Privacy Policy

Last updated: 10.04.2026

1. Introduction

BidProply ("we", "us" or "our") is committed to protecting your privacy. This privacy policy explains how we collect, use, share and protect your information when you use our property listing and bidding platform.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Norwegian privacy legislation.

2. Data Controller

Ekdahl Enterprises AS Org.no: 933 662 541 Smørbukkveien 3 3123 Tønsberg, Norway Email: post@bidproply.com

3. Information We Collect

3.1 Property Sellers (registered users)

  • Vipps Vipps verification data: Name, email, phone number, address, postal code, national ID number, Vipps subscriber ID
  • Account information: Team/organization name, user role
  • Property information: Property details, photos, documents you upload
  • Payment information: Payment data (we do not store credit card numbers)
  • Audit data: User ID, timestamps, data checksums for integrity verification

3.2 Bidders

  • Vipps Vipps verification data: Name, email, phone number, address, postal code, national ID number, Vipps subscriber ID
  • Bid information: Bid amount, financing details, lender information, desired possession date
  • Identity document: Uploaded ID for verification purposes
  • Technical data: IP address, session ID, time of bid

3.3 Interested Parties

  • Contact information: Name, email, phone number
  • Preferences: Message, notification settings for new bids
  • Source tracking: How you found the property (web form, AI assistant, etc.)

3.4 Visitors (analytics)

  • Click statistics: Pages visited, page type, referrer URL
  • Technical data: IP address, user agent (browser), session ID
  • Marketing data: UTM parameters (source, medium, campaign)

4. How We Use Your Information

  • Service delivery: To facilitate property listings, bidding and communication between buyers and sellers
  • Identity verification: To verify bidder identity via Vipps Vipps
  • Payment processing: To process listing fees
  • Communication: To send bid notifications, viewing requests and system messages
  • Analytics: To understand how users interact with our platform and improve our services
  • Legal compliance: To comply with accounting and tax regulations
  • Security: To detect and prevent fraud, maintain data integrity via checksums

5. Data Sharing

We share your personal data only in the following circumstances:

  • Property sellers: Bidder contact information and bid details are shared with the property seller
  • Interested parties: Your contact information is shared with the property seller when you register interest
  • Service providers: Vipps (identity verification), payment processing, Mailgun (email delivery), Cloudflare R2 (file storage)
  • Legal obligations: When required by law or to protect our legal rights

We do not sell your personal data to third parties.

6. Data Retention

  • Active properties: Data is retained while the property is listed and for 1 year after sale/withdrawal
  • Bids: Retained for 5 years for legal and accounting purposes
  • Transactions: Retained for 5 years according to the Accounting Act
  • Email logs: Retained for 2 years for support and dispute resolution
  • Click statistics: Anonymized after 1 year, aggregated data retained indefinitely
  • User accounts: Retained until deletion is requested

7. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data (subject to legal retention requirements)
  • Right to restriction: Restrict how we process your data
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent for marketing communications

To exercise these rights, contact us at post@bidproply.com

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption: HTTPS/TLS for all data transfer
  • Database security: PostgreSQL with row-level security and check constraints
  • Data integrity: SHA-256 checksums on all records to detect tampering
  • Access control: Multi-tenant isolation, role-based access control
  • Audit trail: All data changes are tracked with user ID and timestamp
  • Secure storage: Files are stored on Cloudflare R2 with access controls
  • Payment security: PCI-compliant payment processing

9. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies: Session management, authentication (required for the service)
  • Analytics cookies: Click statistics, page views (can be disabled)

We do not use third-party advertising cookies or tracking pixels.

10. International Data Transfers

Your data is stored primarily in the EU (Frankfurt, Germany) via Laravel Cloud. Some service providers may process data outside the EU:

  • Payment provider: EU-based payment processing with GDPR compliance
  • Mailgun: EU region (api.eu.mailgun.net) for email delivery
  • Cloudflare R2: EU data centers for file storage

All international transfers are protected by appropriate safeguards (Standard Contractual Clauses).

11. Children's Privacy

Our service is not intended for persons under 18 years of age. We do not knowingly collect personal data from children. Bidders must be 18 years or older and have legal capacity to enter into contracts.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact and Complaints

For privacy questions or to exercise your rights, contact us at post@bidproply.com

If you are not satisfied with our response, you have the right to complain to the Norwegian Data Protection Authority: www.datatilsynet.no

Back to properties