Privacy Policy

1. Who we are

Hammerd is a trading name of Jump Twenty-Four Ltd, which provides auction infrastructure: software that lets businesses run branded online auctions, with bidding, payments, and fulfilment connected in one system. For the purposes of this Policy, Jump Twenty-Four Ltd is the data controller for personal data collected through the marketing website and through the sign-up and account process.

Where a business runs its own auction workspace on Hammerd and collects data from its own bidders or buyers, that business acts as the data controller for that data, and Hammerd acts as a data processor on its behalf, under separate terms agreed with that Customer.

2. Information we collect

Information you give us directly:

• Contact form submissions — name, email address, phone number, and the content of your message;
• Trial and workspace sign-up — founder name, email address, password (stored using industry-standard hashing, never in plain text), and the auction or business name and web address you choose;
• Any other information you choose to share when you contact us by phone or post.

Information collected automatically:

• Standard server and security logs, such as IP address, browser type, device information, and pages requested, used to operate and secure the website and API;
• Basic timing and honeypot signals on our forms (for example, how quickly a form is completed) used only to help detect automated spam submissions.

We do not currently use third-party advertising or analytics cookies on this website. If that changes, this Policy will be updated first and, where required by law, we will ask for your consent.

3. How we use information

We use the information above to:

• Respond to enquiries and provide support;
• Create and provision Hammerd workspaces, and manage sign-in and account security;
• Operate, maintain, and improve the Service, including diagnosing technical issues;
• Send service-related communications, such as confirming a trial or workspace change;
• Detect, investigate, and prevent fraud, abuse, or security incidents;
• Meet legal, tax, and regulatory obligations.

4. Legal basis for processing

Where UK or EU data protection law applies, we rely on the following legal bases: performance of a contract (for example, provisioning your workspace), legitimate interests (for example, keeping the Service secure and answering enquiries), consent (where we ask for it specifically), and compliance with a legal obligation.

5. How we share information

We do not sell personal data. We share information only with:

• Service providers who host our infrastructure, process payments, or help deliver email and support, acting on our instructions and under appropriate confidentiality and security terms;
• Professional advisers, such as auditors or legal counsel, where necessary;
• Law enforcement, regulators, or other third parties where required by law, to protect our rights, or to protect the safety of our users or the public;
• A buyer or successor, if Hammerd is involved in a merger, acquisition, or asset sale, subject to the protections described in this Policy continuing to apply.

6. Data retention

We keep personal data for as long as needed for the purposes described in this Policy, for example for as long as your workspace is active, or as needed to meet legal, accounting, or reporting requirements. Contact form submissions that do not lead to an account are generally retained for a limited period before deletion.

7. International transfers

Hammerd is based in the United Kingdom. Where personal data is transferred outside the UK or European Economic Area, for example to a service provider in another country, we use appropriate safeguards required by law, such as the UK International Data Transfer Addendum or equivalent standard contractual clauses.

8. Security

We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and hashed password storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. UK and EU residents also have the right to complain to a supervisory authority, such as the UK Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, contact us using the details below.

10. Children’s privacy

The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to the Service or to applicable law. We will update the “last updated” date above, and where changes are material, we will make reasonable efforts to bring them to your attention.

12. Contact us

Questions about this Policy, or requests relating to your personal data, can be sent through our contact page, by email, phone, or post: