Privacy Policy

Last Updated: 7/7/2026

1. Introduction

Welcome to bAuto.im. This Privacy Policy is issued on behalf of Bauto Limited ("we", "us", or "our"). We are committed to protecting your personal data and respecting your privacy in accordance with the Isle of Man Data Protection Act 2018 (DPA 2018) and the GDPR and LED Implementing Regulations 2018.

This policy explains how we collect, use, store, and protect your personal data when you use our Dual-Marketplace platform.

2. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data: includes first name, last name, and role (private seller or motor trader).
  • Contact Data: includes email address, telephone numbers, and physical addresses.
  • Financial Data: includes payment card details (processed securely via Stripe) and subscription status.
  • Transaction Data: includes details about payments to and from you, vehicle valuations, and records of vehicles bought or sold through the platform.
  • Technical Data: includes internet protocol (IP) address, your login data, and browser session data.
  • Asset Data: includes vehicle registration numbers, images of vehicles, and AI damage reports submitted for appraisal.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you (e.g., facilitating a vehicle auction).
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.

4. Data Security & Storage

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Your data is stored securely in encrypted cloud databases. Financial transactions are handled by PCI-compliant third-party payment processors (Stripe), and we do not store full credit card details on our servers.

5. Your Legal Rights

Under the Isle of Man Data Protection Act 2018, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us. You also have the right to make a complaint at any time to the Isle of Man Information Commissioner (IOMIC).