Buytok Privacy Policy

When you interact with the Buytok application, website, or services, we collect information necessary to provide a safe and seamless social commerce experience:

• Account Information: Full name, email address, phone number, delivery address, and account login credentials.
• KYC & Identity Data (For Sellers & Verified Users): Government-issued ID (NIN, Driver's License, International Passport), Bank Verification Number (BVN) verification tokens, and Corporate Affairs Commission (CAC) business certificates.
• Financial & Transaction Data: Escrow transaction history, wallet balances, payment reference codes, and billing details processed securely via licensed payment gateways.
• Social & Interaction Data: Comments, likes, saved products, direct chat inquiries with verified sellers, and product reviews.
• Device & Usage Data: IP address, device model, operating system, browser type, and app performance logs.

We process your data for clear, legitimate, and lawful purposes:

• Escrow Fulfillment: Holding funds safely in escrow and releasing payouts to merchants only upon successful package inspection.
• Order Delivery & Logistics: Sharing shipping addresses and contact phone numbers with trusted delivery couriers for package tracking across all 36 states and FCT.
• Fraud Prevention & Platform Safety: Detecting fraudulent orders, unauthorized access attempts, and preventing counterfeit listings.
• Customer Support & Dispute Mediation: Resolving transaction issues, processing refunds, and answering inquiries.
• Service Improvements: Personalizing product feeds and improving app speed and reliability.

Buytok shares your data strictly on a need-to-know basis with authorized service partners:

• Delivery & Courier Partners: Delivery name, recipient phone number, and physical shipping address are shared with our logistics partners to fulfill your shipment.
• Licensed Payment Processors: We partner with CBN-licensed payment institutions (Paystack, Flutterwave, Interswitch) to handle card charges, bank transfers, and wallet settlements.
• Verified Sellers: Merchants receive necessary order details (items ordered, recipient name, delivery city) to prepare and package your items.
• Law Enforcement & Legal Compliance: We may disclose information if required by Nigerian law, court orders, or regulatory bodies (such as the Central Bank of Nigeria or NDPC).

We implement comprehensive technical and organizational safeguards to prevent unauthorized access, alteration, or disclosure:

Under the Nigeria Data Protection Act (NDPA) and NDPR, you possess the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete information.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your account and personal data at any time via Security & Privacy settings. The account is suspended and cancellation reviewed prior to deletion to ensure all active deals, pending transactions, and escrow balances are fully settled, in accordance with NDPA 2023 and statutory financial record retention requirements.
• Right to Restrict or Object to Processing: Opt-out of marketing communications at any time.
• Right to Data Portability: Request transfer of your data to another service in a structured, machine-readable format.

We retain personal data only for as long as necessary to provide services, resolve disputes, and comply with statutory financial record-keeping laws in Nigeria (e.g., Money Laundering Prevention Act and Central Bank of Nigeria guidelines for financial audit trials).

When data is no longer required, it is permanently anonymized or securely deleted from our production and backup databases.

If you have questions, feedback, or wish to exercise your data rights, please contact our dedicated Privacy & Data Protection team: