Privacy Policy — LotWagon
Last updated: October 22, 2026
This Privacy Policy describes how HDC Brands LLC, a New Jersey limited liability company doing business as LotWagon ("LotWagon", "we", "us"), collects, uses, shares, and protects information when you use lotwagon.com and the LotWagon marketplace (the "Service"). By using the Service you agree to this Policy and to our Terms of Service.
LotWagon is a business-to-business marketplace. We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act as amended (CCPA/CPRA).
1. Notice at collection — what we collect
| Category | Examples | Retention |
|---|---|---|
| Identifiers & business contact data | name, business name, email, phone, business address; account credentials | life of the relationship + 24 months |
| Transaction & inquiry data | inquiries, inspection requests, offers, orders, lot and listing interactions, messages with us and (through the Service) with buyers/sellers | life of the relationship + 24 months; transaction records up to 7 years where tax/accounting law requires |
| Seller documents | inventory lists, data-plate and specification documents, photos, and tax/onboarding information provided for Stripe onboarding (identity and bank data are collected by Stripe as processor/controller for its services) | while the lot is active + 24 months |
| Payment data | payment status, amounts, and Stripe customer/connected-account identifiers. Card and bank details go directly to Stripe; we do not receive or store full card numbers | per Stripe records and our transaction retention above |
| Internet & device data | IP address, browser/device/OS, referring page, pages viewed, timestamps, analytics events (via Google Analytics) | analytics up to 26 months; raw server/CDN logs rolling 30 days |
| Inferences | limited inferences from the above to operate and secure the Service (e.g., fraud signals). We do not build marketing profiles | while relevant to the underlying record |
We do not knowingly collect sensitive personal information; if a seller document you provide contains any, we process it only to operate the marketplace. If you do not provide requested information, we may be unable to list your inventory, process a transaction, or respond fully to an inquiry.
2. Where information comes from
Directly from you (accounts, inquiries, listings, onboarding, correspondence); from the other party to your transaction where needed to complete it; automatically from your device when you use the Service; and from service providers acting for us (e.g., Stripe payment status). We do not buy personal information from data brokers.
3. How we use information
To operate, present, and improve the marketplace and seller lots; to respond to inquiries and arrange inspections; to introduce buyers and sellers and to complete transactions, including payment and sales-tax collection/remittance as marketplace facilitator; to send transactional and, with a proper basis, marketing communications (you may opt out at any time); to secure the Service and prevent fraud and abuse; to comply with law, tax, and accounting duties; to defend and enforce our rights and Terms; and for internal analytics in aggregate form. Information collected through the Service is not used to train artificial-intelligence models on identifiable individuals. We make no solely automated decisions that produce legal or similarly significant effects about you.
4. Legal bases (EEA, UK, Switzerland)
Where GDPR/UK GDPR applies, we process personal data on these bases: performance of a contract or pre-contract steps (Art. 6(1)(b)); our legitimate interests in operating, securing, and improving a B2B marketplace (Art. 6(1)(f)); your consent where we ask for it (Art. 6(1)(a)), which you may withdraw at any time; and legal obligations (Art. 6(1)(c)). Objections may be sent to privacy@lotwagon.com.
5. Who we share information with
- Transaction counterparties — the buyer or seller on the other side of your inquiry or transaction receives the contact and transaction details needed to evaluate, inspect, and complete it. - Service providers (processors) under contract, limited to what they need: Stripe, Inc. (payments, connected accounts, and tax calculation — Stripe Tax), Vercel Inc. (hosting/CDN), Google LLC (Google Analytics), ImprovMX and email-delivery providers (mail), and document/cloud storage providers. A current subprocessor list is available on request at privacy@lotwagon.com. - Professional advisers (legal, tax, accounting) under confidentiality. - Authorities and parties in legal process, where legally required or to protect rights, safety, or the integrity of the Service; we review requests for validity and notify affected users where permitted. - Successors — in a merger, acquisition, financing, or sale of business assets, with notice where required. We do not sell or rent personal information, and we do not disclose it to third parties for their own marketing.
6. International transfers
We process information in the United States. Where EEA/UK/Swiss personal data is transferred to the US, we rely on Standard Contractual Clauses (with the UK addendum where applicable), transfer assessments, and encryption in transit. Copies of the relevant safeguards are available on request.
7. Retention
We keep personal information for the periods in Section 1, then delete or irreversibly anonymise it. Longer retention applies only where needed for legal obligations, tax and accounting records, or the establishment, exercise, or defence of legal claims.
8. Security
We use administrative, technical, and organisational measures proportionate to a B2B marketplace, including HTTPS/HSTS in transit, access controls and least-privilege administration, and processor security review. No system is absolutely secure. Where required, we will notify supervisory authorities of a personal-data breach within 72 hours of becoming aware of it and notify affected individuals as the law requires.
9. Your rights
Everyone may ask us to: access, correct, delete, or export their personal information; restrict or object to processing; and withdraw consent. Under the GDPR/UK GDPR these include Arts. 15–22 rights and the right to complain to a supervisory authority. Under US state laws — including California (CCPA/CPRA) and the laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, and other states with comparable statutes — residents may have rights to know/access, delete, correct, obtain a portable copy, opt out of sale/sharing/targeted advertising (we do none of these with your data), and not be discriminated against for exercising their rights. We honour Global Privacy Control signals as an opt-out of any sale/sharing (again, we do not sell or share). Exercise your rights at privacy@lotwagon.com; we will verify your identity proportionately and respond within one month (GDPR) or 45 days (US state laws), extendable where the law allows with notice. Authorised agents may act where the applicable law permits.
10. Cookies and analytics
We use: (a) strictly necessary cookies/local storage required for security and core operation; and (b) Google Analytics cookies to understand aggregate site usage — Google Analytics is live on this site. We set no advertising or cross-site tracking cookies of our own. You can control cookies in your browser settings; disabling necessary cookies may break parts of the Service. Where a consent banner is required by law, we will present one before non-essential cookies are set.
11. Children
The Service is a business marketplace and is not directed to individuals under 18. We do not knowingly collect their information; if you believe we have, contact privacy@lotwagon.com and we will delete it.
12. Links and third-party sites
Listings and pages may link to seller or other third-party sites. Their privacy practices are their own; this Policy does not cover them.
13. EU and UK representatives
Not yet appointed. EEA/UK users may contact us directly at privacy@lotwagon.com in the interim.
14. Changes to this Policy
For material changes we will give at least 30 days' prominent notice on the Service before the effective date and, where required, seek consent. Previous versions are available on request.
15. Contact
HDC Brands LLC d/b/a LotWagon 971 US Highway 202N Ste N, Branchburg, NJ 08876, USA Privacy requests: privacy@lotwagon.com · Legal: legal@lotwagon.com · Sales: sales@lotwagon.com · Phone: +1 551 267 4813