Privacy Policy

Last Updated May 18, 2026

This Privacy Policy describes how Willam Doyle Galleries, Inc. and its affiliated auction service, Hayloft Auctions, (“Doyle,” “Hayloft,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information. This Privacy Policy applies to Doyle’s customers, including consignors, buyers, bidders, auction participants, website visitors, and gallery visitors, as well as those of Hayloft, when they interact with our services, Doyle (collectively, “Services”), including:

Visting our websites, https://www.doyle.com/ and https://www.hayloftauctions.com/
Registering to bid in our auctions.
Bidding in our auctions.
Selling to us.
Consigning to us.
Receiving estimates from us.
Participating in private sales.
Visiting our galleries.
Communicating with us by phone, email, text, or entering your information into the website.
Receiving emails, promotions, advertisements, or surveys from us.
Otherwise interacting or engaging with us, our products, or our Services.

This Policy also applies when we provide you with our Services through our service providers, such as GoAuction and Bidpath, and other vendors who support our business operations.

Our online Services offer links to websites and services that are not operated by Doyle. Though this Policy does describe the Personal Information we receive from those third parties, we do not always have control over the privacy practices of these websites and services, and we encourage you to review the privacy policies presented on every website you visit. Please note this Privacy Policy does not apply to non-Doyle websites or services that state they are offered under a different privacy policy. Please review the privacy policies on those websites and services directly to understand their privacy practices.

This Policy may be updated from time to time, and we encourage you to review it periodically for updates. Your continued engagement with our Services indicates your acceptance and consent to the information collection practices described in this Policy. By using our Services, you also acknowledge and accept our Terms & Conditions of Service https://doyle.com/terms and https://www.hayloftauctions.com/terms/.

Collection of Personal Information

What Personal Information Do We Collect
How Do We Collect Personal Information about you

Direct Interactions With Us
Tracking Technologies
Other Companies and People
Publicly Available Sources

Why Do We Collect Your Personal Information
Disclosures of Personal Information
Your Privacy Choices and How to Exercise Them

Managing Your Doyle Account
Managing Promotional Emails
Direct Mail Opt-Out

Notice at Collection & State Specific Privacy Rights Information
Data Retention
Information Security
Children’s Privacy
Changes to this Privacy Policy
Communicating with Us about Our Privacy Policy

COLLECTION OF PERSONAL INFORMATION

What Personal Information Do We Collect?

Personal Information means information that identifies, relates to, describes, or is reasonably capable of being associated or linked, directly or indirectly, with an individual consumer or household. Personal Information does not include information that is de-identified, aggregated, or anonymized. The Personal Information we collect about you includes:

Personal identifiers and contact information, such as your name, mailing and billing addresses, personal email address, telephone number, customer identification number, social media handles, social media profile information, and online account information.
Business information, including your business’ name, job title, address, telephone number, and email address.
Account information, such as the username and password you create to establish and access your account with us, your delivery address, phone number, and delivery instructions.
Device information, meaning information about the computer device you use to interact with our online Services, such as your Internet Protocol (IP) address.
Electronic communication information, such as the content of messages you send us or that we exchange with you through emails, text messages, , forms, or information that you send to us online.
Demographic information, including, age, date of birth, gender, marital status, military or veterans’ status.
Payment information, which may include your name, company affiliation, billing address, payment card information, and other invoicing information. Please note that we partner with a third-party payment processor for credit or debit card purchases. When you provide your payment card information on our website, that information is stored with our third-party payment processor authorize.net.
Location & geolocation information, such as the delivery address you provide for fulfillment of your orders, or your mailing address for delivery of our direct mailings.
Commercial information, such as your purchase history with us or other details regarding the products or Services that you prefer or have considered, or Services that you provided us with feedback about. This category also includes general information about your purchasing tendencies with other companies.
Professional and educational information such as your occupation and your education level.
Internet or electronic network activity, such as browsing history, search history, user interaction information and other details about your visit to our website, , or advertisements, including information we capture through “session replay” technologies. This information may include data such as Uniform Resource Locators (URLs) of our website’s webpages, Services viewed or searched for, page response times, download errors, length of visits to certain pages, and information about how the website is performing.
User interaction information, such as webpages you were visiting when you came to our website and pages you went to when you left the website, pages browsed, items you looked at, hover over or click, information you type or enter into our online Services, interactions with advertisements, including information provided in those ads or to those advertisers, information from other platforms where we interact including social media platforms operated by other companies, and information collected through cookies, pixels, beacons, and other website technologies. For more information about the website technologies our website uses, please see the Tracking Technologies section below.
Information created or inferred based on other Personal Information, such as information from the use of our Services that we use to detect fraudulent behavior, and/or to infer your preferences about our Services to serve you with personalized content that we think you may be interested in.
Sensitive Personal Information, such as your Social Security number, driver’s license number, passport number and in some cases, your precise geolocation.

HOW WE COLLECT INFORMATION ABOUT YOU

We collect information about you in different ways. Specifically, we collect your information: (1) when you interact directly with our Services (Direct Interactions with Us); (2) automatically through the website technologies that are present on our website (Tracking Technologies); (3) from people who may refer you to us (People), and (4) through Publicly Available Sources. Each category of Personal Information collection sources is described below.

Directly From You

You may provide us with personal information in a number of ways, namely when you:

Register for or log into your account on the website.
Register to bid in an auction.
Bid in an auction.
Consign your property to Doyle to sell.
Request an estimate from us.
Complete an absentee & telephone bid form.
Place an order or complete a purchase with us.
Express an interest in our products and Services.
Complete forms, surveys, provide ratings, reviews, or submit other feedback to us.
Correspond with us by phone, email, text, or on the website.
Message us on social media or other platforms or otherwise engage with our online Services.
Subscribe to our emails.
Participate in one of our promotions.
Visit our locations.
Report a problem with our website or other Services.

Tracking Technologies

When you interact with our website, email features, or other online Services, the cookies, web beacons and other website technologies we use (collectively “tracking technologies”) collect information about your computer or other device used to access the Services such as device identifiers, as well as the internet or electronic network activity and user interaction information associated with the identifiers, as described above in the What Personal Information Do We Collect section above.

The data collected by tracking technologies does not generally identify you by name. These technologies usually identify the device you are using, such as by your IP address, or device identifier. These device identifiers may reveal or be connected with you by name, email address, or other personal identifier when our systems correlate it with the Personal Information you provided directly to us.

We use the information that is automatically collected through tracking technologies for analytics purposes, and to maintain the security and functionality of our website. We and our marketing partners also use tracking technologies to collect information about your activities over time and across other websites and online services. We and our marketing partners may combine information collected by tracking technologies with other information collected about you, including information separately collected by our marketing partners.

The kinds of tracking technologies we use include:

Necessary, functional, and performance cookies to maintain functionality of our online Services and help us deliver our Services and products you may purchase, route traffic between servers, retain user preferences, enable you to log in and stay logged in, keep your online shopping cart up to date, and help us understand how the Services are performing.
Analytics and research technologies to understand, improve, and research features and content included in the Services, including how users use the Services, the content and products that users view most frequently.
Location technologies (including your general location based on your IP address or your precise location through our App) to verify your location, prevent fraud, deliver or restrict content based on your location, and provide Services personalized to you with location-relevant content.
Security technologies for purposes such as to detect activity that might violate our Terms and Conditions of Service: https://doyle.com/terms/ and https://www.hayloftauctions.com/terms/; prevent fraud, unauthorized access or activity, or other misuse of our Services; and to protect our business.
Communication technologies to determine whether you have opened, viewed, or otherwise interacted with the emails we send to you.
Marketing and targeted behavioral advertising technologies to provide you with personalized advertisements, communications, and other content about the Services and, in some cases, an external party’s products and services. For example, we use third parties to improve our ability to identify visitors to our website. As part of this service, we may make available identifiers to these third parties including our visitors’ IP addresses, cookies, and hashed versions of email addresses captured from your visit. We, and third parties, use this data to obtain more information about our visitors and reach out to them through other channels, such as email and/or direct mail.

Many companies that are engaged in marketing and advertising participate in the Digital Advertising Alliance (“DAA”) You can learn more about the DAA AdChoices Program opt-out program for website browsers at https://www.youradchoices.com/ and mobile apps at https://www.aboutads.info/appchoices.

Other Companies and People

We collect some Personal Information about you from other external sources, including our advertising and individual consumers.

We also collect Personal Information from our partners including advertisers and social media influencers

Additionally, we may collect limited Personal Information from other Doyle customers that refer you to us, such as your email address or other contact information, in order to provide you with information about our products and Services.

Publicly Available Sources

We may collect Personal Information from consumer reviews of our products or Services. This includes, for example, reviews of our Services that you publish on a third-party platform.

WHY DO WE COLLECT YOUR PERSONAL INFORMATION?

We collect Personal Information for one or more of the following business or commercial purposes:

To fulfill the purpose for which you provided the information. For example, if you provide your Personal Information to register for our auctions, we will use that information to set up your account and your profile including your product preferences, process your payment and facilitate delivery. We may also save your information to facilitate new orders.
To provide, support, personalize, and develop our website, products, and Services.
To secure your account with us.
To process your requests, purchases, transactions, and payments, and prevent transactional fraud.
To provide you with support and to respond to your inquiries, including through AI-enabled interactive chat features offered on our website. We may use the information you provide through the website to investigate and address your concerns and monitor and improve our responses.
To personalize your website experience and deliver content relevant to your interests, including targeted offers and advertisements through our website, third-party sites, social media, and via email, direct mail, or text message (with your consent, where required by law).
To help maintain the safety, security, and integrity of our website, products and Services, databases and other technology assets, and business.
For testing, research, analysis, and product development, including to develop and improve our website, products, and Services.
To respond to law enforcement requests, inquiries from regulatory authorities, and as required or permitted by applicable laws, court orders, or regulations.
As described to you in our Notice at Collection provided in accordance with the California Consumer Privacy Act (“CCPA”) and other comprehensive US state consumer data privacy laws.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our customers is among the assets transferred.
For other uses as may be permitted or required by applicable law.

DISCLOSURES OF PERSONAL INFORMATION

We may disclose your Personal Information to:

Vendors who perform functions that support our Services, such as:

Order processing and fulfillment
Payment processing
Shipping
Customer service, including our and text messaging functions
Business consulting
Research and analytics
Breach and fraud detection, prevention, and response
Security providers

Other people, such as when you direct an authorized representative to act on your behalf when submitting a Personal Information rights request.
Mandatory recipients or recipients who need access to Personal Information for safety, security and legal purposes, such as law enforcement agencies or recipients engaged in legal processes.
Companies that you direct us to interact with.
Third parties to obtain more information about our website visitors and reach out to them through other channels, such as email and/or direct mail.
For any other purposes of which we provide notice when collecting your information.
With your consent.

We may also disclose your Personal Information to external recipients:

To a buyer or other successor in the event of merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, where one of the transferred assets is the Personal Information we hold.
To comply with any court order, law, or legal process, including responding to any government or regulatory request.
To enforce or apply our Terms and Conditions of Service: https://doyle.com/terms/ and https://www.hayloftauctions.com/terms-of-service/and other agreements.
To protect the rights, property, or safety of our business, our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of cybersecurity, fraud protection, and credit risk reduction.

YOUR PRIVACY CHOICES AND HOW TO EXERCISE THEM

We provide all customers with the following choices for management of their information. The next section, State-Specific Privacy Rights Information, provides information to consumers who reside in U.S. states where consumer data privacy legislation is effective.

Managing Your Doyle Account

When you sign up for an account with us, we collect Personal Information such as your name, email address, and mailing address. You can review, change, and delete this Personal Information by logging into your account on the Website or App and visiting your account page. Please note that we require some of your Personal Information to provide Services to you such as name, email address, account username and password and may not be able to provide those Services if you delete it.

Managing Promotional Emails

You can opt-out of promotional communications sent via email by clicking the “unsubscribe” link that is included at the end of each email. Please note that even if you opt-out of promotional emails, we may still need to send you emails about your account and other transactional information. More information about how we use email to communicate with you is available in our Terms and Conditions of Service: https://doyle.com/terms/ and https://www.hayloftauctions.com/terms-of-service/.

NOTICE AT COLLECTION AND STATE-SPECIFIC PRIVACY RIGHTS INFORMATION

This section of the Policy is our Notice at Collection for California residents in accordance with the California Consumer Privacy Act (“CCPA”) and with certain requirements of other comprehensive U.S. state laws regarding consumer data privacy and protection.

This chart describes our Personal Information collection practices over the last 12 months:

Category of Personal Information Collected	Disclosed to Service Providers or Contractors?	Sold to or Shared with Third Parties?	Personal Information Retention Period
Identifiers & Contact Information (e.g., name and other contact details such as your email address, mailing address, phone number, IP address, date of birth, or account name)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.
Personal Information described in California’s Customer Records statute (Cal. Civ. Code § 1798.80(e)) (telephone number, bank account number, credit card number, debit card number, or any other financial information as well as the categories listed in “Identifiers” category above)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.
Commercial Information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies with other companies)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.
Internet, Network Activity and User Interaction Information (e.g., browsing history, search history, and information regarding your interaction with the Website and App)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.
Geolocation Data (general and precise geolocation)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.
Professional or Employment-related Information (e.g. your occupation, professional affiliation, and educational history)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.
Inferences (e.g. about your preferences, interests, and purchasing tendencies)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.
Sensitive Personal Information (e.g., Social Security number, precise geolocation)	Yes	No	This information is retained for as long as needed to fulfill the business purpose of the collection of the information.

We have collected the above categories of Personal Information for the following business or commercial purposes in the last 12 months:

Performing Services, including maintaining or servicing accounts, providing customer support, processing or fulfilling orders, transactions, and payments, and verifying eligibility for certain Services.
Internal business and operational purposes that support our Services, including verifying and maintaining the quality and safety of our Services, and identifying and repairing errors that impair the functionality of our Services.
Advertising our Services including measuring the number of times an advertisement is shown to Website visitors and verifying the quality of those advertisement impressions.
Protecting the privacy, security, and integrity of your Personal Information.
Undertaking internal research for technological development and demonstration.
Other internal business purposes, including:

Complying with legal obligations, including prosecuting people responsible for fraudulent, malicious, deceptive or illegal activities.
Exercising our legal rights or defending claims filed against us.
Notifying consumers of Service-related issues.
Enforcing and notifying of our Terms and Conditions, this Privacy Policy, and other policies; and for records retention purposes.

Exercising Your State-Specific Rights and Choices

The Right to Access/Know what Personal Information We Have Collected.
The Right to Correct Inaccurate Information.
The Right to Request that We Delete Your Information.
The Right to Data Portability.
The Right to Non-Discrimination for the Exercise of Privacy Rights.
The Right to Opt-Out of Sale or Sharing of Personal Information/Opt-Out of Targeted Advertising.
The Right to Limit the Use of Your Sensitive Personal Information.
The Right to Opt-Out of Profiling or Opt-In to Sensitive Personal Information Processing.
Rights related to Automated Decision-Making.
Right to Appeal Denial of Your Request.

If you would like to exercise any of your rights, please do so by filling out this form. You may also exercise your Rights to Know, Data Portability, Request Deletion, or Correct Inaccurate Information by emailing us at

dataprivacyrequest@doyle.com. You may also submit a request to opt-out of the “sale” or “sharing” of your Personal Information, also referred to as a request to opt-out of processing Personal Information for targeted advertising purposes, by clicking the “Do Not Sell or Share My Personal Information” link in the footer of the website.

To protect you and your Personal Information and depending on the type of request you make, we may need to ask you for additional information to verify your identity before processing a request, where applicable. You may have the right to submit a request to exercise your rights through an authorized agent, in which case your agent will be required to present signed written permission to act on your behalf. You may also be required to independently verify your identity with us and confirm that you have provided authorization to the agent.

Direct Marketing Disclosures

If you are a California resident, in addition to the rights above, you have the right to request that we disclose information about any third parties to which we have disclosed personal information in the preceding calendar year. Specifically, you have the right to request:

A list of the categories of certain personal information we disclosed to third parties for their direct marketing purposes in the preceding calendar year;
The names and addresses of all the third parties that received certain personal information from us in the preceding calendar year.

You may send us a request by email at dataprivacyrequest@doyle.com. Please include “California Privacy Rights Request” in the subject line of your email, and include your name, street address, city, state, and ZIP code. Note that we are only required to respond to one request per customer each year, our response may be in a standardized format and may not and that we may not provide you with.

Our Website honors the user-enabled opt-out preference signals, including Global Privacy Control (“GPC”). When you have enabled this opt-out preference signal on browsers that support it, our Website will respond by disabling the targeted advertising cookies present on our website for that browser. You can allow our Website to “ignore” your opt-out preference signal choices in our cookie banner on our website.

California Online Privacy Protection Act Disclosure

We do not support “Do Not Track” (“DNT”) signals. DNT is a preference you can set to inform websites that you do not want to be tracked. You can enable it by changing the settings in the Preferences or Settings page of your web browser. Our website does honor GPC signals.

DATA RETENTION

Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. To determine the appropriate retention period for Personal Information, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your Personal Information, and whether we can achieve those purposes through other means.

INFORMATION SECURITY

The security of your Personal Information is important to us. We maintain reasonable security measures that are proportionate to the volume and nature of the Personal Information we maintain.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for your account with us, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

The transmission of information via the internet is not completely secure or error-free. Although we have implemented safeguards to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our website. Any transmission of Personal Information to Doyle is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Website.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated over time. We publish the “Last Updated” date at the top of the Policy to notify consumers when changes are made. We encourage you to check our website periodically for updates

COMMUNICATING WITH DOYLE ABOUT OUR PRIVACY

If you have questions about this Privacy Policy or our privacy practices, please contact us at

Email dataprivacyrequest@doyle.com

Mailing Address

175 East 87^th Street

New York, NY 10128

212-427-4141

If you need to access this Privacy Policy in an alternative format, please contact us at dataprivacyrequest@doyle.com.