Processing Description
The service processes account, property, KYC, source-of-funds, bid, legal-pack, payment and audit data to operate a controlled online UK property auction platform.
Legal Centre
DPIA Summary
A Data Protection Impact Assessment summary for identity, auction, bidding, payment and compliance processing.
Main Risks
High-risk areas include identity document exposure, unauthorised admin/KYC access, public exposure of reserve or bidder metadata, excessive retention, incomplete rights handling and security incident response gaps.
Controls
Implemented controls include public data minimisation, private KYC/admin routes, audit logs, append-only auction evidence, HTTPS/security headers and application rate limits. Infrastructure controls such as Cloudflare WAF, MFA and origin firewall must still be confirmed by the owner.
Sign-off
The full DPIA should be completed and signed off by the business owner and legal/data-protection adviser before collecting real KYC or payment data.
Independent advice
Property auction documents should be reviewed with appropriately qualified legal, financial, tax and surveying advisers before any binding decision is made.