We at Garth Denham and Associates Ltd ( trading as Denhams ) use your data for the fulfilment of our auction & valuation services at your request. We need to identify owners of items we sell and purchasers of said items. We never have and never will sell your data to a third party.
The scope of data we collect from customers buying/bidding/selling or other enquiries with us is as follows :-
If you register an account we need your
In using the website you may generate the following stored data.
When browsing our website we will store information in files called cookies in your web browser.The data stored in cookies is :-
an auto generated unique number ( session id ). This personnalises you user experience and also lets you restart the browser and still be logged in.
two auto generated code of random letters and numbers called XRSF and REMEMBER ME tokens. These prevent what is known as a CSRF ( Cross-site request forgery ) attacks my malicious users and is used to protect access to your logged in session.
Google analytics is a very common tool that track users usage of a website. The Google Analytics library we use stores a couple of random letters and numbers that identify your session. Google analytics then reports what browser you use, what town you are browsing from and what pages on our site you have visited.
If you visit or contact our premises to register to bid at auction / require a valuation appointment OR request a catalogue subscription the data we store is as follows
When buying at auction you may generate the following stored data
If you visit or contact our premises to sell your property at auction the data we store is as follows.
When selling at auction you may generate the following stored data
If you book a valuation appointment we will require your address to visit your premises and contact details to send you a valuation or contact you if a problem arises.
Data entered on our website is encrypted from your browser to our web server via secure socket layer ( SSL ). The password supplied by you when registering an account on our website is encrypted to a bcrypt hash and is unreadable. Access to our servers remote and in house are filtered by firewalls access granted via SSH key based authentication monitored by fail2ban software. Access to our Amazon S3 cloud storage is restricted by IAM user access keys
Your data is stored on our systems consisting of a remote web server, remote bidding server and an in-house server on our premises. Backups of all data are stored in secure cloud locations hosted by the Amazon S3 platform. Backups are also stored on external drives on our premises.
If you register an account on our website for auction notifications you will duly be notified by email. You can cancel these notifications by logging in and unchecking the appropriate option in your 'Email Alerts' menu option.
If you subscribe for auction notifications by simply supplying your email to us you will duly be notified by email. You can cancel these notifications by clicking the 'unsubscribe me' link in the emails you receive.
If you supply keywords to our 'keyword search' facility you we be notified of items in our auction that match those words via email. You can cancel these notifications by removing your keywords from your account via the 'Email Alerts' menu option.
If your bids and are successful for items in an auction you will be emailed an invoice after the auction
If you sell with us you will be emailed and posted advice about the status of sold/unsold items