Your privacy.

Account details: name, email address and a hashed password. We never store passwords in plain text.

Order details: shipping and billing address, phone number, order contents and payment method. Card numbers are not stored on our servers; payment is completed through a secure payment link.

Activity: pages viewed, lots bid on, bids placed and basic device information. We use this to operate the site and improve the catalogue.

Communications: emails, consignment inquiries and support messages you send us.

To process orders, place bids, arrange shipping, prevent fraud, provide support, and send the weekly Gavel letter if you have asked for it. We do not sell personal information.

We may send transactional emails (order confirmations, payment links, shipping notices) even if you have unsubscribed from marketing.

We use a small number of cookies: a signed session cookie to keep you logged in, an admin cookie for staff access, and a local-storage cart so your selection survives a refresh. We do not use third-party advertising cookies.

We share information with service providers who help us operate: payment processors, shipping carriers, email delivery and cloud hosting. They receive only what they need to perform their service and are bound by contract.

We may disclose information if required by law or to protect the rights, property or safety of Gavel, our customers or others.

Order records are retained for as long as required for tax, accounting and warranty purposes. Account data is retained until you ask us to delete it. You can request deletion by writing to hello@247ja.com.

Depending on where you live, you may have the right to access, correct, delete or port your personal information, or to object to certain processing. Write to us and we will respond within the period required by law.

California residents may request a disclosure of the categories of personal information collected and the purposes for which it is used. We do not sell personal information.

We protect your information with encrypted connections, hashed passwords, restricted staff access and regular backups. No system is completely secure; if we become aware of a breach affecting your data, we will notify you as required.

The site is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

Privacy questions and requests: hello@247ja.com. Postal address available on request.