Privacy
How Bid My Duo handles your details, including cookies.
Your information
We use your email, brand, website, logo, selected space, amount, order references, acceptance records and timestamps to process and review your purchase, arrange final stickers and provide support. Stripe collects payment and billing details; this site does not store full card numbers or security codes. Our host may process IP addresses and security logs to deliver and protect the website.
What becomes public
Approved brand names, logos, links, payment amounts and display dates can appear on the website and in campaign history. Final-holder logos are also printed on the iPhone. Your order email, billing references, rejected submissions and support messages are private. Do not upload personal information you do not want shown publicly.
Why and with whom
Order processing relies on taking requested steps and performing the contract; tax records on legal obligations; and proportionate security and dispute records on legitimate interests. We use Stripe for payments, Supabase for storage, Resend for transactional email and our hosting provider for delivery. Providers may process data outside the EEA, with legally required transfer safeguards such as adequacy decisions or standard contractual clauses. Contact Bid My Duo for information about the responsible operator, provider locations or safeguards. We do not sell personal data or add you to a marketing list.
Retention and your rights
Unpaid orders are retained up to 30 days; unpublished refunded creative assets up to 90 days after disputes are resolved; ordinary support messages up to 12 months after resolution. Transaction, acceptance and dispute evidence is kept for the applicable statutory period or a specific legal hold. Public history may remain with the campaign record; you can request removal. Security log retention is ordinarily no more than 30 days. Contact us to request access, correction, deletion, restriction, portability or to object where applicable. We may verify your identity and normally respond within one month. You can complain to your local data protection authority, including the AEPD in Spain.