Trust, security & privacy

The portal runs on Lovable Cloud (built on Supabase) for database, authentication, storage, and serverless functions, and uses Stripe for card payments. Fairways Motor Auctions is responsible for the application's data handling, account approvals, and business processes; the underlying platform providers are responsible for their own infrastructure. You are responsible for keeping your login credentials private and for the accuracy of the details you submit.

• Sign-in is available via email and password, or Google. Passwords are never stored by Fairways — they are hashed by the authentication provider.
• Bidder accounts must complete registration and pay a refundable £300 deposit before bidding is enabled. Admin approval is required.
• Admin areas of the portal are restricted to users with an explicit admin role; the role is stored server-side, not in the browser.

To register and bid you provide: name, email, phone number, postal address, and any KYC documents requested as part of approval. We also store your bid history, watchlist, and notifications related to lots you have engaged with.

• All user data tables enforce row-level security so each signed-in user can only read and modify their own records, with admin access scoped to the admin role.
• KYC documents are stored in a private storage bucket and are not publicly accessible.
• Data is transmitted over HTTPS/TLS between your browser, the portal, and our payment and email providers.

Card payments for the refundable bidding deposit are handled by Stripe using Stripe's hosted checkout components. Full card numbers are entered directly into Stripe and are not seen or stored by Fairways. We retain only the Stripe payment reference needed to issue refunds.

Account and bidding notifications are sent from notify.bidwithfairways.com using SPF and DKIM signing for deliverability. You can unsubscribe from non-essential emails using the link in any message.

• Lovable Cloud / Supabase — database, authentication, storage, serverless functions.
• Stripe — refundable deposit and payment processing.
• Google — optional sign-in.
• reCAPTCHA — bot protection on sign-up.

Account, bid, and payment records are retained for as long as your account is active, and afterwards as required for legal, accounting, and auction record-keeping obligations. To request deletion of your account, contact us using the details below; we will confirm what can be removed and what must be retained.

If you believe you have found a security vulnerability in the bidding portal, please email info@fairwaysmotorauctions.co.uk with the details. Please do not publicly disclose the issue until we have had a chance to investigate and respond.

Questions about this page, your data, or a privacy request? Email info@fairwaysmotorauctions.co.uk.

You can also review the bidding terms and conditions (PDF).

← Back to lots