Privacy Policy

1Who we are

BuyAgain is operated by Daniel Cantrill, a sole trader trading as BuyAgain, based at Linton, Swadlincote, DE12 6QH, United Kingdom. In this policy "we", "us" and "our" mean Daniel Cantrill trading as BuyAgain.

For questions about this policy or your data, email hello@buyagain.co.uk.

2Our two roles

BuyAgain handles two kinds of personal data, and our role is different for each:

• Your account data (you, the seller). We decide how this is used, so we are the data controller.
• Your buyers' data (the customers in your eBay store). You decide why it is used, so you are the controller and we act as your data processor. We only use it to provide BuyAgain to you, never for our own purposes.

3What we collect

When you create an account

• Your first and last name and email address.
• Your password, which is stored only as a secure one-way hash. We can never see it.
• Your plan, and the customer and subscription IDs that Stripe gives us if you upgrade. We never see or store your card details.
• If you joined through a referral link: who referred you and when.

When you connect your eBay store

You sign in on eBay's own site and grant BuyAgain read-only access to your orders through eBay's official API. We store:

• Access tokens for your eBay connection, so we can sync your orders.
• For each buyer: eBay username and buyer ID, and their name and email address where eBay provides them.
• Order details: item title, SKU, quantity, price, order status and order, shipping and cancellation dates.
• Totals we work out from those orders, such as order count, total spend and first and last order dates.
• Any notes and tags you add.

Email sign-up page

If you share your BuyAgain sign-up page, buyers who join give their email address and, optionally, their eBay username. We record when they joined and when they unsubscribe.

Website visits

• Our website uses our own cookie-free visit counter to see which pages are popular and where visitors come from. It does not set cookies or build a profile of you.
• When someone clicks a referral link we log the IP address and time, so referral rewards can be credited and abused clicks spotted.
• Our web server keeps standard technical logs (such as IP address and browser) for security and fixing faults.

4How we use it, and why we're allowed to

• To provide BuyAgain (syncing orders, reorder alerts, win-back plans, reminders, exports). Lawful basis: performing our contract with you.
• To take payments and keep billing records. Lawful basis: contract and legal obligation.
• To send service emails, such as password resets and important account notices. Lawful basis: contract.
• To keep BuyAgain secure, prevent abuse and improve it. Lawful basis: our legitimate interests.
• Sign-up page emails are collected with the buyer's consent, on your behalf.

We do not sell personal data, and we do not use your buyers' data to market to them ourselves. BuyAgain never messages your buyers for you.

5Who we share data with

We only share data with the service providers we need to run BuyAgain:

• eBay: to read your orders when you connect your store. See eBay's User Privacy Notice.
• Stripe: to process payments. See Stripe's Privacy Policy.
• Resend: to deliver service emails. See Resend's Privacy Policy.
• Hetzner Online: our servers are in Helsinki, Finland (EU). See Hetzner's Privacy Policy.
• Google Fonts: our pages load fonts from Google, which receives your IP address. See Google's Privacy Policy.

Some of these providers may process data outside the UK. Where they do, they use legal safeguards approved under UK data protection law, such as the UK International Data Transfer Addendum. We may also share data if the law requires it.

6How long we keep it

• Account and store data is kept while your account is open.
• If you disconnect eBay, syncing stops straight away. If you'd like your stored customer data deleted too, email us.
• If you ask us to close your account, we delete your account and customer data within 30 days. We keep billing records for as long as UK tax law requires (normally 6 years).

7Keeping it safe

Data travels over encrypted HTTPS connections. Passwords are hashed. Access to our servers is restricted. No system is perfectly secure, but if we ever have a breach that puts your data at risk, we will tell you and the ICO as the law requires.

8Cookies

The BuyAgain app uses one essential cookie that keeps you signed in. Our website sets no cookies. We don't use advertising or tracking cookies, so there is no cookie banner.

9Your rights

Under UK data protection law you can ask to access, correct, delete or export your data, and you can object to or restrict how we use it. Email hello@buyagain.co.uk and we'll reply within one month.

If you're a buyer and your details are in a seller's BuyAgain account, that seller is responsible for your data. Please contact them first. We will help them respond.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO).

10Changes

If we change this policy we'll update the date at the top. If a change is significant, we'll email account holders before it takes effect.

11Contact