Privacy Policy

Welcome to BUZ ("we", "our", or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our classified ads marketplace platform.

BUZ is operated from Ireland and complies with the General Data Protection Regulation (GDPR) and Irish data protection laws.

BUZ is the data controller for your personal data. If you have questions about this policy or your data, contact us at:

Email: [email protected] Address: [Your Business Address], Ireland

We collect the following types of personal data:

**Account Information:** - Email address (required) - Name (optional) - Phone number (optional) - Profile photo (optional)

**Listing Information:** - Item descriptions and photos you upload - Pricing and location information

**Transaction Data:** - Messages between users - Offers and purchases - Payment information (processed by Stripe)

**Technical Data:** - IP address (anonymized after 90 days) - Device type, browser, operating system - Usage patterns and preferences

We process your data based on:

- **Contract**: To provide our marketplace services - **Consent**: For marketing communications and analytics - **Legitimate Interest**: For fraud prevention and platform security - **Legal Obligation**: Tax and regulatory compliance

We use your personal data to:

- Create and manage your account - Display your listings to potential buyers - Facilitate communication between buyers and sellers - Process payments (via Stripe) - Send service notifications - Improve our platform and services - Prevent fraud and ensure security - Comply with legal obligations

We share your data with:

**Service Providers:** - Stripe (payment processing) - USA, EU-US Data Privacy Framework - Cloudflare (image hosting) - Global, Standard Contractual Clauses - Resend (email delivery) - USA, EU-US Data Privacy Framework

**Other Users:** - Your public profile and listings are visible to all users - Your contact details are shared only when you initiate contact

**Legal Requirements:** - We may disclose data if required by law or to protect our rights

We retain your data for:

- **Account data**: Until you delete your account - **Listings**: Until deleted or 6 months after expiry - **Messages**: Until deleted by both parties - **Analytics**: 90 days (then anonymized) - **Transaction records**: 7 years (legal requirement)

You can delete your account at any time, which removes your personal data within 30 days.

Under GDPR, you have the right to:

- **Access**: Request a copy of your personal data - **Rectification**: Correct inaccurate data - **Erasure**: Delete your account and data - **Portability**: Export your data in JSON format - **Restriction**: Limit how we process your data - **Objection**: Opt-out of marketing and analytics - **Withdraw Consent**: Change your preferences anytime

To exercise these rights, go to Settings > Privacy in your account or contact [email protected]

We use cookies for:

- **Essential**: Login sessions and security - **Analytics**: Understanding platform usage (can opt-out) - **Preferences**: Remembering your settings

You can manage cookie preferences in your account settings or browser.

We protect your data with:

- Encryption in transit (HTTPS/TLS) - Secure password hashing (bcrypt) - Rate limiting and fraud detection - Regular security audits - Access controls and monitoring

We may update this policy occasionally. We will notify you of significant changes via email or platform notification. Your continued use after changes constitutes acceptance.

For privacy questions or to exercise your rights:

Email: [email protected] Data Protection Officer: [email protected]

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC): Website: www.dataprotection.ie