1. Who we are
SteadyBuy ("SteadyBuy", "we", "us", or "our") operates a community-driven marketplace that helps people discover local businesses, and lets affiliates and creators earn by recommending businesses they trust. This Privacy Policy explains what information we collect through our website, mobile app, and related services (together, the "Services"), why we collect it, and the choices you have.
We are currently preparing to launch in the United Kingdom and Nigeria. Where relevant, this policy explains how we comply with the UK General Data Protection Regulation and Data Protection Act 2018 ("UK GDPR"), and Nigeria's Data Protection Act 2023 and the Nigeria Data Protection Regulation ("NDPA/NDPR").
2. Information we collect
Information you give us
- Account information — name, email address, phone number, password, and profile details when you sign up as a customer, local business, or affiliate/creator.
- Business listing information — business name, address, category, description, photos, opening hours, and contact details, if you list a business.
- Payment and payout information — billing details for purchases, and bank or mobile-money details for affiliate/creator payouts, processed via our payment providers.
- Communications — messages you send us, reviews, ratings, and any information you provide through customer support.
- Waitlist and marketing sign-ups — email address submitted through our "Notify me" forms.
Information collected automatically
- Usage data — pages viewed, searches performed, businesses viewed or clicked, referral and recommendation links followed, and general app interactions.
- Device and technical data — IP address, device type, operating system, browser type, and app version.
- Location data — approximate location (e.g. city or postcode) to show nearby businesses, or precise location if you enable location services and grant permission.
Information from third parties
- Information from payment processors, identity-verification providers, and analytics partners.
- Information from a business or affiliate you interact with, such as confirmation that a referral led to a sale.
3. How we use your information
- To create and manage your account and provide the Services.
- To show you relevant local businesses and personalise your experience.
- To process transactions, track referrals, and calculate and pay affiliate/creator rewards.
- To communicate with you, including launch updates, service notices, and (with your consent, where required) marketing.
- To maintain the safety, security, and integrity of the Services, including fraud prevention.
- To analyse and improve the Services, and develop new features.
- To comply with legal obligations, such as tax reporting on affiliate payouts.
4. Our legal basis for processing (UK GDPR)
Where UK GDPR applies, we rely on one or more of the following legal bases:
| Basis | Example use |
|---|---|
| Contract | Creating your account, processing a purchase, paying an affiliate reward |
| Legitimate interests | Improving the Services, preventing fraud, understanding usage trends |
| Consent | Marketing emails, precise location access, optional cookies |
| Legal obligation | Tax and financial record-keeping |
5. How we share information
We do not sell your personal information. We share information only in the following circumstances:
- With local businesses you interact with, to the extent needed to fulfil a booking, order, or enquiry.
- With service providers who help us run the Services, such as hosting, payments, analytics, and customer support tools, under contractual confidentiality and data-protection obligations.
- For legal reasons, if required to comply with a legal obligation, enforce our Terms of Service, or protect the rights, safety, or property of SteadyBuy, our users, or the public.
- In a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your information.
- With your consent, for any other purpose we disclose to you at the time of collection.
6. Affiliates, creators and rewards
If you participate in our affiliate/creator programme, we track referral links and resulting purchases to calculate rewards owed to you. This may involve sharing limited transaction data (such as order value and date, not full customer details) with you for reward-tracking purposes, and sharing your payout details with our payment processors.
7. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences, understand how the Services are used, and attribute affiliate referrals correctly. You can control cookies through your browser settings; disabling some cookies may affect how the Services function.
8. Data retention
We keep personal information for as long as needed to provide the Services, comply with legal and tax obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymise it.
9. International transfers
Because we operate across the UK and Nigeria, your information may be transferred to and processed in a country other than the one where you live. Where we transfer personal information internationally, we use appropriate safeguards required by applicable law, such as UK International Data Transfer Agreements or standard contractual clauses.
10. How we protect your information
We use technical and organisational measures, including encryption in transit, access controls, and staff training, to protect your information. No system is completely secure, and we cannot guarantee absolute security.
11. Your rights and choices
Depending on where you live, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Object to or restrict certain processing.
- Request a portable copy of your information.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us using the details below.
12. Children's privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. The "Last updated" date at the top shows when this policy was last revised.
14. How to contact us
If you have questions about this Privacy Policy or how we handle your information, contact us at:
Email: privacy@steadybuy.app