Steady Limited, trading as Steady Buy, is the controller of personal data collected through the marketplace. Registered/business address: USW, C Floor, F.A.O Start-up Stiwdio, C Floor Engagement Hub, Usk Way, Newport, NP20 2BP, United Kingdom. Privacy questions, rights requests and complaints can be sent to support@steadybuy.app.
We collect account/authentication information, buyer order/delivery/transaction records, seller store/product/verification/payout information, creator content/attribution/commission records, support/report/moderation records, device push tokens, and location only when permission is granted. For GB Sellers and Creators we also collect tax and verification information needed for digital-platform reporting, including legal name, date of birth, residential or business address, tax residency, National Insurance number or other tax identification number, business/company details, company registration and VAT numbers where applicable, contact-person details and bank/payout details. Passwords are stored as one-way hashes, and sensitive tax identifiers and date of birth are stored in restricted encrypted fields. Browsing without an account can still create limited technical, security and marketplace activity data needed to serve and protect the service.
We process data to perform our contract with you and operate login, checkout, orders, delivery, commissions, payouts and annual earnings statements; to meet legal, tax, accounting, digital-platform reporting, identity-verification, fraud and dispute obligations; for legitimate interests in security, abuse prevention, service improvement and marketplace integrity where those interests do not override your rights; and, where required, with your consent for optional permissions or promotional communications. GB tax information is used to prepare Seller/Creator statements, determine reportable activity and meet Steady Buy's HMRC reporting and due-diligence obligations. It is not used to calculate a user's personal tax liability.
We share only what is necessary with service providers including Stripe for UK payments/payouts, Paystack for Nigerian payments/payouts, Resend for email, AWS for uploaded media, Firebase for push/app services, and the courier used for an order, including Stuart, Fez or Sendcloud where applicable. Sellers receive buyer and fulfilment information needed to complete an order. Where Steady Buy is required to report GB digital-platform activity, relevant Seller/Creator identity, tax, transaction, fee and payout information may be reported to HM Revenue & Customs (HMRC), and the reported information is also made available to the affected Seller/Creator. We may also disclose information where law, safety, fraud prevention or valid legal process requires it. We do not sell personal data.
Some service providers may process data outside Nigeria or the UK. Where law requires safeguards for an international transfer, Steady Buy will use an approved transfer mechanism or other lawful safeguard appropriate to the transfer.
Account and marketplace data is kept while your account is active and only as long afterward as needed for the purpose collected. Financial, order, payout, fraud and dispute records may be kept for periods required by tax, accounting, payment, consumer-protection and legal obligations. For GB digital-platform reporting, Steady Buy may need to retain seller due-diligence information, verification steps and copies/records of submitted reports for five years after the end of the relevant reportable period. Verification documents and other sensitive material are deleted or restricted when no longer required. Device tokens are replaced or removed when refreshed, cleared on sign-out where possible, or invalidated.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent and complain to a regulator. Steady Buy provides profile editing, data export, deactivation and account deletion in-app. UK users may complain to the ICO; Nigerian users may complain to the NDPC. Rights requests can also be sent to support@steadybuy.app.
Deleting an account removes access and removes or anonymises direct account information that no longer needs to be kept. Historic order, payment, payout, tax/reporting, fraud, dispute, review and moderation records may remain in anonymised or access-restricted form where retention is required for accounting, consumer protection, HMRC/digital-platform reporting or another legal obligation. Users who cannot access the app can submit a deletion request at steadybuy.app/account-deletion.
Steady Buy may use automated rules to rank marketplace content, detect suspicious activity and surface moderation/fraud signals. Seller and Creator approval decisions remain subject to human administrative review. Steady Buy does not currently use solely automated decisions that produce legal or similarly significant effects.
Buyer accounts are available only to people aged 16 or older. Seller and Creator capability is available only to people aged 18 or older. Steady Buy does not support 18+ Creator content; content that exceeds the platform's 16+ rating is prohibited and may be removed. If we learn that a Buyer account belongs to someone under 16, or that a Seller/Creator application was made by someone under 18, we may suspend or decline the relevant account or capability and handle personal data subject to legal retention duties.
We use access controls, encrypted network connections, hashed passwords, provider-hosted payment flows and other technical and organisational safeguards designed to protect personal data.
Material changes to this notice should be communicated appropriately rather than relying only on continued use. For privacy questions or data-rights requests, contact support@steadybuy.app.