TCC Car Auctions — Privacy Policy

1. Introduction

This Privacy Policy explains how personal, business, device, and usage information is collected, used, processed, stored, and disclosed when authorized users access or use the TCC Car Auctions mobile application, website, administrative systems, and related services collectively referred to as the "Platform."

The TCC Car Auctions Platform is licensed to and commercially operated by TCC Car Auctions LLC, Dubai, United Arab Emirates.

The Platform is developed and technically managed by T C C PORTAL ("TCC"). Copyright in the Platform software and associated intellectual property rights, including source code, software architecture, APIs, technical designs, database structures, documentation, and other proprietary technology developed by TCC, are held by TCC, except where third-party intellectual property is expressly identified.

For purposes of this Privacy Policy, "we", "our", and "us" refer primarily to TCC Car Auctions LLC in its capacity as operator of the TCC Car Auctions service.

TCC may process information where reasonably necessary to provide technology development, hosting, maintenance, cybersecurity, infrastructure, technical support, diagnostics, and Platform-management services.

By accessing or using the Platform, you acknowledge the practices described in this Privacy Policy.

2. Authorized User Accounts and Access

TCC Car Auctions is a restricted business platform for approved vehicle Dealers and other authorized users, including managers, staff, and other commercial users. The Platform does not provide public self-registration through the mobile application.

Access is granted only following an offline application, assessment, verification, authorization, or approval process conducted or approved by TCC Car Auctions LLC. Access rights may differ according to whether the user is a Dealer, manager, staff member, or other authorized business user.

Approved users are provided with a username and initial password by the Platform operator or an authorized administrator acting on its behalf.

Users may be required to change their initial password after their first successful login.

Users are responsible for maintaining the confidentiality and security of their login credentials.

3. Information We Collect

Depending on your use of the Platform, we may collect the following categories of information.

3.1 User, Dealer and Business Information

This may include:

• Full name
• Email address
• Mobile telephone number
• Company or dealership name
• Trade licence information
• Business-registration information
• Dealer identification or verification information
• Authorized representative details
• Role, job title, department, or assigned access level where applicable
• Information supplied during the offline dealer approval process

3.2 Account and Authentication Information

This may include:

• Username or account identifier
• Encrypted authentication information
• Login and logout activity
• Password-change activity
• Account status
• Security and authentication events
• Session information

Passwords are not intended to be stored in readable form.

3.3 Auction and Transaction Information

We may collect and maintain information relating to your activity on the Platform, including:

• Vehicles viewed
• Auctions entered or followed
• Bids submitted
• Bid amounts
• Buy Now transactions
• Auction outcomes
• Winning bids
• Vehicle purchases
• Transaction status
• Payment status
• Vehicle collection or delivery information
• Auction-related communications and activity
• Administrative, operational, listing, inspection, reporting, or account-management activity performed by managers, staff, or other authorized users

3.4 Device and Technical Information

We may automatically collect technical information such as:

• IP address
• Device type
• Operating system
• Application version
• Device or application identifiers where applicable
• Login timestamps
• Session data
• Crash information
• Diagnostic data
• Performance information
• Security events

3.5 Push Notifications

Where notifications are enabled, the Platform may process information required to deliver notifications, including:

• Push-notification tokens
• Device-notification identifiers
• Notification-delivery information
• Notification interaction information

The Platform may use third-party notification infrastructure such as Google Firebase Cloud Messaging.

3.6 Location Information

Approximate location information may be derived from IP addresses or other technical information for purposes such as:

• Security
• Fraud prevention
• Regional service availability
• Platform administration

Precise device location will only be requested where a Platform feature specifically requires it and where the appropriate permission is provided.

4. How We Use Information

Information collected through TCC Car Auctions may be used to:

• Create and administer approved user accounts, including Dealer, manager, staff, and other authorized business accounts
• Verify Dealer eligibility and confirm user authorization, role, and access rights
• Authenticate users
• Protect accounts and Platform security
• Operate vehicle auctions
• Accept and record bids
• Determine auction results
• Process Buy Now transactions
• Administer vehicle purchases
• Maintain auction and transaction records
• Communicate auction results and operational notices
• Provide customer service
• Provide technical support
• Detect fraud, misuse, manipulation, or unauthorized access
• Investigate suspicious activity
• Enforce applicable Terms of Use
• Improve Platform stability and performance
• Diagnose software errors
• Maintain infrastructure
• Meet accounting and audit obligations
• Comply with applicable legal and regulatory requirements
• Protect the rights and interests of authorized users, Dealers, managers, staff, TCC Car Auctions LLC, TCC, vehicle owners, sellers, and other authorized parties

Where permitted, information may also be used to communicate relevant services, auction opportunities, or business information.

5. Data Sharing

We do not sell or rent personal information to third parties.

Information may be shared where reasonably necessary with the following categories of recipients.

5.1 T C C PORTAL

TCC may process Platform information where required to perform:

• Software development
• Platform maintenance
• Technical management
• Hosting and infrastructure support
• Cybersecurity
• Diagnostics
• Performance monitoring
• Database administration
• Technical support

TCC processes such information in connection with its role as the Platform's developer and technology manager.

5.2 Technology Service Providers

Information may be processed by providers that support functions such as:

• Cloud hosting
• Database infrastructure
• Authentication
• Push notifications
• Application diagnostics
• Crash reporting
• Analytics
• Cybersecurity
• Communications
• Technical monitoring

This may include Google Firebase and other technology services integrated with the Platform.

5.3 Transaction and Operational Service Providers

Where required to complete a vehicle transaction, relevant information may be shared with parties such as:

• Payment providers
• Transport providers
• Vehicle inspection providers
• Registration-service providers
• Vehicle owners
• Sellers
• Other service providers directly involved in completing a transaction

5.4 Legal and Regulatory Authorities

Information may be disclosed where required by:

• Applicable law
• Court order
• Government request
• Regulatory requirement
• Law-enforcement request

Information may also be disclosed where reasonably necessary to prevent fraud, protect legal rights, enforce contractual obligations, or protect the security of the Platform or its users.

5.5 Business Partners

Limited information may be shared with selected business partners where this is reasonably necessary to provide a service requested by an authorized user or Dealer, support an approved business function, or where otherwise permitted under applicable law.

6. Firebase and Third-Party Technologies

TCC Car Auctions may use Google Firebase and other third-party technologies for purposes including:

• Application configuration
• Push notifications
• Infrastructure
• Security
• Diagnostics
• Application performance
• Technical monitoring

Such providers may process device, technical, and application information in accordance with their own privacy terms and applicable service agreements.

7. Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect information from:

• Unauthorized access
• Loss
• Misuse
• Disclosure
• Alteration
• Destruction

Measures may include:

• Encryption in transit
• Secure authentication
• Access controls
• Database security
• Monitoring and logging
• Restricted administrative access
• Security updates
• Infrastructure safeguards

No internet-based system can guarantee absolute security.

All authorized users, including Dealers, managers, and staff, are responsible for protecting their account credentials and must notify us promptly if unauthorized access is suspected.

8. Data Retention

Information is retained only for as long as reasonably necessary for purposes including:

• Operating authorized user and Dealer accounts
• Maintaining auction records
• Completing transactions
• Accounting and financial recordkeeping
• Fraud prevention
• Security
• Compliance
• Dispute resolution
• Legal obligations
• Contract enforcement

Certain auction, transaction, financial, regulatory, security, or dispute-related records may be retained after an account is deactivated or closed where reasonably necessary or legally required.

Information no longer required will, where reasonably practicable, be deleted, anonymized, or securely disposed of.

9. Account Closure and Personal Data Requests

User accounts, including Dealer, manager, and staff accounts, are created administratively and cannot be created through the mobile application.

An authorized user may request, where applicable to that user's account and personal information:

• Account deactivation
• Account closure
• Access to eligible personal information
• Correction of inaccurate personal information
• Deletion of eligible personal information

Requests may be submitted to:

Info@tcccarauctions.com

Requests will be subject to reasonable identity verification.

Following verification, we will delete, anonymize, correct, or deactivate eligible information where appropriate.

Certain information may continue to be retained where necessary for:

• Completed transactions
• Financial records
• Accounting
• Taxation
• Legal obligations
• Fraud prevention
• Security
• Disputes
• Contract enforcement

10. Marketing and Service Communications

Authorized users, including Dealers, managers, and staff, may receive operational communications necessary to use the Platform, including:

• Auction alerts
• Bid notifications
• Auction results
• Account-security messages
• Transaction notifications
• Payment or collection notices
• Platform updates

These communications may be necessary for operation of the service.

Where separate marketing communications are sent, users may request to stop receiving optional promotional communications.

11. Cookies and Similar Technologies

TCC Car Auctions web systems may use cookies or similar technologies for:

• Authentication
• Session management
• Security
• Performance
• Functionality
• Usage analysis

The mobile application may use equivalent application technologies rather than traditional browser cookies.

12. Children

TCC Car Auctions is a professional vehicle-auction Platform intended for authorized adult users, including Dealers, managers, staff, and other commercial users.

The Platform is not intended for children or minors.

13. International Processing

Technology providers used by the Platform may process or store information outside the United Arab Emirates.

Where applicable, reasonable steps will be taken to use appropriate contractual, technical, or organizational safeguards.

14. Changes to this Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in:

• Platform functionality
• Technology
• Data-processing activities
• Business operations
• Legal requirements

The current version will be published at:

https://tcccarauctions.com/privacy-policy

The Last Updated date above identifies when this Policy was most recently revised.

15. Contact Information

Platform Operator

TCC Car Auctions LLC
Dubai, United Arab Emirates

Website: https://tcccarauctions.com
Email Support & Privacy enquiries: Info@tcccarauctions.com

Platform Developer and Technology Manager

T C C PORTAL
Dubai, United Arab Emirates

TCC Car Auctions is developed and technically managed by T C C PORTAL.

Copyright in the software and associated intellectual-property rights developed by TCC are held by T C C PORTAL, subject to applicable third-party intellectual-property rights.