01Scope and responsibility
This draft notice explains how BUYBIZ intends to handle personal data collected through this website, its dashboards and related support channels. The legal entity responsible for the data, its registration details and a formal privacy contact must be confirmed before launch.
This notice does not cover third-party websites or services that BUYBIZ links to. Their own privacy notices apply.
02Personal data we collect
- Account data: username, display name, email address, account status, role and authentication identifiers. Passwords are handled by the authentication provider; BUYBIZ does not store your plaintext password.
- Wallet and order data: wallet balance history, deposits, orders, refunds, proxy allocations and their expiry.
- Payment data: payment provider references, amount, currency, status, channel and processing fee metadata. BUYBIZ does not receive or store full card numbers.
- Support data: ticket subject, messages, contact form submissions and correspondence.
- Technical and security data: IP address and user-agent where needed for fraud prevention, rate limiting, audit logs and security investigations.
- Preferences: theme choice, stored in a cookie in your browser.
03How we use personal data
- Create and secure your account and authenticate sign-in attempts.
- Maintain wallet, order, allocation and refund records.
- Verify payments and reconcile them against pending deposits.
- Enforce proxy seat capacity, expiry and fraud safeguards.
- Respond to support tickets and contact messages.
- Prevent abuse, investigate security incidents and maintain audit logs.
- Comply with legal obligations and enforce our terms.
BUYBIZ does not sell personal data and does not use wallet or order data to fabricate analytics or testimonials.
04Payments and financial providers
Wallet deposits are processed by Paystack when configured for the deployment. Paystack receives the payment information you provide on its hosted checkout and returns verification data to BUYBIZ. Card details are handled by the payment provider and are not sent to BUYBIZ servers.
BUYBIZ stores payment references, amounts, status and limited gateway metadata so it can reconcile wallet credits and support disputes.
05Service providers and sharing
BUYBIZ uses service providers for authentication and database hosting (Supabase), application hosting (Render) and payments (Paystack), and may use an email provider if email notifications are configured. These providers process data on their own terms and may operate outside Nigeria.
BUYBIZ may disclose data where legally required, where necessary to protect users or the service, or in connection with a lawful transfer of the business. The final legal notice must document any cross-border transfer safeguards.
06Legal bases
Depending on the processing activity, BUYBIZ relies on performance of a contract with you, compliance with legal obligations, legitimate interests such as security and fraud prevention, and consent where required. The draft must be reviewed against the Nigeria Data Protection Act 2023 and any applicable regulations.
08Retention
Account data is kept while the account is active and for a reasonable period afterwards. Financial ledger, order, allocation, deposit, refund and audit records may be retained longer to satisfy accounting, fraud prevention, dispute and legal requirements. Ledger entries are append-only; corrections are recorded as new entries.
Specific retention periods should be documented after consultation with the owner's legal and accounting advisers.
09Security
BUYBIZ uses server-side authorization checks, row-level security on exposed database tables, rate limits, HTTPS and encrypted storage for proxy credentials. Access to production secrets is restricted to the hosting environment. No system can guarantee absolute security.
Do not share your password, session cookie or proxy credentials with anyone. Contact BUYBIZ if you believe your account has been compromised.
10Your rights
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion where legally permitted, restriction of certain processing, or object to processing based on legitimate interests. You may also withdraw consent where processing relies on consent.
Requests can be sent through the contact page. Identity verification may be required. You may also have the right to complain to the Nigeria Data Protection Commission or another competent authority. The final notice must confirm the official contact route and response process.
11Children
BUYBIZ is not intended for children. Accounts should not be created by anyone under the age required to form a binding contract in their jurisdiction. The final notice should specify the age threshold after legal review.
12Changes and contact
This draft will change before launch and may change afterwards. Material changes should be notified through the website or account dashboard. The latest effective date will be displayed clearly.
For privacy questions, use the contact page. Do not include government identity numbers or full card details in a message.