and withholding obligations;
- To respond to lawful requests from law enforcement, regulators, and courts;
- To maintain records as required by applicable data retention laws.
7.4 Platform Security and Fraud Prevention
- To detect, prevent, and investigate fraud, unauthorised access, and abuse of the Platform;
- To monitor for suspicious transactions and activity patterns;
- To enforce the Terms of Use and Service Agreement;
- To maintain the security and integrity of our systems, networks, and infrastructure;
- To conduct chargeback investigations and respond to payment disputes.
7.5 Analytics, Product Improvement, and Personalisation
- To analyse usage patterns, feature adoption, and user behaviour in aggregate to improve the Platform;
- To personalise your experience, including displaying relevant Auction categories and search results;
- To conduct A/B testing and feature experiments;
- To generate aggregate, anonymised statistics for internal reporting and benchmarking.
7.6 Marketing and Communications
- To send you promotional and marketing communications about Bidvers services, new features, and relevant Auctions (where you have opted in or where permitted by applicable law under the soft opt-in exception);
- To conduct surveys and collect feedback on your experience;
- To administer promotions, contests, or referral programmes.
7.7 Legal Claims and Corporate Transactions
- To establish, exercise, or defend legal claims;
- To facilitate due diligence in connection with mergers, acquisitions, or corporate restructuring;
- To protect Bidvers's legal rights, property, and safety, and that of our users and the public.
8. AUTOMATED DECISION-MAKING AND PROFILING
8.1 Automated Fraud Detection
8.1.1 Bidvers and its payment processing partner Stripe employ automated fraud detection systems that analyse transaction patterns, device fingerprints, IP geolocation, and behavioural signals to identify potentially fraudulent or high-risk transactions. These systems may automatically flag, delay, or block a transaction pending manual review.
8.1.2 Such automated processing constitutes profiling within the meaning of Article 22 of the GDPR. Where automated decisions produce legal effects or similarly significantly affect you (for example, the blocking of a bid or the suspension of an account), you have the right to:
- Request human intervention in the decision;
- Express your point of view;
- Contest the automated decision.
8.1.3 To exercise these rights, contact disputes@bidvers.com with the relevant transaction or account details.
8.2 Bid Validation
8.2.1 The Platform uses automated validation to ensure bids meet the Minimum Bid requirement, sufficient card authorisation is in place, and the User's account is in good standing. These are necessary contractual checks and do not constitute solely automated decision-making with legal effects.
8.3 No Other Automated Profiling
8.3.1 Beyond fraud detection and bid validation, Bidvers does not engage in automated decision-making that produces legal effects or similarly significantly affects Data Subjects. We do not use automated systems to determine pricing, access to features, or eligibility for services based on profiling.
9. DATA SHARING AND THIRD-PARTY RECIPIENTS
9.1 Bidvers does not sell, rent, lease, or trade your personal data to any third party for marketing, advertising, or commercial purposes.
9.2 We share your personal data only with the following categories of recipients, and only to the extent necessary for the specified purposes:
9.3 Payment Processor: Stripe
9.3.1 We share financial and identity data with Stripe, Inc. and its affiliates for payment processing, card verification, payout disbursement, fraud prevention, and compliance with payment network rules. Stripe acts as an independent data controller for certain processing activities (including its own fraud detection) and as a data processor for others. Stripe's privacy policy governs Stripe's own controllership activities and is available at stripe.com/privacy.
9.4 KYC and Identity Verification Providers
9.4.1 We share Vendor and Hotel Partner identity and business documentation with third-party KYC verification providers who act as data processors on our behalf. These providers conduct identity document authentication, sanctions screening, and adverse media checks. A list of current providers is available in Schedule B.
9.5 Cloud Infrastructure and Hosting Providers
9.5.1 The Platform and its databases are hosted on cloud infrastructure provided by third-party hosting providers who act as data processors. These providers process personal data in accordance with data processing agreements that include Standard Contractual Clauses (SCCs) where required for international transfers (see Section 10).
9.6 Analytics and Performance Monitoring Providers
9.6.1 We use analytics tools to understand Platform usage patterns, diagnose technical issues, and improve product performance. Analytics providers receive pseudonymised or aggregated data wherever possible. Where personal data is shared, it is done on the basis of legitimate interest and subject to data processing agreements.
9.7 Communication and Support Tools
9.7.1 We use third-party email delivery, live chat, and helpdesk tools to facilitate communications with you. These providers act as data processors and process personal data (email address, name, message content) subject to data processing agreements.
9.8 Transaction Counterparties
9.8.1 When you participate in an Auction, we share limited data with the transaction counterparty (the Vendor, for a Winning Bidder; or the Winning Bidder, for the Vendor) to the extent necessary for fulfilment of the Lot. For physical goods, this may include the Winning Bidder's name, shipping address, and contact email. For hotel services, this may include the Winning Bidder's name and booking reference.
9.8.2 We do not share payment card details, financial data, or KYC documentation with transaction counterparties.
9.9 Law Enforcement and Regulatory Authorities
9.9.1 We may disclose personal data to law enforcement agencies, courts, regulatory authorities, financial intelligence units, or other governmental bodies when required to do so by applicable law, court order, regulatory directive, or where disclosure is necessary for the prevention, detection, or investigation of criminal offences, including fraud and money laundering.
9.9.2 Where legally permitted, we will notify you of such disclosure. Where we are prohibited by law from notifying you (for example, under a secrecy obligation in AML legislation), we will comply with the prohibition.
9.10 Corporate Transactions
9.10.1 In the event of a merger, acquisition, divestiture, corporate restructuring, or sale of all or a portion of Bidvers's assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will provide notice and, where required by applicable law, obtain your consent before such transfer. The acquiring entity will assume all obligations under this Privacy Policy.
9.11 Professional Advisors
9.11.1 We may share personal data with our legal counsel, auditors, tax advisors, and other professional advisors for the purpose of obtaining professional advice, subject to professional confidentiality obligations.
10. INTERNATIONAL DATA TRANSFERS
10.1 Cross-Border Processing
10.1.1 As Bidvers operates across the Sultanate of Oman and the European Economic Area, your personal data may be transferred between these jurisdictions and processed in a country other than the country in which it was originally collected.
10.2 Transfers from the EEA
10.2.1 Where personal data collected in the European Economic Area is transferred to a country outside the EEA that has not been deemed to provide an adequate level of data protection by the European Commission, we implement the following safeguards in compliance with Chapter V of the GDPR:
- Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46(2)(c) of the GDPR, in the form adopted by Commission Implementing Decision (EU) 2021/914;
- A Transfer Impact Assessment (TIA) evaluating the legal framework of the recipient country and any supplementary measures necessary to ensure an essentially equivalent level of protection;
- Supplementary technical and organisational measures where necessary, including encryption in transit and at rest, pseudonymisation, and access controls.
10.3 Transfers from Oman
10.3.1 Where personal data collected in the Sultanate of Oman is transferred outside of Oman, Sireen Investment Global Co. ensures compliance with the cross-border data transfer requirements of the Omani Personal Data Protection Law (Royal Decree No. 6/2022) and any regulations or guidance issued by the relevant Omani supervisory authority.
10.4 Transfers to the United States
10.4.1 Certain sub-processors, including Stripe, are headquartered in the United States. Data transfers to the United States are protected by Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework, where the sub-processor has certified its participation.
10.5 Your Rights Regarding Transfers
10.5.1 You may request a copy of the Standard Contractual Clauses or other safeguards in place for any international transfer of your data by contacting privacy@bidvers.com.
11. DATA RETENTION
11.1 General Retention Principle
11.1.1 We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements.
11.1.2 The specific retention periods depend on the category of data and the purpose of processing:
Data Category | Retention Period | Basis |
Account and identity data | Duration of active account plus 3 years after account deletion | Contractual necessity; statutory limitation periods for claims |
KYC / Vendor verification data | Duration of active account plus 5 years after account deletion, or longer if required by AML law | Legal obligation (AML Directive, Omani AML Law) |
Financial and transaction data | Legal obligation (tax and accounting laws, VAT Directive) | |
Auction and behavioural data | Duration of active account plus 1 year after account deletion | Legitimate interest (analytics, product improvement) |
Technical and device data | Legitimate interest (security, fraud prevention, analytics) | |
Location data (precise) | Consent; deleted or anonymised after 6 months | |
Communication and support data | Contractual necessity; legitimate interest (dispute resolution) | |
Dispute records | Legal obligation; legitimate interest (legal claims defence) | |
Marketing consent records | Duration of active account plus 3 years after withdrawal of consent or account deletion | Legal obligation (accountability and compliance records) |
Cookie and tracking data | As specified in Schedule A for each cookie category | Consent (non-essential); legitimate interest (essential) |
Server and access logs | 90 days | Legitimate interest (security monitoring, incident response) |
11.2 Retention After Account Deletion
11.2.1 When you delete your account or request erasure, we will delete or anonymise your personal data within thirty (30) days, except to the extent that retention is required by law, necessary for the resolution of outstanding disputes, or necessary for the establishment, exercise, or defence of legal claims. Data retained for legal purposes will be securely stored with access restricted to authorised personnel only and will be deleted at the expiry of the applicable retention period.
11.3 Anonymisation
11.3.1 Where feasible, we will anonymise personal data rather than delete it. Anonymised data is no longer personal data and may be retained and used indefinitely for statistical, analytical, and product improvement purposes.
12. YOUR RIGHTS AS A DATA SUBJECT (GDPR)
12.1 If you are located in the European Economic Area, you have the following rights under the GDPR. These rights are not absolute and may be subject to exceptions and limitations as provided by applicable law.
Right | Description |
Right of Access (Art. 15) | You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of the data together with information about the purposes, categories, recipients, retention periods, and safeguards for international transfers. |
Right to Rectification (Art. 16) | You have the right to request correction of inaccurate personal data and completion of incomplete personal data without undue delay. |
Right to Erasure (Art. 17) | You have the right to request deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent; (c) you object to processing and there are no overriding legitimate grounds; (d) the data has been unlawfully processed; or (e) deletion is required by law. This right does not apply where processing is necessary for compliance with a legal obligation or for legal claims. |
Right to Restriction (Art. 18) | You have the right to request restriction of processing where: (a) you contest the accuracy of the data; (b) processing is unlawful and you prefer restriction over erasure; (c) we no longer need the data but you require it for legal claims; or (d) you have objected to processing pending verification of legitimate grounds. |
Right to Data Portability (Art. 20) | You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV), and to transmit that data to another controller without hindrance, where processing is based on consent or contract and is carried out by automated means. |
Right to Object (Art. 21) | You have the right to object to processing based on legitimate interest at any time, on grounds relating to your particular situation. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You have an absolute right to object to processing for direct marketing purposes at any time, without needing to state a reason. |
Right Not to Be Subject to Automated Decisions (Art. 22) | You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. See Section 8 for details on automated decision-making on the Platform. |
Right to Withdraw Consent (Art. 7(3)) | Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. |
Right to Lodge a Complaint (Art. 77) | You have the right to lodge a complaint with a supervisory authority in your EU member state of habitual residence, place of work, or place of the alleged infringement. See Section 22 for supervisory authority details. |
12.2 Exercising Your Rights
12.2.1 To exercise any of the above rights, submit a written request to privacy@bidvers.com. We will verify your identity before processing any request. We will respond to your request within thirty (30) days of receipt, extendable by a further sixty (60) days for complex or voluminous requests, with notice to you of the extension and the reasons for it.
12.2.2 We will not charge a fee for processing your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee reflecting our administrative costs, or refuse to act on the request.
13. RIGHTS UNDER OMANI DATA PROTECTION LAW
13.1 If you are located in the Sultanate of Oman, you have the following rights under the Personal Data Protection Law (Royal Decree No. 6/2022):
- The right to be informed about the collection and processing of your personal data;
- The right to access your personal data held by us;
- The right to request correction of inaccurate or incomplete personal data;
- The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected or where processing was unlawful;
- The right to withdraw consent at any time where processing is based on consent;
- The right to object to processing of your personal data in certain circumstances;
- The right to data portability where technically feasible;
- The right to lodge a complaint with the relevant Omani supervisory authority.
13.2 To exercise any of these rights, contact privacy@bidvers.com. We will respond within the timeframe prescribed by the Omani PDPL and its implementing regulations.
14. CHILDREN'S PRIVACY
14.1 The Platform is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal data from children under 18.
14.2 If we become aware that we have collected personal data from a child under 18 without appropriate parental or guardian consent, we will take immediate steps to delete that data from our systems.
14.3 If you believe that a child under 18 has provided personal data to us, please contact us immediately at privacy@bidvers.com.
15. COOKIES AND TRACKING TECHNOLOGIES
15.1 What Are Cookies
15.1.1 Cookies are small text files placed on your device by our servers or by third-party services integrated into the Platform. They enable the Platform to recognise your device, remember your preferences, and provide certain functionality.
15.2 Categories of Cookies
15.2.1 We use the following categories of cookies and tracking technologies:
Category | Purpose | Legal Basis | Duration | Consent Required? |
Strictly Necessary | Essential for Platform functionality: authentication, security, session management, load balancing | Legitimate Interest (Art. 6(1)(f)); exempt under ePrivacy Art. 5(3) | Session or up to 12 months | No |
Functional | Remember user preferences: language, region, display settings, recently viewed Auctions | Consent (Art. 6(1)(a)) | Up to 12 months | Yes |
Analytics / Performance | Measure Platform usage, page views, session duration, error rates, feature adoption | Consent (Art. 6(1)(a)) | Up to 24 months | Yes |
Advertising / Marketing | Deliver relevant advertisements, measure campaign effectiveness, retargeting | Consent (Art. 6(1)(a)) | Up to 24 months | Yes |
Stripe (Third-Party) | Payment processing, fraud detection, device fingerprinting for card verification | Performance of Contract (Art. 6(1)(b)); Legitimate Interest (Art. 6(1)(f)) | As per Stripe's cookie policy | No (essential for payment) |
15.3 Cookie Consent Management
15.3.1 When you first visit the Platform, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You may change your cookie preferences at any time through the cookie settings accessible via the footer link on every page of the Platform.
15.3.2 Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. Disabling functional or analytics cookies may degrade your experience on the Platform.
15.4 Browser-Level Controls
15.4.1 You may also control cookies through your browser settings. Most browsers allow you to view, manage, and delete cookies. Please note that blocking all cookies may prevent you from accessing certain features of the Platform.
15.5 Do Not Track
15.5.1 The Platform does not currently respond to "Do Not Track" (DNT) browser signals, as there is no universally accepted standard for DNT compliance. We will update this Policy if a widely adopted standard is established.
15.6 Detailed Cookie Register
15.6.1 A detailed register of all cookies and tracking technologies used on the Platform, including the specific cookie name, provider, purpose, type, and expiration, is set out in Schedule A.
16. DATA SECURITY
16.1 Technical Measures
16.1.1 Bidvers implements appropriate technical measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
- Encryption of data in transit using TLS 1.2 or higher for all communications between your device and the Platform;
- Encryption of sensitive data at rest using AES-256 or equivalent industry-standard encryption;
- Hashing and salting of account passwords using bcrypt or equivalent algorithms;
- Network-level security controls, including firewalls, intrusion detection/prevention systems, and DDoS mitigation;
- Role-based access controls (RBAC) restricting access to personal data to authorised personnel on a need-to-know basis;
- Regular security patching and vulnerability management;
- Secure software development lifecycle (SSDLC) practices, including code review and security testing.
16.2 Organisational Measures
16.2.1 Bidvers implements appropriate organisational measures, including:
- Data protection training for all employees and contractors who process personal data;
- Confidentiality obligations in employment contracts and contractor agreements;
- Data processing agreements with all sub-processors (see Schedule B);
- Regular internal audits and compliance reviews;
- Incident response plan and data breach notification procedures (see Section 17);
- Physical security controls at data centre facilities operated by our hosting providers.
16.3 No Absolute Security
16.3.1 While we employ industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at security@bidvers.com.
16.4 PCI-DSS Compliance
16.4.1 All payment card data is processed, stored, and transmitted exclusively by Stripe, which is certified as a PCI-DSS Level 1 Service Provider. Bidvers does not handle, store, or process full payment card numbers, CVVs, or PINs at any point.
17. DATA BREACH NOTIFICATION
17.1 GDPR Breach Notification
17.1.1 In the event of a personal data breach likely to result in a risk to the rights and freedoms of natural persons, Bidvers will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR.
17.1.2 Where the breach is likely to result in a high risk to your rights and freedoms, we will notify you directly without undue delay, in accordance with Article 34 of the GDPR, providing details of the nature of the breach, the data affected, the likely consequences, and the measures taken or proposed to mitigate the impact.
17.2 Omani Breach Notification
17.2.1 For data breaches affecting personal data processed under the jurisdiction of Sireen Investment Global Co., notification will be made to the relevant Omani supervisory authority and affected Data Subjects in accordance with the Omani Personal Data Protection Law and its implementing regulations.
17.3 Breach Response
17.3.1 Bidvers maintains a documented incident response plan that includes procedures for: (a) identification and containment of the breach; (b) assessment of the nature, scope, and severity of the breach; (c) notification to supervisory authorities and affected Data Subjects; (d) remediation and recovery; and (e) post-incident review and improvement.
18. VENDOR AND HOTEL PARTNER DATA RESPONSIBILITIES
18.1 Vendor as Independent Controller
18.1.1 When a Vendor or Hotel Partner receives personal data about a Winning Bidder from the Platform for the purpose of fulfilling a Lot (for example, the Winning Bidder's name and shipping address for physical goods, or the Winning Bidder's name and booking reference for hotel services), the Vendor or Hotel Partner acts as an independent data controller for that data.
18.1.2 As an independent data controller, the Vendor is solely responsible for:
- Processing the Winning Bidder's personal data only for the purpose of fulfilling the Lot;
- Not using the Winning Bidder's data for marketing, profiling, or any other purpose without the Winning Bidder's explicit, separate consent;
- Implementing appropriate technical and organisational security measures to protect the data;
- Complying with all applicable data protection laws in their jurisdiction, including the GDPR (for European Vendors) and the Omani PDPL (for Omani Vendors);
- Responding to data subject rights requests from Winning Bidders regarding data held by the Vendor;
- Deleting or anonymising the Winning Bidder's personal data once the fulfilment obligation is complete, unless retention is required by law.
18.2 Prohibited Use of Bidder Data
18.2.1 Vendors and Hotel Partners must not:
- Sell, rent, share, or disclose Winning Bidder data to any third party for any purpose other than Lot fulfilment;
- Use Winning Bidder data for direct marketing without separate, freely given consent;
- Transfer Winning Bidder data outside of the jurisdiction in which it was collected without appropriate safeguards;
- Retain Winning Bidder data beyond the period necessary for fulfilment and applicable legal retention obligations.
18.3 Vendor Indemnity for Data Breaches
18.3.1 Vendors shall indemnify Bidvers for any loss, damage, fine, penalty, or liability incurred by Bidvers as a result of the Vendor's failure to comply with applicable data protection laws in respect of Winning Bidder data received from the Platform.
19. THIRD-PARTY LINKS AND SERVICES
19.1 The Platform may contain links to third-party websites, services, or applications. This Privacy Policy applies only to data processed by Bidvers. We are not responsible for the privacy practices, data collection, or content of third-party websites.
19.2 We encourage you to review the privacy policies of any third-party services before providing your personal data.
19.3 Where we integrate third-party services into the Platform (such as Stripe for payments), data sharing with those services is described in Section 9 and governed by data processing agreements or the third party's own controller privacy policies, as applicable.
20. MARKETING COMMUNICATIONS
20.1 Opt-In and Soft Opt-In
20.1.1 We will only send you marketing communications where:
- You have provided explicit, freely given consent to receive marketing (opt-in); or
- You are an existing customer and we are marketing our own similar services, and you have not opted out (soft opt-in, as permitted under Article 13(2) of the ePrivacy Directive and applicable national implementations).
20.2 Opt-Out
20.2.1 You may opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email;
- Adjusting your communication preferences in your account settings;
- Contacting support@bidvers.com with the subject line "Unsubscribe.".
20.2.2 Opting out of marketing does not affect your receipt of transactional, legal, account-related, or service communications (such as bid confirmations, payment receipts, and dispute updates), which are necessary for the performance of your contract with Bidvers.
20.3 No Third-Party Marketing
20.3.1 We will never share your personal data with third parties for their own direct marketing purposes without your explicit, prior consent.
21. CHANGES TO THIS PRIVACY POLICY
21.1 Bidvers reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform functionality.
21.2 For material changes that substantively alter how we collect, use, or share your personal data, or that reduce your data protection rights, we will:
- Post the revised Policy on the Platform with a prominent notice at least thirty (30) calendar days before the effective date;
- Send an email notification to all registered account holders;
- Where required by law, obtain your renewed consent before applying the changes to your data.
21.3 For non-material changes (typographical corrections, formatting, or clarifications), we may update the Policy without prior notice.
21.4 Your continued use of the Platform after the effective date of any material change constitutes acceptance of the revised Policy. If you do not accept any material change, you must cease using the Platform and may request account deletion.
21.5 Prior versions of this Privacy Policy are archived and available upon request by contacting privacy@bidvers.com.
22. COMPLAINTS AND SUPERVISORY AUTHORITIES
22.1 Internal Complaints
22.1.1 If you have any concerns about how we process your personal data, we encourage you to contact us first at privacy@bidvers.com so that we can resolve the matter directly.
22.2 EU Supervisory Authorities
22.2.1 If you are located in the European Economic Area and are dissatisfied with our response, you have the right to lodge a complaint with a supervisory authority in your EU member state of habitual residence, place of work, or place of the alleged infringement.
22.2.2 As Bee Group Technology Srl is established in Romania, the lead supervisory authority is:
Authority | Details |
Name | Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP) |
Address | B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, 010336, Romania |
Website | |
22.3 Omani Supervisory Authority
22.3.1 If you are located in the Sultanate of Oman, you may lodge a complaint with the relevant Omani supervisory authority designated under the Personal Data Protection Law (Royal Decree No. 6/2022).
22.4 Judicial Remedies
22.4.1 In addition to your right to complain to a supervisory authority, you have the right to seek a judicial remedy before the competent courts as described in Section 13.4 of the Terms of Use and Service Agreement.
23. GENERAL PROVISIONS
23.1 Relationship to Terms of Use
23.1.1 This Privacy Policy is supplementary to, and should be read together with, the Terms of Use and Service Agreement. In the event of any conflict between this Policy and the Terms regarding the processing of personal data, this Policy shall prevail.
23.2 Severability
23.2.1 If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.
23.3 Language
23.3.1 This Policy is written in English. In the event of any conflict between the English version and any translation, the English version shall prevail.
23.4 No Waiver
23.4.1 Bidvers's failure to enforce any provision of this Policy shall not constitute a waiver of that provision.
23.5 Entire Privacy Agreement
23.5.1 This Policy, together with the Cookie Policy and any consent forms presented on the Platform, constitutes the entire agreement between you and Bidvers regarding the processing of your personal data, and supersedes all prior privacy-related representations and understandings.
24. CONTACT INFORMATION
Purpose | Oman (Sireen Investment Global Co.) | Europe (Bee Group Technology Srl) |
General Privacy Enquiries | ||
Data Subject Rights Requests | ||
DPO Contact | ||
Cookie Preferences | Via Platform footer link | Via Platform footer link |
Marketing Opt-Out | ||
Security Incidents | ||
Legal Notices |
SCHEDULE A: COOKIE AND TRACKING TECHNOLOGY REGISTER
The following table sets out the cookies and tracking technologies currently used on the Platform. This register is reviewed and updated periodically. The most current version is always available at www.bidvers.com/cookie-policy.
Cookie Name | Provider | Purpose | Type / Duration | Category |
_bid_session | Bidvers (first-party) | Session management and authentication | Session cookie | Strictly Necessary |
_bid_csrf | Bidvers (first-party) | Cross-site request forgery protection | Session cookie | Strictly Necessary |
_bid_consent | Bidvers (first-party) | Stores your cookie consent preferences | Persistent / 12 months | Strictly Necessary |
_bid_lang | Bidvers (first-party) | Remembers your language preference | Persistent / 12 months | Functional |
_bid_recent | Bidvers (first-party) | Stores recently viewed Auctions | Persistent / 30 days | Functional |
_ga | Google Analytics (third-party) | Distinguishes unique visitors | Persistent / 24 months | Analytics |
_ga_[ID] | Google Analytics (third-party) | Maintains session state | Persistent / 24 months | Analytics |
_gid | Google Analytics (third-party) | Distinguishes users | Persistent / 24 hours | Analytics |
__stripe_mid | Stripe (third-party) | Fraud prevention and device identification | Persistent / 12 months | Strictly Necessary |
__stripe_sid | Stripe (third-party) | Fraud prevention session token | Session cookie | Strictly Necessary |
_fbp | Meta / Facebook (third-party) | Advertising attribution and retargeting | Persistent / 90 days | Marketing |
Note: Additional cookies may be set by third-party services integrated into the Platform. This register will be updated accordingly. You can manage your cookie preferences at any time through the cookie settings link in the Platform footer.
SCHEDULE B: SUB-PROCESSOR REGISTER
The following table lists the third-party sub-processors engaged by Bidvers to process personal data on our behalf. This register is reviewed and updated periodically. Material changes to sub-processors will be communicated to Users and Vendors in advance where required by applicable law or our data processing agreements.
Sub-Processor | Purpose | Location / Data Hosting | Safeguards |
Stripe, Inc. | Payment processing, card verification, payout disbursement, fraud detection | United States (with EU data hosting options) | SCCs, EU-U.S. DPF certification, PCI-DSS Level 1 |
[Cloud Provider] | Platform hosting, database storage, compute infrastructure | [To be specified] | SCCs, ISO 27001, SOC 2 Type II |
[KYC Provider] | Identity verification, document authentication, sanctions screening | [To be specified] | SCCs, DPA, ISO 27001 |
[Analytics Provider] | Platform usage analytics, performance monitoring | [To be specified] | SCCs, DPA, data anonymisation |
[Email Provider] | Transactional and marketing email delivery | [To be specified] | SCCs, DPA, TLS encryption |
[Support Platform] | Customer support ticketing, live chat | [To be specified] | SCCs, DPA, access controls |
Note: Entries marked "[To be specified]" will be updated as vendor selection is finalised. You may request the current, complete sub-processor list at any time by contacting privacy@bidvers.com.
SCHEDULE C: DATA SUBJECT RIGHTS COMPARISON TABLE
The following table provides a comparative overview of your data protection rights under GDPR and Omani PDPL:
Right | GDPR (European Users) | Omani PDPL (Oman Users) |
Right of Access | Art. 15: Right to obtain a copy of personal data and supplementary information | Provided under PDPL: Right to access personal data held by the controller |
Right to Rectification | Art. 16: Right to correct inaccurate or incomplete data | Provided under PDPL: Right to correct inaccurate data |
Right to Erasure | Art. 17: Right to deletion ("right to be forgotten") subject to exceptions | Provided under PDPL: Right to request deletion where data is no longer necessary |
Right to Restrict Processing | Art. 18: Right to restrict processing in specified circumstances | Limited provision under PDPL; contact us for details |
Right to Portability | Art. 20: Right to receive data in machine-readable format and transfer to another controller | Emerging provision under PDPL; contact us for details |
Right to Object | Art. 21: Right to object to processing based on legitimate interest or for direct marketing | Provided under PDPL: Right to object to processing in certain circumstances |
Automated Decision-Making | Art. 22: Right not to be subject to solely automated decisions with legal effects | Limited provision under PDPL; Bidvers applies GDPR-equivalent protections |
Withdraw Consent | Art. 7(3): Right to withdraw consent at any time | Provided under PDPL: Right to withdraw consent |
Lodge Complaint | Art. 77: Right to lodge complaint with supervisory authority | Provided under PDPL: Right to lodge complaint with Omani supervisory authority |
Response Timeframe | 30 days, extendable by 60 days | As prescribed by PDPL implementing regulations |
BY USING BIDVERS.COM, THE BIDVERS MOBILE APPLICATION, OR ANY ASSOCIATED SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY IN ITS ENTIRETY.
END OF PRIVACY POLICY
COOKIE POLICY
Governing the Use of Cookies, Pixels, Tags, and Tracking Technologies across the Bidvers Website, Mobile Application, and All Associated Services
Document | Cookie Policy |
Version | 1.0 |
Effective Date | As displayed on the Platform at time of first visit |
Last Updated | June 2026 |
Data Controller (Oman) | Sireen Investment Global Co. |
Data Controller (Europe) | Bee Group Technology Srl (Romania) |
Platforms Covered | www.bidvers.com, Bidvers mobile app (iOS / Android), all subdomains and APIs |
Privacy Contact | |
Related Documents | Privacy Policy (www.bidvers.com/privacy-policy) | Terms of Use (www.bidvers.com/terms-of-use) |
THIS COOKIE POLICY EXPLAINS WHAT COOKIES AND SIMILAR TRACKING TECHNOLOGIES ARE USED ON THE PLATFORM, WHY THEY ARE USED, AND HOW YOU CAN CONTROL THEM. BY CONTINUING TO USE THE PLATFORM AFTER PROVIDING YOUR CONSENT THROUGH THE COOKIE BANNER, YOU AGREE TO THE PLACEMENT OF COOKIES AS DESCRIBED IN THIS POLICY.
TABLE OF CONTENTS
2. What Are Cookies and Similar Technologies
8. Analytics and Performance Cookies
9. Advertising, Marketing, and Retargeting Cookies
10. Third-Party Tracking Technologies and Pixels
11. Mobile Application Tracking
13. Managing and Controlling Cookies
14. Impact of Disabling Cookies
15. Do Not Track and Global Privacy Control
16. Data Collected Through Cookies
17. International Data Transfers Via Cookies
18. Data Retention for Cookie Data
20. Changes to This Cookie Policy
Schedule A: Complete Cookie and Tracking Technology Register
Schedule B: Third-Party Advertising Partner Opt-Out Links
1. INTRODUCTION
1.1 This Cookie Policy (the "Policy") explains what cookies, pixels, tags, web beacons, software development kits (SDKs), and similar tracking technologies are used on the Bidvers website at www.bidvers.com, the Bidvers mobile application (iOS and Android), and all associated subdomains, APIs, and digital services (collectively, the "Platform").
1.2 This Policy describes the types of cookies we use, the purposes for which they are used, the third parties that set cookies on the Platform, and the choices you have to manage and control cookies.
1.3 This Policy should be read together with our Privacy Policy (available at www.bidvers.com/privacy-policy) and our Terms of Use and Service Agreement (available at www.bidvers.com/terms-of-use), which are incorporated herein by reference.
1.4 Bidvers operates advertising campaigns across multiple digital advertising platforms, including Google Ads, Meta (Facebook and Instagram) Ads, and TikTok Ads. Bidvers also uses Google Analytics and Microsoft Clarity for analytics and user behaviour tracking. This Policy provides full transparency regarding the cookies and tracking technologies deployed by each of these services on the Platform.
1.5 The data controller responsible for cookie-related data processing is determined by your geographic location in accordance with Section 2 of the Privacy Policy: Sireen Investment Global Co. for users in the Sultanate of Oman, and Bee Group Technology Srl for users in Europe and all other jurisdictions.
2. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES
2.1 Cookies
2.1.1 A cookie is a small text file that is placed on your device (computer, smartphone, tablet) by a web server when you visit a website. Cookies enable the website to recognise your device, remember information about your visit (such as your preferences, login status, and browsing history), and provide functionality.
2.1.2 Cookies can be classified as follows:
- First-party cookies: set by the Bidvers website (www.bidvers.com) directly;
- Third-party cookies: set by external services integrated into the Platform, such as Google Analytics, Microsoft Clarity, Meta Pixel, TikTok Pixel, and Google Ads;
- Session cookies: temporary cookies that are deleted when you close your browser;
- Persistent cookies: cookies that remain on your device for a specified duration or until manually deleted.
2.2 Pixels (Web Beacons / Tracking Pixels)
2.2.1 A pixel (also known as a web beacon, clear GIF, or tracking pixel) is a tiny, invisible image or code snippet embedded in a web page or email. When the page or email is loaded, the pixel sends information to the server that placed it, such as your IP address, browser type, the page URL, and the time of the request.
2.2.2 The following pixels are deployed on the Platform:
- Meta Pixel (formerly Facebook Pixel): used by Meta Platforms, Inc. to track conversions from Facebook and Instagram advertisements, build targeted audiences, and enable retargeting;
- TikTok Pixel: used by TikTok (ByteDance Ltd.) to track conversions from TikTok advertisements, measure ad performance, and enable retargeting;
- Google Ads Conversion Tracking Tag: used by Google LLC to track conversions from Google Ads campaigns and optimise ad delivery.
2.3 JavaScript Tags and SDKs
2.3.1 JavaScript tags are code snippets embedded in the Platform's pages that execute when a page loads, collecting data about user interactions.
2.3.2 The following JavaScript-based tracking tools are deployed:
- Google Analytics (gtag.js / GA4): collects usage data including page views, session duration, bounce rate, user flow, events, and conversions;
- Microsoft Clarity: records session replays (visual recordings of user interactions), heatmaps (aggregated click and scroll patterns), and behavioural metrics. Microsoft Clarity masks sensitive input fields by default to prevent the recording of personal data entered in forms.
2.4 Local Storage and Session Storage
2.4.1 In addition to cookies, the Platform may use browser local storage and session storage to store non-sensitive preference data on your device. These technologies function similarly to cookies but can store larger amounts of data and are not automatically transmitted with every HTTP request.
2.5 Device Fingerprinting
2.5.1 Certain third-party services integrated into the Platform, including Stripe (for fraud detection), may use device fingerprinting techniques that combine technical attributes of your device (browser version, operating system, screen resolution, installed fonts, timezone) to create a probabilistic identifier. This identifier is used exclusively for fraud prevention and security purposes.
3. LEGAL FRAMEWORK
3.1 European Users (EEA)
3.1.1 For users located in the European Economic Area, the placement of cookies and similar technologies on your device is governed by:
- The ePrivacy Directive (Directive 2002/58/EC) as amended by Directive 2009/136/EC, and as implemented in the national law of each EU member state;
- The General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, which governs the processing of personal data collected through cookies;
- Applicable national cookie legislation, including (for users in Romania) the Romanian implementation of the ePrivacy Directive.
3.1.2 Under the ePrivacy Directive, the placement of non-essential cookies requires the user's prior, informed, and freely given consent. Strictly necessary cookies that are essential for the provision of a service explicitly requested by the user are exempt from the consent requirement.
3.2 Omani Users
3.2.1 For users located in the Sultanate of Oman, the collection of data through cookies and tracking technologies is governed by the Personal Data Protection Law (Royal Decree No. 6/2022) and its implementing regulations, to the extent that such technologies process personal data.
3.3 GDPR Legal Bases for Cookie Processing
3.3.1 The following GDPR legal bases apply to our use of cookies:
Cookie Category | Legal Basis | Justification |
Strictly Necessary | Legitimate Interest, Art. 6(1)(f); ePrivacy Art. 5(3) exemption | Essential for Platform operation; no consent required |
Functional | Consent, Art. 6(1)(a) | Not strictly necessary; enhances user experience; requires opt-in consent |
Analytics / Performance | Consent, Art. 6(1)(a) | Measures usage for product improvement; requires opt-in consent |
Advertising / Marketing / Retargeting | Consent, Art. 6(1)(a) | Serves targeted ads and measures campaign performance; requires opt-in consent |
Stripe (Payment / Fraud) | Performance of Contract, Art. 6(1)(b); Legitimate Interest, Art. 6(1)(f) | Essential for payment processing and fraud detection; no consent required |
4. HOW WE OBTAIN YOUR CONSENT
4.1 Cookie Consent Banner
4.1.1 When you first visit the Platform, a cookie consent banner is displayed prominently on your screen. The banner provides clear, concise information about the categories of cookies used and offers you the following choices:
- Accept All: enables all categories of cookies, including functional, analytics, and advertising cookies;
- Reject All (or Accept Only Necessary): enables only strictly necessary cookies. All non-essential cookies are blocked;
- Customise / Manage Preferences: opens a detailed settings panel where you can enable or disable each category of cookies individually.
4.1.2 Non-essential cookies are not placed on your device until you have made an affirmative choice. Scrolling, navigating, or interacting with the Platform does not constitute consent.
4.2 Granular Consent
4.2.1 Our consent mechanism provides granular control at the category level. You can accept one category (for example, analytics) while rejecting another (for example, advertising). Each category is described with a clear explanation of its purpose and the third parties involved.
4.3 Consent Record
4.3.1 When you make a cookie consent choice, we store a record of your consent (including the date, time, categories accepted, categories rejected, and the version of the consent text) in a strictly necessary first-party cookie (_bid_consent) on your device and in our server-side consent management logs. This record is retained for the purposes of demonstrating compliance with Article 7(1) of the GDPR (accountability for consent).
4.4 Withdrawing or Changing Consent
4.4.1 You may change or withdraw your cookie consent at any time by:
- Clicking the "Cookie Settings" or "Manage Cookies" link in the footer of every page of the Platform;
- Adjusting cookie preferences in the dedicated Cookie Preferences Centre accessible from your account settings;
- Deleting cookies through your browser settings (see Section 13).
4.4.2 Withdrawal of consent takes effect prospectively. Cookies already placed prior to withdrawal may remain on your device until they expire or are manually deleted through your browser settings. Data already collected through cookies prior to withdrawal was lawfully processed and will be retained in accordance with our data retention schedule.
4.5 Re-Consent
4.5.1 We will re-present the cookie consent banner to you in the following circumstances:
- When this Cookie Policy is materially updated;
- When new cookie categories or new third-party tracking providers are added;
- Periodically, at intervals not exceeding twelve (12) months, to ensure your consent remains current and informed;
- If you clear your browser cookies (which removes the consent record stored in _bid_consent).
5. CATEGORIES OF COOKIES
5.1 The Platform uses five categories of cookies and tracking technologies. Each category is described in detail in Sections 6 through 10 below, with the complete technical register in Schedule A.
Category | Consent Required? | Can Be Disabled? |
Strictly Necessary | No (exempt under ePrivacy Art. 5(3)) | No (Platform will not function without them) |
Functional | Yes | Yes (may degrade user experience) |
Analytics / Performance | Yes | Yes (no impact on core functionality) |
Advertising / Marketing / Retargeting | Yes | Yes (no impact on core functionality) |
Payment / Fraud Prevention (Stripe) | No (essential for payment processing) | No (bidding and payment will not function) |
6. STRICTLY NECESSARY COOKIES
6.1 These cookies are essential for the Platform to function and cannot be disabled. They enable core functionality such as user authentication, session management, security protections, and load balancing. Without these cookies, features you have requested (such as logging in, placing bids, or managing your account) cannot be provided.
6.2 Strictly necessary cookies do not require your consent under Article 5(3) of the ePrivacy Directive because they are indispensable for the provision of a service explicitly requested by you.
6.3 The following strictly necessary cookies are set on the Platform:
Cookie Name | Provider | Purpose | Type | Duration | Category |
_bid_session | Bidvers (1st party) | Maintains your authenticated session after login | Session | Browser close | Strictly Necessary |
_bid_csrf | Bidvers (1st party) | Cross-site request forgery protection token | Session | Browser close | Strictly Necessary |
_bid_consent | Bidvers (1st party) | Stores your cookie consent preferences and consent record | Persistent | Strictly Necessary | |
_bid_cc | Bidvers (1st party) | Stores your detected country code for jurisdictional routing | Persistent | Strictly Necessary | |
_bid_lb | Bidvers (1st party) | Load balancer affinity cookie for server routing | Session | Browser close | Strictly Necessary |
__stripe_mid | Stripe (3rd party) | Fraud prevention: persistent device identifier for payment security | Persistent | Strictly Necessary | |
__stripe_sid | Stripe (3rd party) | Fraud prevention: session-level device token for payment security | Session | 30 minutes | Strictly Necessary |
7. FUNCTIONAL COOKIES
7.1 Functional cookies enable enhanced functionality and personalisation features that are not strictly necessary for the Platform to operate. They remember choices you make (such as your language, region, or display preferences) and provide improved, personalised features.
7.2 If you disable functional cookies, the Platform will still function but you may experience a less personalised experience (for example, you may need to re-select your language each time you visit).
7.3 Functional cookies require your consent.
Cookie Name | Provider | Purpose | Type | Duration | Category |
_bid_lang | Bidvers (1st party) | Remembers your selected language preference | Persistent | Functional | |
_bid_region | Bidvers (1st party) | Remembers your selected region and currency display preference | Persistent | Functional | |
_bid_recent | Bidvers (1st party) | Stores IDs of recently viewed Auctions for quick access | Persistent | 30 days | Functional |
_bid_watchlist | Bidvers (1st party) | Stores IDs of Auctions added to your watchlist before login | Persistent | Functional | |
_bid_theme | Bidvers (1st party) | Remembers your display theme preference (light/dark mode) | Persistent | Functional |
8. ANALYTICS AND PERFORMANCE COOKIES
8.1 Analytics cookies collect information about how you use the Platform, including which pages you visit, how long you spend on each page, which features you interact with, error messages you encounter, and your navigation patterns. This data helps us understand Platform usage, identify problems, and improve the user experience.
8.2 Analytics cookies require your consent. If you do not consent, analytics cookies will not be placed and no analytics data will be collected from your sessions.
8.3 Google Analytics (GA4)
8.3.1 We use Google Analytics 4 (GA4), provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to measure and analyse Platform usage.
8.3.2 Google Analytics uses first-party cookies set under the bidvers.com domain (prefixed with _ga) to distinguish unique visitors and maintain session state. Google Analytics also collects technical data including IP address, browser type, operating system, screen resolution, and referring URL.
8.3.3 IP Anonymisation: We have enabled IP anonymisation in our Google Analytics implementation, which truncates your IP address before it is stored by Google, ensuring that the full IP address is never retained.
8.3.4 Data Sharing: Google Analytics data may be shared with other Google services (such as Google Ads) for the purpose of linking analytics data with advertising data to measure campaign effectiveness. This cross-service data sharing only occurs if you have consented to both Analytics and Advertising cookies.
8.3.5 Google's data processing terms and privacy commitments for Google Analytics are available at: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.
