Privacy policy.

01Who is responsible

Luxhaven Trading L.L.C. operates Butter Auctions and is responsible for personal information processed for our website and services. Our trade licence is 1537152. You can contact us at hello@butterauctions.ae, +971 50 318 8026, or our office address below. This notice covers visitors, account holders, bidders, buyers and people who submit a selling enquiry.

02Information we use

We use the name, email address, phone number and username you provide; a securely hashed password; verification and session records; saved pieces, bids, purchases and selling enquiries; and messages you send us. Where necessary for a transaction or legal requirement, we may request identity, ownership, authority or payment evidence through an appropriate secure channel.

Our infrastructure also processes technical information such as IP address, browser and device details, request times, security events and service logs. We use this to deliver the site, limit abuse and investigate faults. Do not send full card details, security codes or passwords in messages or enquiry forms.

We use the country associated with your IP address to suggest the phone country when you sign up. You can change this selection.

03Why we use information

We use information to create and verify accounts, run auctions, record bids, arrange payment and collection, assess selling enquiries, provide support, prevent fraud and meet applicable legal obligations. We process it on the legal basis applicable to the activity, including steps you request before a contract, performance of a contract, legal obligations and consent where required.

Account verification, bid updates, receipts and security messages are service communications. Signing up is not consent to unrelated promotional messages. We do not sell your personal information.

04Signing in with Google

If you choose Google sign-in, Google shares your name, email address, email-verification status and a unique account identifier with Butter Auctions. We use these details to create or connect your account and authenticate future sign-ins. Your username, phone number and acceptance of our terms are collected separately by Butter Auctions.

Google processes the sign-in under its own privacy policy. We request basic identity access for authentication. Temporary security cookies and server records protect this process. Sign-in requests expire after 10 minutes and incomplete account setup expires after 20 minutes.

05Payments through Nomupay

When you use card services, Nomupay and the relevant payment providers process the card details submitted through their secure interface. Butter Auctions retains a payment token and limited information such as card brand, last four digits, expiry and verification or transaction status. The application does not receive or store your full card number or card security code.

We share the account and transaction information needed to verify the card, process an authorised payment, handle a refund or investigate misuse. Nomupay, banks and card networks may also process data for their own legal and security duties. Nomupay’s applicable privacy notice explains its processing and contact details.

Nomupay UAE privacy notice

06Access, providers and international processing

Access is limited to personnel and service providers who need the information for the relevant task. Cloudflare provides our hosting, storage, email delivery and security services, including Turnstile. Payment providers, professional advisers and, where required, competent authorities may receive information for their relevant responsibilities. A collection or delivery provider receives the details needed only where that service is arranged.

Cloudflare, Nomupay and their service providers operate internationally, so processing may occur outside the UAE. Where applicable, we use the safeguards required by UAE data-protection law. We do not represent that all information stays in the UAE. Public auction activity shows the first two characters of your username followed by a mask, and a flag for the country of your saved phone number. Your full name, email, phone number and payment token remain private.

07Cookies and browser storage

Performance measurements contain a random page-load identifier, page route, device class, browser family and Core Web Vitals values. We retain these measurements for 30 days to improve loading speed, responsiveness and visual stability.

Selling drafts, including selected photographs, are stored on your device so you can return after signing in. Submitted photographs are available to your account and the house team. Uploaded photographs that remain unattached to a submission are removed after 48 hours.

We use necessary session cookies and security technology to keep you signed in, verify requests and prevent abuse. Remembered sign-in lasts up to 30 days on the chosen device; a session may end sooner for security reasons. Storage in your browser tab preserves some form drafts and temporary card-setup or pending-bid references so interrupted actions can be reconciled. You can sign out and clear browser data, although disabling required cookies may prevent account features from working.

The site does not currently use advertising trackers. If optional tracking is introduced, we will provide the information and choices required by law before using it.

08Retention and protection

We retain information for as long as needed for the relevant account, service, transaction, security purpose or legal requirement. Accounting, auction and dispute records may need to remain after an account closes. Retention depends on the record and applicable law; information is deleted or anonymised when no longer required. Contact us for details relating to your records.

We use encrypted connections, restricted access, password hashing and other technical safeguards. No online service can promise absolute security. Report a suspected compromise promptly so that we can investigate and take appropriate action.

09Your choices and rights

Subject to applicable law and legitimate restrictions, you may request access, a copy, correction, erasure, restriction or objection to processing, and portability where available. You may withdraw consent for processing that relies on consent without affecting its earlier lawfulness. Send requests to hello@butterauctions.ae; we may verify your identity using only what is reasonably needed.

Some requests cannot be fulfilled while records are required by law, an unresolved transaction or the protection of legal claims. We will explain any restriction and respond within the applicable legal period. Automated security controls can limit suspicious requests; contact us if you believe a restriction is mistaken. You may raise a concern with us or a competent data-protection authority.

10Children and updates

Accounts and bidding are intended only for people who meet the age and capacity requirements in our terms. We do not knowingly invite children to provide account information. Tell us if a child’s information has been submitted so that we can address it.

We update this notice when processing changes and show the revision date. Material changes are communicated, and further consent is requested where the law requires. The English and Arabic versions should be read consistently with applicable UAE law.