Bassani Numismatics (Pty) Ltd. This policy explains what personal information we collect through www.bassanis.co.za and our auction platform, why we collect it, and the rights you have under the Protection of Personal Information Act (POPIA).

1. Who we are and what this policy covers

1.1. This Privacy Policy explains how Bassani Numismatics (Pty) Ltd (“Bassani Numismatics”, “we”, “us” or “our”) collects, uses, stores and protects personal information when you use www.bassanis.co.za, our online store, our auction platform and our related services.

1.2. We are the “responsible party” for your personal information as defined in the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1.3. This policy must be read together with our Terms & Conditions of Bidding and, where you purchase from the online store, our Refund & Returns Policy.

2. Information we collect

2.1. Account and registration information: your name, surname, email address, telephone number, physical and delivery addresses, and, where required by the regulations applicable to auctions, identifying information such as an identity number or registration number.

2.2. Transaction information: your bidding history, purchases, invoices, payments and refunds, and delivery records.

2.3. Payment information: payments are processed by third-party payment providers and banks. We do not store your full card number, banking password, PIN or one-time password (OTP) on our systems.

2.4. Communications: emails, WhatsApp messages and other correspondence you exchange with us, so that we can assist you and keep a record of what was agreed.

2.5. Technical information: the IP address, browser and device information generated when you use the website, and the essential cookies described in section 6.

3. How we use your information

3.1. To register and administer your account, verify your identity as required by the auction regulations and applicable law, and process your bids, orders, invoices, payments and deliveries.

3.2. To provide customer support, respond to enquiries, and administer returns, refunds and complaints.

3.3. To prevent and detect fraud, protect the security of our platform, and enforce our terms.

3.4. To comply with our legal obligations, including tax, financial record-keeping and auction-related requirements.

3.5. To send you service messages about your account, bids, orders and deliveries. Marketing communications are only sent where permitted by law, and you may opt out at any time.

4. Lawful basis for processing

4.1. We process personal information where it is necessary to conclude or perform a contract with you (such as a purchase or auction sale), where processing is required by law, where it is necessary to pursue our legitimate interests (such as fraud prevention and platform security), or where you have consented.

5. Who we share information with

5.1. We do not sell personal information to any third party.

5.2. We share personal information only with service providers to the extent necessary to deliver our services: couriers (for delivery), payment processors and banks (for payment), the providers of our bidding and e-commerce platforms (for hosting and operation), and our professional advisers (such as accountants and auditors).

5.3. We may disclose personal information where disclosure is required by law, by a regulator or by a court order.

5.4. Service providers who process personal information on our behalf are required to keep it confidential and secure and to use it only for the purposes we specify.

6. Cookies

6.1. The website uses essential cookies that are required for it to function, such as cookies that keep you logged in and remember the contents of your shopping cart. These cookies do not build advertising profiles.

6.2. You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the website from working.

7. Security

7.1. We apply appropriate, reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), restricted access to systems that hold personal information, and secure hosting located in South Africa.

7.2. No system is completely secure. If we become aware of a data breach that affects your personal information, we will notify you and the Information Regulator as required by POPIA.

8. Retention

8.1. We keep personal information only for as long as it is needed for the purposes described in this policy, and thereafter for as long as we are required to keep it by law (for example, financial and tax records must be retained for the statutory retention periods).

8.2. When personal information is no longer required, it is deleted or de-identified.

9. Your rights

9.1. Subject to POPIA, you have the right to request access to the personal information we hold about you, to request that inaccurate information be corrected, and to request deletion of information that we are not required to retain.

9.2. You have the right to object to processing based on our legitimate interests, and to opt out of marketing communications at any time.

9.3. You may lodge a complaint with the Information Regulator (South Africa): www.inforegulator.org.za.

9.4. To exercise any of these rights, contact us using the details in section 12.

10. Children

10.1. Our services are not directed at persons under 18 years of age, and bidders must be 18 years or older. We do not knowingly collect personal information from children.

11. Changes to this policy

11.1. We may update this policy from time to time. The current version is always published at www.bassanis.co.za, and material changes will be highlighted on the website or communicated to registered users.

12. Contact us

12.1. Privacy queries and requests may be directed to sales@bassanis.co.za or WhatsApp +27 (65) 501-3199, or to the contact details published on www.bassanis.co.za.