Cookie Name | Provider | Purpose | Type | Duration | Category |
_ga | Google (3rd party) | Distinguishes unique visitors by assigning a randomly generated client ID | Persistent | 24 months | Analytics |
_ga_<ID> | Google (3rd party) | Maintains session state for GA4 property | Persistent | 24 months | Analytics |
_gid | Google (3rd party) | Distinguishes users for 24-hour analytics aggregation | Persistent | 24 hours | Analytics |
_gat_<ID> | Google (3rd party) | Throttles request rate to Google Analytics servers | Persistent | Analytics | |
_gac_<ID> | Google (3rd party) | Stores campaign attribution data from Google Ads | Persistent | 90 days | Analytics |
8.4 Microsoft Clarity
8.4.1 We use Microsoft Clarity, provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA), to understand how users interact with the Platform through session recordings and heatmaps.
8.4.2 Session Recordings: Microsoft Clarity records user sessions as visual replays, capturing mouse movements, clicks, scrolls, and page transitions. Clarity automatically masks text entered in input fields, password fields, and form fields to prevent the capture of personal data. We have additionally configured Clarity to mask all sensitive data entry areas on the Platform.
8.4.3 Heatmaps: Clarity generates aggregated heatmaps showing where users click, scroll, and hover on each page. Heatmaps are based on aggregated, anonymised data and do not identify individual users.
8.4.4 No Personal Data in Recordings: Clarity is configured to redact and mask any personal data that may appear on screen during session recordings. Bidvers does not use Clarity to collect or record personal data, payment information, or login credentials.
8.4.5 Microsoft Clarity may share data with Microsoft Advertising (formerly Bing Ads) for product improvement purposes. Microsoft's privacy commitments for Clarity are available at: https://clarity.microsoft.com/terms and https://privacy.microsoft.com/en-us/privacystatement.
Cookie Name | Provider | Purpose | Type | Duration | Category |
_clck | Microsoft (3rd party) | Persists the Clarity user ID and session preferences | Persistent | Analytics | |
_clsk | Microsoft (3rd party) | Connects multiple page views by a user into a single Clarity session | Persistent | Analytics | |
CLID | Microsoft (3rd party) | Identifies the first-time Clarity saw this user on any Clarity-enabled site | Persistent | Analytics | |
ANONCHK | Microsoft (3rd party) | Indicates whether MUID (Microsoft user identifier) is transferred to ANID (advertising ID) | Session | Browser close | Analytics |
MR | Microsoft (3rd party) | Indicates whether to refresh MUID | Persistent | Analytics | |
SM | Microsoft (3rd party) | Used in synchronising the MUID across Microsoft domains | Session | Browser close | Analytics |
9. ADVERTISING, MARKETING, AND RETARGETING COOKIES
9.1 Advertising cookies are used to deliver advertisements that are relevant to your interests, to measure the effectiveness of advertising campaigns, to limit the number of times you see an advertisement, and to enable retargeting (showing you Bidvers advertisements on third-party websites and apps after you have visited the Platform).
9.2 Advertising cookies require your explicit consent. If you do not consent, no advertising cookies will be placed, no pixels will fire, and no retargeting audiences will include your data.
9.3 Bidvers operates advertising campaigns on the following platforms, each of which deploys its own cookies, pixels, and tracking technologies on the Platform:
9.4 Google Ads
9.4.1 Google Ads is provided by Google LLC. When you click on a Bidvers advertisement displayed on Google Search, Google Display Network, YouTube, or other Google properties, Google sets cookies on your device to track the conversion (whether you completed a desired action, such as registering an account or placing a bid).
9.4.2 Google Ads uses the Google Ads Conversion Tracking tag and may link conversion data with your Google Analytics data (if both Analytics and Advertising cookies are consented to) to provide cross-channel campaign measurement.
9.4.3 Google Ads may also build retargeting audiences based on your visit to the Platform, enabling Bidvers to show you advertisements on Google properties after you leave the Platform.
9.4.4 Google's advertising privacy policy is available at: https://policies.google.com/technologies/ads.
Cookie Name | Provider | Purpose | Type | Duration | Category |
_gcl_au | Google (3rd party) | Stores conversion attribution data for Google Ads campaigns | Persistent | 90 days | Advertising |
_gcl_aw | Google (3rd party) | Stores click information from Google Ads for conversion tracking | Persistent | 90 days | Advertising |
_gcl_dc | Google (3rd party) | Stores DoubleClick (Display & Video 360) click attribution | Persistent | 90 days | Advertising |
IDE | Google (3rd party, doubleclick.net) | Used by DoubleClick to register and report ad interactions for retargeting | Persistent | Advertising | |
NID | Google (3rd party) | Stores preferences and advertising personalisation for signed-out users | Persistent | Advertising | |
1P_JAR | Google (3rd party) | Gathers website statistics and tracks conversion rates for Google Ads | Persistent | 30 days | Advertising |
CONSENT | Google (3rd party) | Stores cookie consent state for Google services | Persistent | 24 months | Advertising |
9.5 Meta Pixel (Facebook and Instagram Ads)
9.5.1 The Meta Pixel is provided by Meta Platforms, Inc. (1 Hacker Way, Menlo Park, CA 94025, USA). Bidvers deploys the Meta Pixel on the Platform to track conversions from advertisements displayed on Facebook and Instagram, to build Custom Audiences for ad targeting, and to enable retargeting of Platform visitors across the Meta network.
9.5.2 The Meta Pixel fires when you visit the Platform and sends event data to Meta, including: the page URL, referring URL, your browser and device information, Meta cookie identifiers, and information about the actions you take on the Platform (such as viewing an Auction, placing a bid, or completing a purchase). This data is hashed and matched against Meta user profiles to measure ad effectiveness.
9.5.3 Advanced Matching: Bidvers may enable Meta's Advanced Matching feature, which hashes personal data fields (such as email address or phone number) before transmission to Meta for improved attribution accuracy. All data transmitted through Advanced Matching is SHA-256 hashed before leaving your browser.
9.5.4 Meta Conversions API (CAPI): In addition to the browser-based Meta Pixel, Bidvers may implement the Meta Conversions API, which sends server-side event data directly from Bidvers's servers to Meta. CAPI provides more reliable conversion tracking and is not affected by browser cookie restrictions.
9.5.5 Meta's data processing terms and privacy commitments are available at: https://www.facebook.com/privacy/policy/ and https://www.facebook.com/legal/terms/dataprocessing.
Cookie Name | Provider | Purpose | Type | Duration | Category |
_fbp | Meta (3rd party) | Stores a unique browser ID for ad delivery and retargeting across Facebook and Instagram | Persistent | 90 days | Advertising |
_fbc | Meta (3rd party) | Stores click attribution data from Facebook ad clicks | Persistent | 90 days | Advertising |
fr | Meta (3rd party, facebook.com) | Delivers advertising and tracks ad impressions and clicks | Persistent | 90 days | Advertising |
tr | Meta (3rd party) | Meta Pixel tracking cookie for event deduplication | Session | Browser close | Advertising |
datr | Meta (3rd party, facebook.com) | Identifies the browser for security and site integrity purposes | Persistent | 24 months | Advertising |
sb | Meta (3rd party, facebook.com) | Browser identification for security purposes | Persistent | 24 months | Advertising |
9.6 TikTok Pixel
9.6.1 The TikTok Pixel is provided by TikTok (ByteDance Ltd., and its Irish subsidiary TikTok Technology Limited for EEA users). Bidvers deploys the TikTok Pixel on the Platform to track conversions from advertisements displayed on TikTok, to build audiences for ad targeting, and to enable retargeting of Platform visitors on TikTok.
9.6.2 The TikTok Pixel fires when you visit the Platform and sends event data to TikTok, including: the page URL, referring URL, browser and device information, TikTok cookie identifiers, and information about the actions you take on the Platform (such as page views, registrations, and purchases).
9.6.3 TikTok Events API: In addition to the browser-based Pixel, Bidvers may implement the TikTok Events API for server-side conversion tracking, providing more reliable attribution data.
9.6.4 TikTok's data processing terms and privacy commitments are available at: https://www.tiktok.com/legal/page/global/privacy-policy and https://ads.tiktok.com/i18n/official/policy/business-products-terms.
Cookie Name | Provider | Purpose | Type | Duration | Category |
_ttp | TikTok (3rd party) | Assigns a unique visitor ID for TikTok ad attribution and retargeting | Persistent | Advertising | |
_ttclid | TikTok (3rd party) | Stores the click ID from a TikTok ad click for conversion attribution | Persistent | 90 days | Advertising |
tt_sessionId | TikTok (3rd party) | Tracks session information for TikTok Pixel event reporting | Session | Browser close | Advertising |
tt_pixel_session_index | TikTok (3rd party) | Counts the number of sessions for TikTok Pixel reporting | Session | Browser close | Advertising |
ttwid | TikTok (3rd party, tiktok.com) | Used by TikTok to identify the visitor across sessions for ad targeting | Persistent | Advertising |
10. THIRD-PARTY TRACKING TECHNOLOGIES AND PIXELS
10.1 Data Controllership
10.1.1 When third-party cookies and pixels are placed on your device by Google, Meta, TikTok, or Microsoft, these companies act as independent data controllers (or, in some cases, joint controllers with Bidvers) for the personal data they collect. Their own privacy policies govern their use of your data.
