Privacy Policy

1. General

1.1 This website is operated by Charity Benefits Unlimited, LLC , d/b/a CBU Auctions (“us”, “we”, “our” or the “Company”). We value your privacy and the importance of safeguarding your data. 

1.2 This Privacy Policy (“Notice”) describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. 

1.3 In this Policy, personal data refers to any information that on its own, or in combination with other available information, can identify an individual.

1.4 We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations under the below regulations:

  • EU’s General Data Protection Regulation (GDPR)
  • Brazil’s Data Protection Legislation (LGPD)
  • California’s Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
  • Colorado Privacy Act (CPA)
  • Utah Consumer Privacy Act (UCPA)
  • Connecticut Data Privacy Act (CTDPA)
  • Virginia Consumer Data Protection Act (VCDPA)
  • South Africa’s Protection of Personal Information Act (POPIA)

2. Controller

2.1 For the personal data processing purposes brought out in this Notice, the controller of your personal data is:

Charity Benefits Unlimited, LLC, Address:  15894 N 77th St, Suite 1 Scottsdale, AZ, 85260, E-mail: info@cbuauctions.com

2.2 In case of personal data protection related inquiries, please contact us by writing to: info@cbuauctions.com.

3. Categories and Sources of Personal Data

3.1 Personal data is information that can be used to directly or indirectly identify you as a private individual. The source of the collected Personal Data depends on how you interact with us. We may obtain and process the following categories of Personal Data:

  • Main data: first name, last name, e-mail address, phone number, authentication and profile data received from third parties (e.g., Google LLC) according to your instructions and choices if you register or log in using such third parties .
    • Source: Personal Data you directly provide to us or is provided to us by third parties according to your instructions and choices.
  • If you interact with us via the Website, live chat, social media platforms or e-mails, we may process the following Personal Data: Main Data, Contract Data, your username of the platform through which you interact with us, date and time of the message, contents of your message.
    • Source: Personal Data you directly or a third party provides to us.
  • Marketing data: Main Data, position. Additionally, we may supplement the Personal Data that you have provided to us directly with information that has been obtained from publicly available resources (i.e. LinkedIn, e-mail search, country specific commercial registrars).
    • Source: Information you directly provide to us and the information we have obtained from publicly available resources.
  • Upon visiting the Website, our server may process the following data: IP address, access-provider, general location, referring and exit URL, date, time, language settings used, access tokens, session key, browser type and version, operating system, your navigation on the Website, amount and state of transferred data .
    • Source: While you are browsing through the Website, the Website itself generates or collects the Technical Data from your device automatically.
  • Cookie data. We implement cookies on the Website, for optimizing the Website and its functionalities. The cookies may collect your Personal Data. For further information on the purposes and functions of the cookies, please see our cookie notice.
  • If you do not provide the required information, we may not be able to contact you, provide our Services or fulfill any other purposes provided in this Notice.

4. Personal Data We Collect

4.1 What Personal Data We Collect: When you make a purchase, or attempt to make a purchase, we collect the following types of Personal Data including:

  • Personal Information such as your name, email address, and phone number
  • Payment Information such as your billing address, phone number, credit card, debit card or other payment method

4.2 How We Collect Your Personal Data: We collect Personal Data from the following sources:

  • From You. You may give us your Personal Information, Payment Information, Financial Information, Demographic Data, Purchase Information, Content, Feedback, Product Information, by filling in forms, using our products or services, entering information online or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide.
  • Automated technologies or interactions: As you interact with our website, we may automatically collect the following types of data (all as described above): Device Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data where tasks carried out via our website remain uncompleted, such as incomplete orders or abandoned baskets. We collect this data by using cookies, server logs and other similar technologies. 
  • Third parties: We may receive Personal Data about you from various third parties, including:
    • Device and Usage Data from third parties, including analytics providers such as Google;
    • Content from communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks;
    • Personal Information and Payment Data from third parties, including organizations (such as law enforcement agencies), associations and groups, who share data for the purposes of fraud prevention and detection and credit risk reduction; and
    • Personal Information, Payment Data, and Financial Data from providers of technical, payment and delivery services.
  • Device and Usage Data
    • When you visit a Charity Benefits Unlimited, LLC website, we automatically collect and store information about your visit using browser cookies (files which are sent by us to your computer), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help Feature on most browsers will provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.

5. Purpose and Legal Basis for the Processing of Personal Data

  • We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services and understand how to improve them.
    • Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business for example against fraud. Consent will be required to initiate services with you. New consent will be required if any changes are made to the type of data collected. Within our contract, if you fail to provide consent, some services may not be available to you.
  • International Data Transfer and Storage
    • Where possible, we store and process data on servers within the general geographical region where you reside (note: this may not be within the country in which you reside). Your Personal Data may also be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We will take appropriate steps to ensure that your Personal Data is treated securely and in accordance with this Policy as well as applicable data protection law. More information about these clauses can be found here: https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32021D0914

6. Sharing & Disclosure

  • Legal Requirement: We may use or disclose your Personal Data in order to comply with a legal obligation, in connection with a request from a public or government authority, or in connection with court or tribunal proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical to do so, we will tell you in advance of such disclosure.
  • Service Providers and Other Third Parties: We may use a third party service provider, independent contractors, agencies, or consultants to deliver and help us improve our products and services. We may share your Personal Data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others but only to maintain and improve our products and services. For further information on the recipients of your Personal Data, please contact us by using the information in the “Controller” section above. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Retention & Deletion

  • We will only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need Personal Data, we will remove it from our systems and/or take steps to anonymize it.

8. Security of Personal Data

  • We have taken necessary technical and organizational security measures to protect your Personal Data. These measures vary based on the sensitivity of the personal information we collect, process and store and the current state of technology.
  • In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.

9. Your Rights for Your Personal Data

  • Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. These rights may include:
    • Right to access: you have the right to request access to any data that can be considered your Personal Data. This includes the right to be informed on whether we process your Personal Data, what Personal Data categories are being processed by us, and the purpose of our data processing;
    • Right to rectification: you have the right to request that we correct any of your Personal Data if you believe that we are processing inaccurate or incomplete Personal Data;
    • Right to object: you are entitled to object to certain processing of Personal Data, including for example, the processing of your Personal Data for marketing purposes or when we otherwise base our processing of your Personal Data on our legitimate interest;
    • Right to restrict Personal Data processing: you have the right to request that we restrict the processing of your Personal Data if: (i) you wish to dispute the accuracy of certain Personal Data we are processing, such right applies until we have had the opportunity to satisfy ourselves of the accuracy of the Personal Data; (ii) we have been processing your Personal Data unlawfully, but you only request the restriction of the use of the Personal Data in question instead of its deletion; (iii) we no longer need the Personal Data for the original purposes of processing, but you still need such Personal Data to assert, exercise or defend against legal claims; (iv) you have objected to our processing of certain of items of your Personal Data until a determination is made whether or not your concerns are outweighed by our legitimate interests in processing your Personal Data;
    • Right to erasure: you may request your Personal Data to be erased if the Personal Data is no longer necessary for the purposes for which it was collected, or if you consider that the processing is unlawful, or if you consider that the Personal Data has to be erased to enable us to comply with a legal requirement;
    • Right to data portability: if your Personal Data is being automatically processed with your consent or on the basis of a mutual contractual relationship, you may request that we provide you that Personal Data in a structured, commonly used and machine-readable format. Moreover, you may request that the Personal Data is transmitted to another controller. Bear in mind that the latter can only be done if that is technically feasible;
    • Right to withdraw your consent: in cases where the processing is based on your consent, you have the right to withdraw your consent to such processing at any time;
    • Right to contact the supervisory authority: if you are not satisfied with our response to your request in relation to Personal Data processing or you believe we are processing your Personal Data not in accordance with the law, you can submit your claim to the data protection authority, in Estonia to a Estonian Data Protection Inspectorate (in Estonian Andmekaitse Inspektsioon) at info@aki.ee (https://www.aki.ee/).
  • To exercise the above rights, please contact us as specified in Section 2 of this Notice. Please note that you should supply us with adequate information for us to respond to your requests concerning the rights listed in Section 9.1. Prior answering your request, we may ask you to provide additional information for the purposes of authenticating you and evaluating your request.

10. Third Parties

  • Our websites and services may contain links to other websites, applications and services maintained by third parties. The information practices of such other services, or of social media networks that host our branded social media pages, are governed by third parties’ privacy statements, which you should review to better understand those third parties’ privacy practices.

11. Amendments to This Notice

  • This Notice may be amended or modified from time to time to reflect changes in the way we process Personal Data, and in such case, the most recent version of the Notice will be published on this page. Please check back periodically, and especially before you provide any new personally identifiable information.