Privacy Policy
This Privacy Policy explains how BuyAmTo (“BUYAMTO“, “we”, “us”) collects, uses, shares and protects your personal data when you use buyamto.com, shop with us or take part in our BUYAMTO Earn programme. We handle personal data in line with the Nigeria Data Protection Act 2023 and other applicable law.
1. Who is responsible for your data
BuyAmTo is the data controller for the personal data described here. You can reach us at hello@buyamto.com for any privacy question or request.
2. What we collect
- Account details: your name, email address and a password (stored in scrambled, hashed form, never in plain text).
- Order details: billing and delivery names and addresses, phone number, email address, the items you buy, order history and messages you send us about an order.
- Payment details: payments are handled by our payment provider, Paystack. We receive confirmation that a payment succeeded and limited details such as the payment reference and the last digits of a card. We do not see or store your full card number or PIN.
- BUYAMTO Earn details (only if you join): your personal referral link and code, the orders and commissions linked to them, your wallet and store-credit activity, and, if you request a withdrawal, your bank name, account name and account number. If you apply as a creator we also keep the social profile link, handle, follower count and notes you give us.
- Referral click records: when someone opens a BUYAMTO Earn link we record the affiliate, the page and the time, and a one-way scrambled visitor code used only to avoid counting the same visit twice. We do not store the visitor’s IP address or browser details in these records. They are deleted automatically after 180 days.
- Technical data: IP address, browser type, device and pages visited, which our hosting and security tools record to keep the website working and safe.
- Cookies and similar technologies: see our Cookie Policy.
- Messages and marketing choices: emails you send us and whether you have asked to receive (or stop receiving) marketing messages.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account, taking and delivering orders, taking payment, customer support and returns | Performing our contract with you |
| Running BUYAMTO Earn: tracking referrals, calculating and paying commission, preventing fraud and self-referral | Performing our contract with you; our legitimate interest in running a fair programme |
| Keeping the website secure, preventing fraud and abuse, fixing faults | Our legitimate interests |
| Keeping accounting, tax and transaction records | Legal obligation |
| Marketing emails and non-essential cookies | Your consent, which you can withdraw at any time |
4. Who we share it with
We do not sell your personal data. We share it only with people who help us run the store, and only what they need:
- our payment provider (Paystack) to process payments;
- delivery and courier partners, to deliver your order;
- our website hosting, security, email-sending and similar service providers;
- professional advisers, regulators, courts or law-enforcement bodies where the law requires or allows it.
If an affiliate’s link led to your order, that affiliate can see the order number and the commission it earned, but not your name, address or contact details.
5. Transfers outside Nigeria
Some of our service providers may store or process data outside Nigeria. Where that happens we take steps to make sure your data stays protected to a standard that meets the Nigeria Data Protection Act, for example through contractual safeguards.
6. How long we keep it
- Account details: for as long as your account is open, then deleted or anonymised unless we must keep something by law.
- Order, payment and commission records: for as long as needed for accounting, tax and dispute purposes (generally at least six years).
- Referral click records: 180 days.
- Marketing preferences: until you withdraw consent.
7. Your rights
You can ask us to give you a copy of your data; correct it; delete it; restrict or object to how we use it; and give you your data in a portable format. Where we rely on your consent you can withdraw it at any time. To use a right, email hello@buyamto.com. We may need to confirm your identity first, and some records must be kept by law. If you are unhappy with how we handle your data you can complain to the Nigeria Data Protection Commission.
8. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections, hashed passwords and restricted access to payout details. No online service can be perfectly secure, so please use a strong, unique password and tell us straight away if you think your account has been misused.
9. Children
Our store and the BUYAMTO Earn programme are not intended for anyone under 18, and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed, and we will take reasonable steps to tell you about important changes.
11. Contact
BuyAmTo — hello@buyamto.com