10.1.2 Bidvers has entered into data processing agreements or joint controller arrangements with each of these providers, as required by the GDPR. For Meta, this includes the Meta Controller Addendum. For Google, this includes the Google Ads Data Processing Terms.
10.2 Cross-Device Tracking
10.2.1 Third-party advertising partners may use deterministic or probabilistic methods to link your activity on the Platform with your activity on other websites, applications, and devices. This enables cross-device retargeting (showing you Bidvers ads on your phone after you visited the Platform on your laptop, or vice versa).
10.2.2 Cross-device tracking is only enabled if you have consented to advertising cookies. You can prevent cross-device tracking by disabling advertising cookies.
10.3 Server-Side APIs
10.3.1 In addition to browser-based pixels, Bidvers may use server-side APIs (including Meta Conversions API, TikTok Events API, and Google Ads Enhanced Conversions) to send conversion event data directly from Bidvers's servers to the advertising platforms. Server-side events may include hashed personal data (email, phone number) for attribution matching.
10.3.2 Server-side event data is transmitted only if you have consented to advertising cookies and tracking. Your consent choice on the Platform is respected for both browser-based and server-side data transmission.
11. MOBILE APPLICATION TRACKING
11.1 Mobile Identifiers
11.1.1 The Bidvers mobile application may collect mobile advertising identifiers, specifically the Apple Identifier for Advertisers (IDFA) on iOS and the Google Advertising ID (GAID) on Android. These identifiers are used for the same purposes as advertising cookies: conversion tracking, audience building, and retargeting.
11.1.2 On iOS 14.5 and later, the collection of IDFA requires your explicit opt-in consent through Apple's App Tracking Transparency (ATT) framework. If you do not consent, the IDFA is not collected and no identifier-based tracking is performed.
11.1.3 On Android, you can reset or opt out of personalised advertising using your device's advertising settings.
11.2 SDKs in the Mobile Application
11.2.1 The Bidvers mobile application integrates the following third-party SDKs:
- Google Analytics for Firebase (GA4): analytics and event tracking;
- Meta SDK (Facebook SDK): conversion tracking, app event logging, and audience building;
- TikTok SDK: conversion tracking and app event logging;
- Microsoft Clarity SDK: session recording and heatmap analytics;
- Stripe SDK: payment processing and fraud detection.
11.2.2 Each SDK operates under the same consent requirements described in this Policy. Non-essential SDKs are activated only after you have provided consent through the in-app consent mechanism.
11.3 Push Notification Tokens
11.3.1 If you enable push notifications, the mobile application collects your device push notification token for the purpose of sending auction alerts, bid updates, and transactional notifications. Push notification tokens are not used for advertising or retargeting and do not require cookie consent (they are governed by your operating system notification settings).
12. DETAILED COOKIE REGISTER
12.1 The complete, detailed register of all cookies and tracking technologies deployed on the Platform is set out in Schedule A to this Policy.
12.2 The register includes: cookie name, provider, purpose, type (session or persistent), duration, category, and whether consent is required.
12.3 The register is reviewed and updated at least quarterly, or whenever a new tracking technology is added to the Platform. The most current version is always available at www.bidvers.com/cookie-policy.
13. MANAGING AND CONTROLLING COOKIES
13.1 Platform Cookie Preferences Centre
13.1.1 The primary method for managing cookies on the Platform is through our Cookie Preferences Centre, accessible via the "Cookie Settings" link in the footer of every page. The Preferences Centre allows you to enable or disable each non-essential cookie category at any time.
13.2 Browser Settings
13.2.1 You can also control cookies through your browser settings. Most modern browsers allow you to:
- View all cookies stored by the browser;
- Delete individual cookies or all cookies;
- Block all cookies or only third-party cookies;
- Set preferences for specific websites.
13.2.2 Instructions for managing cookies in common browsers:
- Google Chrome: chrome://settings/cookies
- Mozilla Firefox: about:preferences#privacy
- Apple Safari: Preferences > Privacy
- Microsoft Edge: edge://settings/content/cookies
13.3 Mobile Device Settings
13.3.1 On mobile devices, you can manage tracking through your device settings:
- iOS: Settings > Privacy & Security > Tracking (controls App Tracking Transparency);
- Android: Settings > Privacy > Ads (controls Google Advertising ID and personalised ads).
13.4 Advertising Platform Opt-Outs
13.4.1 You can opt out of personalised advertising from each of our advertising partners through the mechanisms listed in Schedule B.
13.5 Industry Opt-Out Tools
13.5.1 You can opt out of interest-based advertising from multiple participating companies through the following industry tools:
- European Interactive Digital Advertising Alliance (EDAA): www.youronlinechoices.eu
- Digital Advertising Alliance (DAA): www.aboutads.info/choices
- Network Advertising Initiative (NAI): www.networkadvertising.org/choices
14. IMPACT OF DISABLING COOKIES
14.1 The following table summarises the impact of disabling each cookie category:
Category Disabled | Impact on Platform Experience | Impact on Bidvers Operations |
Strictly Necessary | Cannot be disabled. Platform will not function. | N/A |
Functional | Language, region, and display preferences not remembered. Recently viewed Auctions not stored. | No operational impact. |
Analytics / Performance | No impact on functionality. Platform works identically. | Bidvers loses insight into usage patterns and cannot diagnose issues as quickly. |
Advertising / Marketing | No impact on functionality. You will still see advertisements, but they will be generic rather than personalised. | Bidvers cannot measure ad campaign effectiveness or build retargeting audiences. |
Stripe (Fraud Prevention) | Cannot be disabled. Payment and bidding will not function. | N/A |
15. DO NOT TRACK AND GLOBAL PRIVACY CONTROL
15.1 Do Not Track (DNT)
15.1.1 The Platform does not currently respond to "Do Not Track" (DNT) browser signals, as there is no universally accepted standard for DNT compliance and the W3C DNT specification was retired in 2019. Your cookie consent choice on the Platform takes precedence.
15.2 Global Privacy Control (GPC)
15.2.1 The Platform will honour the Global Privacy Control (GPC) signal (sec-gpc: 1) where required by applicable law. When a GPC signal is detected from a browser in a jurisdiction that legally recognises GPC as a valid opt-out mechanism, Bidvers will treat the signal as an opt-out of the sale or sharing of personal data for targeted advertising purposes, equivalent to rejecting advertising cookies.
15.2.2 GPC does not affect strictly necessary cookies, functional cookies (if previously consented to), or analytics cookies (if previously consented to).
16. DATA COLLECTED THROUGH COOKIES
16.1 The following categories of data may be collected through cookies and similar tracking technologies deployed on the Platform:
- IP address (truncated/anonymised for Google Analytics);
- Browser type, version, and language;
- Operating system and device type;
- Screen resolution and viewport dimensions;
- Referring URL and exit page;
- Pages visited, features used, and actions taken on the Platform;
- Date, time, and duration of visits;
- Unique cookie identifiers and randomly generated client IDs;
- Mobile advertising identifiers (IDFA/GAID), where consented to;
- Click IDs from advertising campaigns (gclid, fbclid, ttclid);
- Hashed personal data (email, phone) transmitted via server-side APIs with consent;
- Mouse movements, clicks, and scroll depth (Microsoft Clarity session recordings, with sensitive fields masked).
16.2 Cookie-collected data is processed in accordance with our Privacy Policy. The legal bases, retention periods, data subject rights, and international transfer safeguards described in the Privacy Policy apply equally to data collected through cookies.
17. INTERNATIONAL DATA TRANSFERS VIA COOKIES
17.1 Data collected through third-party cookies and pixels may be transferred to and processed in countries outside the European Economic Area, including the United States (Google, Meta, Microsoft) and Singapore/China (TikTok/ByteDance, with EEA data hosted in the EEA/UK under TikTok's Project Clover).
17.2 For transfers from the EEA, the following safeguards are in place:
- Google: EU-U.S. Data Privacy Framework certification; Standard Contractual Clauses;
- Meta: Standard Contractual Clauses as per Meta's Data Processing Terms;
- Microsoft: EU-U.S. Data Privacy Framework certification; Standard Contractual Clauses;
- TikTok: Standard Contractual Clauses; EEA user data stored in European data centres under Project Clover with independent security oversight.
