PRIVACY POLICY

Effective Date: 21 May 2025
Last Revised: 21 May 2025

1. GENERAL PROVISIONS

This Privacy Policy governs the collection, use, and protection of personal data by the digital platform BUYDO (hereinafter the "Website"), operated by BUYDO LTD (hereinafter "we", "us", or the "Data Controller").

BUYDO LTD is registered in the United Kingdom under registration number 16104744, with its registered office at 20 Wenlock Road, London, United Kingdom, N1 7GU.

We are committed to protecting the privacy and personal data of our users and visitors and to ensuring data processing complies with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and other applicable laws.

By accessing or using the Website, you confirm that you have read, understood, and agree to this Privacy Policy.

2. INFORMATION WE COLLECT

We collect the following types of personal data:

2.1. Device and Usage Information (automatically collected):

• • IP address
  • Web browser type and version
  • Device model and screen resolution
  • Operating system
  • Time zone and geographic location
  • Referrer URL and activity on our Website (pages viewed, links clicked, etc.)

Technologies used:

• • Cookies: small data files stored on your device
  • Log files: record actions occurring on the Website
  • Tracking pixels: third-party tracking tools such as Facebook Pixel and Google Analytics (used with your consent)

2.2. Account and Service Information (provided by you):

• • Name, email address, phone number
  • Delivery and billing address
  • Order history and payment details
  • Any communications you send to us

2.3. Location Data:

• • Collected only while the Website is active, with your permission
  • Used for service functionality and quality assurance

3. LEGAL BASIS FOR PROCESSING

We process your data based on the following lawful bases under Article 6 of the GDPR:

• Consent: for analytics, marketing, and cookies (you may withdraw at any time)
• Contractual necessity: to provide services, process transactions, and manage user accounts
• Legitimate interests: to improve the Website, detect fraud, and resolve disputes
• Legal obligation: to comply with applicable laws

4. HOW WE USE YOUR PERSONAL DATA

We use your data for the following purposes:

• To operate, maintain, and improve our Website and services
• To create and manage your account
• To process and deliver orders
• To provide customer support and respond to inquiries
• To detect and prevent fraud, abuse, and security threats
• To comply with legal obligations (e.g. tax, anti-fraud laws)
• To send marketing communications, subject to your consent
• To personalize content, ads, and user experience

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for functionality, analytics, and advertising. When you visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Customize your preferences
• Reject non-essential cookies

More information is available in our separate Cookie Policy.

You can manage your cookie preferences at any time through your device or browser settings.

6. SHARING OF PERSONAL DATA

We may share your data with:

• Our affiliated companies and trusted partners for service delivery
• Analytics and advertising providers (e.g., Google Analytics, Facebook Pixel) with your consent
• Service providers such as hosting, email, payment, or logistics partners
• Government authorities or legal entities when required by law or court order

We ensure that any third parties processing data on our behalf are subject to appropriate data processing agreements.

We do not sell or rent your personal data.

7. INTERNATIONAL DATA TRANSFERS

If your data is transferred outside the UK or EU, we ensure appropriate safeguards are in place under GDPR Articles 44–49, such as:

• Standard Contractual Clauses (SCCs)
• Transfers to countries with an adequacy decision by the European Commission

8. DATA RETENTION

We retain your data only as long as necessary:

• Account and transaction data: 7 years (for tax/accounting purposes)
• Fraud-related data: up to 10 years
• Dispute-related data: until resolution or legal expiry
• Inactive accounts: deleted after 3 years of inactivity (after prior notice)

Deleting the Website does not automatically delete your personal data. To request deletion, contact us at legal@buydo.com.

9. YOUR RIGHTS

Under GDPR, you have the following rights:

• Right to access your personal data
• Right to rectify inaccurate or incomplete data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right not to be subject to automated decision-making
• Right to withdraw consent at any time

To exercise any of these rights, contact us at legal@buydo.com. We will respond within 1 month.

You also have the right to lodge a complaint with your national data protection authority:

• UK: Information Commissioner's Office (ICO) – www.ico.org.uk
• EU: Contact your local supervisory authority

10. DATA SECURITY

We implement appropriate technical and organizational security measures, including:

• Data encryption (in transit and at rest)
• Access controls and authentication
• Regular security audits
• Secure cloud infrastructure (AWS, UK/EU-based)

However, we cannot guarantee the security of information transmitted over the internet.

11. LINKS TO THIRD-PARTY WEBSITES

This Privacy Policy does not apply to external websites linked from our Website. Please review the privacy policies of those third-party sites.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in legal or operational practices. We will notify users of material changes via the Website or email.

13. MINORS

Our Website is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

14. CONTACT INFORMATION

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at: