Privacy Notice

Last updated: 12 June 2026

1. Who we are

Firebid is operated by Carey Ross Lee, a sole trader based in Australia ("Firebid", "we", "us", "our"). For the personal information described in this notice, Carey Ross Lee is the data controller (or APP entity under the Privacy Act 1988 (Cth)).

2. Information we collect

  • Account information: name, email address, password (stored hashed), and any profile details you provide.
  • Listings and activity: items you list, bids you place, messages you send, watchlists, ratings, and dispute information.
  • Location: the suburb, state, or postcode you provide for listings or search preferences.
  • Device and usage data: IP address, device identifiers, browser type, pages viewed, referring URLs, timestamps, crash logs.
  • Support correspondence: messages you send us by email or in-app.
  • Membership and billing: collected and stored by our payment provider, Stripe (see Section 5). We receive a limited record of the transaction (such as customer ID, subscription status, billing email) — not your full card details.

3. How we use your information

  • Creating and securing your account (contract performance).
  • Operating the marketplace — showing listings, connecting buyers and sellers, processing bids and messages (contract performance).
  • Preventing fraud, abuse, and policy violations, and keeping the Service secure (legitimate interests).
  • Providing customer support (contract / legitimate interests).
  • Improving the Service through analytics and product research (legitimate interests).
  • Sending service-related emails, and — only with your consent — marketing emails.
  • Meeting legal obligations (tax, record-keeping, responding to lawful requests).

4. Legal basis

We rely on contract performance (to provide the Service you signed up for), legitimate interests (to keep the Service safe and improve it), consent (for optional marketing), and legal obligation (where law requires).

5. Sharing your information

  • Other members: information you choose to publish (display name, listings, ratings, public messages) is visible to other Firebid members.
  • Service providers: hosting, database, email delivery, analytics, and error-monitoring providers acting as our processors under contract.
  • Payment provider — Stripe: when you purchase or manage a Seller Membership, Stripe Payments Australia Pty Ltd processes payments, billing, tax calculation, invoicing, and subscription management on our behalf. Stripe is an independent controller for that activity. See Stripe's privacy policy.
  • Professional advisers: legal, accounting, and similar advisers when needed.
  • Authorities: where required by law, court order, or to protect our rights, members' safety, or the integrity of the Service.
  • Auction counterparty (mutual opt-in only): when an auction ends, the winner and seller can each choose to tap "Ready to proceed". If both of you tap Ready, Firebid discloses each party's verified mobile number to the other so you can arrange the deal directly. Numbers are never disclosed automatically or to any other member, and never disclosed unless both parties opt in. The disclosure is logged for support purposes. You may withdraw before the counterparty taps Ready; after mutual reveal, the disclosure cannot be undone.

We do not sell your personal information.

6. International transfers

Some of our service providers (including Stripe and certain hosting/email providers) operate or store data outside Australia, including in the United States and European Union. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles and applicable safeguards (such as standard contractual clauses).

7. Data retention

We keep personal information for as long as your account is active and for a reasonable period afterwards to comply with our legal obligations, resolve disputes, and enforce our agreements. Transaction and billing records are kept for at least 7 years to meet Australian tax and record-keeping requirements. When information is no longer needed we delete or de-identify it.

8. Your rights

You can ask us to:

  • Access the personal information we hold about you.
  • Correct information that is inaccurate or out of date.
  • Delete your account and associated personal information (subject to legal retention obligations).
  • Withdraw consent for marketing communications at any time.

Send requests or privacy complaints to contact@firebid.com.au. We aim to respond within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

9. Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit, hashed passwords, access controls, and regular reviews. No system is perfectly secure — please use a strong, unique password and let us know promptly if you suspect any unauthorised access.

10. Cookies and similar technologies

We use essential cookies to keep you signed in and to remember your preferences, and limited analytics cookies to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may break parts of the Service.

11. Children

The Service is not intended for people under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this notice

We may update this notice from time to time. Material changes will be notified via the Service or by email. The "Last updated" date at the top shows when it was last revised.

13. Contact

Carey Ross Lee trading as Firebid
Email: contact@firebid.com.au