17.3 For details on international data transfer safeguards, see Section 10 of the Privacy Policy.
18. DATA RETENTION FOR COOKIE DATA
18.1 Data collected through cookies is retained for the duration specified in the cookie's expiration (as set out in the cookie register in Schedule A), after which the cookie expires and the data is no longer associated with your device.
18.2 Server-side data derived from cookies (such as analytics reports, conversion logs, and audience segments) is retained as follows:
- Google Analytics data: 14 months from the date of collection (configurable; Bidvers has set the retention period to 14 months);
- Microsoft Clarity data: 30 days for session recordings; aggregated heatmap data retained for 12 months;
- Google Ads conversion data: retained by Google for the duration of the Bidvers advertising account or until deleted;
- Meta Ads conversion data: retained by Meta for up to 2 years, subject to Meta's data retention policies;
- TikTok Ads conversion data: retained by TikTok for up to 2 years, subject to TikTok's data retention policies;
- Bidvers consent records (_bid_consent cookie data): retained for 3 years from the date of consent for GDPR accountability purposes.
19. CHILDREN AND COOKIES
19.1 The Platform is not intended for use by individuals under the age of eighteen (18). We do not knowingly set non-essential cookies for, or collect cookie-based data from, children under 18.
19.2 If we become aware that cookie data has been collected from a child under 18, we will delete the data and instruct all third-party recipients to do the same.
20. CHANGES TO THIS COOKIE POLICY
20.1 Bidvers reserves the right to update this Cookie Policy at any time.
20.2 For material changes (such as the addition of new tracking technologies, new advertising partners, or changes to consent mechanisms), Bidvers will:
- Post the updated Policy on the Platform with a prominent notice at least thirty (30) calendar days before the effective date;
- Re-present the cookie consent banner to all users so that consent can be renewed;
- Update the "Last Updated" date at the top of this Policy.
20.3 For non-material changes (typographical corrections, formatting, or clarifications), the Policy may be updated without prior notice.
20.4 Prior versions of this Policy are archived and available upon request by contacting privacy@bidvers.com.
21. CONTACT INFORMATION
21.1 For any questions, concerns, or requests regarding this Cookie Policy, please contact:
Oman (Sireen Investment Global Co.) | Europe (Bee Group Technology Srl) | |
Cookie / Privacy Enquiries | ||
Data Protection Officer | ||
General Support |
SCHEDULE A: COMPLETE COOKIE AND TRACKING TECHNOLOGY REGISTER
This register provides a comprehensive list of all cookies, pixels, tags, and SDKs deployed on the Bidvers Platform as of the effective date. It is reviewed quarterly.
A.1 Strictly Necessary Cookies
Cookie Name | Provider | Purpose | Type | Duration | Category |
_bid_session | Bidvers | Authenticated session management | Session | Browser close | Strictly Necessary |
_bid_csrf | Bidvers | CSRF protection token | Session | Browser close | Strictly Necessary |
_bid_consent | Bidvers | Cookie consent record (categories, timestamp, version) | Persistent | Strictly Necessary | |
_bid_cc | Bidvers | Country code for jurisdictional routing | Persistent | Strictly Necessary | |
_bid_lb | Bidvers | Load balancer server affinity | Session | Browser close | Strictly Necessary |
__stripe_mid | Stripe | Persistent device ID for fraud prevention | Persistent | Strictly Necessary | |
__stripe_sid | Stripe | Session device token for fraud prevention | Session | 30 minutes | Strictly Necessary |
A.2 Functional Cookies
Cookie Name | Provider | Purpose | Type | Duration | Category |
_bid_lang | Bidvers | Language preference | Persistent | Functional | |
_bid_region | Bidvers | Region and currency display | Persistent | Functional | |
_bid_recent | Bidvers | Recently viewed Auction IDs | Persistent | 30 days | Functional |
_bid_watchlist | Bidvers | Pre-login watchlist Auction IDs | Persistent | Functional | |
_bid_theme | Bidvers | Display theme preference | Persistent | Functional |
A.3 Analytics and Performance Cookies
Cookie Name | Provider | Purpose | Type | Duration | Category |
_ga | Google Analytics | Unique visitor identification (client ID) | Persistent | 24 months | Analytics |
_ga_<ID> | Google Analytics | GA4 property session state | Persistent | 24 months | Analytics |
_gid | Google Analytics | 24-hour user distinction | Persistent | 24 hours | Analytics |
_gat_<ID> | Google Analytics | Request rate throttling | Persistent | Analytics | |
_gac_<ID> | Google Analytics | Campaign attribution from Google Ads | Persistent | 90 days | Analytics |
_clck | Microsoft Clarity | Clarity user ID persistence | Persistent | Analytics | |
_clsk | Microsoft Clarity | Session page view linking | Persistent | Analytics | |
CLID | Microsoft Clarity | First-seen user identification | Persistent | Analytics | |
ANONCHK | Microsoft Clarity | MUID to ANID transfer indicator | Session | Browser close | Analytics |
MR | Microsoft Clarity | MUID refresh indicator | Persistent | Analytics | |
SM | Microsoft Clarity | MUID cross-domain sync | Session | Browser close | Analytics |
A.4 Advertising, Marketing, and Retargeting Cookies
Cookie Name | Provider | Purpose | Type | Duration | Category |
_gcl_au | Google Ads | Conversion attribution | Persistent | 90 days | Advertising |
_gcl_aw | Google Ads | Click information for conversion tracking | Persistent | 90 days | Advertising |
_gcl_dc | Google Ads | DoubleClick click attribution | Persistent | 90 days | Advertising |
IDE | Google (DoubleClick) | Retargeting ad interaction tracking | Persistent | 13/24 months | Advertising |
NID | Preferences and ad personalisation (signed-out) | Persistent | Advertising | ||
1P_JAR | Website statistics and ad conversion rates | Persistent | 30 days | Advertising | |
CONSENT | Google services consent state | Persistent | 24 months | Advertising | |
_fbp | Meta (Facebook) | Browser ID for Facebook/Instagram ad delivery and retargeting | Persistent | 90 days | Advertising |
_fbc | Meta (Facebook) | Facebook ad click attribution | Persistent | 90 days | Advertising |
fr | Meta (facebook.com) | Ad delivery, impression, and click tracking | Persistent | 90 days | Advertising |
tr | Meta (Facebook) | Pixel event deduplication | Session | Browser close | Advertising |
datr | Meta (facebook.com) | Browser identification for security | Persistent | 24 months | Advertising |
sb | Meta (facebook.com) | Browser identification for security | Persistent | 24 months | Advertising |
_ttp | TikTok | Visitor ID for ad attribution and retargeting | Persistent | Advertising | |
_ttclid | TikTok | TikTok ad click ID for conversion attribution | Persistent | 90 days | Advertising |
tt_sessionId | TikTok | Session tracking for Pixel event reporting | Session | Browser close | Advertising |
tt_pixel_session_index | TikTok | Session count for Pixel reporting | Session | Browser close | Advertising |
ttwid | TikTok (tiktok.com) | Cross-session visitor identification for ad targeting | Persistent | Advertising |
SCHEDULE B: THIRD-PARTY ADVERTISING PARTNER OPT-OUT LINKS
You can opt out of personalised advertising and data collection from each of our advertising and analytics partners using the links below:
Partner | Opt-Out / Privacy Settings | Privacy Policy |
Google (Ads, Analytics, DoubleClick) | https://adssettings.google.com and https://tools.google.com/dlpage/gaoptout | https://policies.google.com/privacy |
Meta (Facebook, Instagram) | https://www.facebook.com/adpreferences and https://www.facebook.com/settings?tab=ads | https://www.facebook.com/privacy/policy/ |
TikTok | https://www.tiktok.com/privacy/ads-and-your-data (in-app: Settings > Privacy > Personalised Ads) | |
Microsoft (Clarity, Advertising) | https://account.microsoft.com/privacy and https://about.ads.microsoft.com/en-us/resources/policies/opt-out-of-the-microsoft-advertising-network | https://privacy.microsoft.com/en-us/privacystatement |
Stripe | Not applicable (essential for payment; cannot opt out) | https://stripe.com/privacy |
EDAA (Industry) | https://www.youronlinechoices.eu | N/A |
DAA (Industry) | https://www.aboutads.info/choices | N/A |
NAI (Industry) | N/A |
BY CONTINUING TO USE BIDVERS.COM OR THE BIDVERS MOBILE APPLICATION AFTER PROVIDING YOUR CONSENT THROUGH THE COOKIE BANNER, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS COOKIE POLICY.
END OF COOKIE POLICY