LEGAL

Privacy Policy

Last updated: 1 January 2026

IVORY SAS ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose and safeguard your information when you visit our website or engage with our auction services.

IVORY SAS — Société par actions simplifiée · SIREN 534 826 908 · VAT FR 32 534826908 · APE 70.22Z
24/26 quai Alphonse le Gallo, 92100 Boulogne-Billancourt, France

1. Information We Collect

We may collect the following categories of personal information:

Identity data: first name, last name, title, date of birth.
Contact data: billing address, delivery address, email address and telephone number.
Financial data: bank account details and payment card information (processed securely by our payment providers).
Transaction data: details of lots you have bid on or purchased and payments made to or from you.
Technical data: IP address, browser type and version, time zone setting, operating system and platform.
Usage data: information about how you use our website and services.
Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

2. How We Use Your Information

We use your personal data for the following purposes:

To register you as a bidder and verify your identity.
To process your bids, manage payments and arrange delivery.
To manage our relationship with you, including notifying you of changes to our terms or privacy policy.
To send you relevant catalogue updates, auction notifications and marketing communications where you have consented.
To administer and protect our business and website, including fraud prevention.
To comply with legal and regulatory obligations.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the EU General Data Protection Regulation (GDPR) and French data protection law (Loi Informatique et Libertés):

Performance of a contract: where processing is necessary to fulfil our obligations to you as a bidder or buyer.
Legitimate interests: where we have a legitimate business interest that does not override your fundamental rights.
Legal obligation: where processing is necessary to comply with a legal obligation.
Consent: where you have given clear, informed consent to specific processing activities such as marketing emails.

4. Sharing Your Information

We do not sell, rent or trade your personal information. We may share it with:

Service providers assisting our operations (payment processors, logistics companies, IT providers) under strict data processing agreements.
Professional advisers including lawyers, auditors and insurers.
Regulatory bodies, law enforcement or government authorities where required by law.
Third parties in connection with a potential sale, merger or acquisition of our business, subject to appropriate confidentiality undertakings.

5. International Transfers

We operate internationally and may transfer your data to countries outside the European Economic Area. Where we do so, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting or reporting requirements. For buyers and registered bidders, this is typically ten years after the conclusion of the relevant transaction, as required under French commercial law.

7. Your Rights

Under GDPR and applicable French law you have the following rights:

Access (droit d'accès): to request a copy of the personal data we hold about you.
Rectification (droit de rectification): to request correction of inaccurate data.
Erasure (droit à l'effacement): to request deletion of your data in certain circumstances.
Restriction (droit à la limitation): to request that we restrict processing of your data.
Portability (droit à la portabilité): to receive your data in a structured, machine-readable format.
Objection (droit d'opposition): to object to processing based on legitimate interests or for direct marketing.
Withdrawal of consent: where processing is based on consent, to withdraw it at any time.

To exercise any of these rights, please contact us at info@ivory.legacy.

8. Cookies

Our website uses cookies and similar tracking technologies to enhance your experience. Essential cookies are required for the site to function. Analytics and preference cookies are set only with your consent, in accordance with French CNIL guidelines. You may manage your cookie preferences at any time through your browser settings.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. Where we engage third-party processors, we require them to maintain equivalent standards of data security.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

Email: info@ivory.legacy
Post: IVORY SAS, 24/26 quai Alphonse le Gallo, 92100 Boulogne-Billancourt, France
Telephone: +33 1 41 10 03 30

You also have the right to lodge a complaint with the French data protection authority: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr.