Privacy Policy

Buynux ("we", "us", or "our") operates an online multi-vendor marketplace. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights over it. By using our platform, you agree to the practices described here.

We are committed to handling your data with transparency and in compliance with applicable data protection principles.

2.1 Account & Registration Data

• Full name, email address, and password when you create an account.
• Phone number and delivery address(es) when you add them to your profile.
• Business name, bank details, and NID/TIN for sellers during onboarding.

2.2 Transaction Data

• Order details: items purchased, quantities, prices, and order status.
• Payment information: transaction IDs, payment method type (card, mobile banking, COD). We do not store full card numbers — payments are processed by our payment provider (shurjoPay).
• Shipping address and delivery history.

2.3 Usage Data

• Products you view, search queries, wishlist items, and pages visited.
• Device type, browser, IP address, and approximate location (country/city).
• Session duration and click paths to help us improve the platform.

2.4 Cookies & Similar Technologies

• Session cookies to keep you logged in.
• Preference cookies to remember your language, currency, and filter settings.
• Analytics cookies to understand aggregate usage patterns (no third-party advertising trackers).

• To create and manage your account, process orders, and facilitate delivery.
• To share relevant order details with the seller(s) fulfilling your purchase (name, shipping address, and order contents only — never your payment credentials).
• To send order confirmations, shipping updates, and service notifications via email.
• To calculate loyalty points, apply coupons, and personalise your shopping experience.
• To detect and prevent fraud, abuse, and unauthorised account access.
• To analyse aggregated, anonymised usage data so we can improve the platform.
• To comply with legal obligations and resolve disputes.

We do not sell your personal data. We share it only in these limited circumstances:

• With sellers: your name, shipping address, and order contents are shared with the seller(s) fulfilling your order. Sellers are contractually prohibited from using this data for any purpose other than order fulfilment.
• With payment processors: shurjoPay receives payment data to complete transactions. Their privacy policy governs how they handle that data.
• With delivery partners: shipping address and contact details may be shared with courier services to complete delivery.
• With legal authorities: we will disclose data when required by law, court order, or to protect the rights and safety of users.
• In a business transfer: if Buynux is acquired or merges with another entity, user data may transfer as part of that transaction, subject to the same privacy protections.

• Account data is retained while your account is active and for up to 2 years after closure to resolve disputes and comply with legal obligations.
• Order and transaction records are retained for 7 years for tax and accounting purposes.
• Usage and analytics data is retained in anonymised, aggregated form indefinitely.
• You may request deletion of your personal data at any time (see Section 6). Legal retention obligations may prevent full deletion of some records.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data via your account settings.
• Request deletion of your account and associated personal data.
• Object to or restrict certain processing activities.
• Withdraw consent (e.g. unsubscribe from marketing emails) at any time.

To exercise any of these rights, email us at support@buynux.dev. We will respond within 30 days. We may need to verify your identity before processing the request.

We use industry-standard security measures including HTTPS encryption, hashed passwords, and access controls to protect your data. No system is completely secure, and we cannot guarantee absolute security. If you suspect unauthorised access to your account, contact us immediately.

Buynux is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

For privacy-related enquiries or to exercise your rights, contact us at support@buynux.dev. Please include "Privacy" in the subject line.