Buyoo
Back to Buyoo
Buyoo

Legal & Privacy

Your privacy and trust matter to us. Review our policies below.

Data Protection Policy

Last updated: January 2024

1. Overview

This policy describes how Buyoo protects your personal data in compliance with the Nigeria Data Protection Regulation (NDPR) and international best practices.

2. Data Collection Principles

  • Lawfulness: We collect data with your consent or legitimate interest.
  • Fairness: We are transparent about what we collect and why.
  • Minimization: We only collect data necessary for the stated purpose.
  • Accuracy: We keep your data accurate and up to date.

3. Security Measures

  • HTTPS encryption for all communications.
  • JWT authentication with secure token management.
  • Password hashing using bcrypt.
  • Rate limiting and DDoS protection.
  • CSRF, XSS, and SQL injection protection.
  • Two-factor authentication (2FA) support.
  • Email and phone verification.
  • Audit logs and device management.
  • Session timeout and secure API authentication.

4. Data Subject Rights

You have the right to access, correct, delete, export, and restrict the processing of your personal data. Exercise these rights in Settings or contact dpo@buyoo.com.

5. Data Breach Response

In the event of a data breach, we will notify affected users within 72 hours and take immediate steps to secure the platform.