Privacy Policy

Who we are

Buylib ("we", "us") provides the technology platform at buylib.com that lets independent sellers ("vendors") run their own online store. This policy explains how we handle personal data as the operator of that platform. See our Legal Notice for our full company/publisher details.

What we collect, and why (legal basis)

If you're a vendor: account details (name, email, password hash), store information (name, logo, description, payout details via Stripe/PayPal), and usage data — collected to perform our contract with you (running your store) and, for security logs, our legitimate interest in keeping the platform safe.

If you're a buyer: email address, and (where relevant to the order) shipping address and order details — collected to perform the contract of delivering your purchase, send order confirmations, and handle support requests. We do not see or store your full card number; that's handled directly by Stripe or PayPal.

How long we keep it

Order and invoicing records are kept for as long as legally required for accounting/tax purposes (typically several years under most jurisdictions' commercial record-keeping rules). Account data is kept while your account is active, and deleted or anonymized within a reasonable period after account closure, except where we must keep certain records (e.g. past orders) for legal or accounting reasons.

Who we share it with

We don't sell personal data. We do share it with the providers that make the platform work, each acting under their own privacy policy and, where applicable, our data processing terms with them:

• Stripe and PayPal — payment processing and payouts.
• Our email delivery infrastructure — sending order confirmations and, if a vendor uses it, marketing emails to their own subscribers.
• Cloudflare Turnstile — bot/spam protection on signup, if enabled.
• Hosting/infrastructure providers who store the servers this runs on (see our Legal Notice for our host).
• If a vendor enables analytics or advertising pixels (e.g. Google/Meta) on their own store, that vendor is the one choosing to add them — see the note on cookies below.

Some of these providers may process data outside the EU/EEA; where they do, they rely on mechanisms such as Standard Contractual Clauses to provide an adequate level of protection.

Cookies

We use strictly necessary cookies (e.g. keeping you logged in, remembering your cart) which don't require consent. A vendor's store may also load additional cookies if that vendor has added their own analytics or advertising tools to their store — these are the vendor's choice, not ours, and the vendor is responsible for their own compliance with cookie-consent rules for anything they add.

Your rights

Depending on where you live (e.g. under the GDPR if you're in the EU/EEA/UK), you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• request deletion of your data (subject to what we must legally retain, e.g. past order records);
• object to or restrict certain processing;
• receive a copy of your data in a portable format;
• lodge a complaint with your local data protection authority (in France, the CNIL).

To exercise any of these, contact us at contact@buylib.com. If your request concerns a purchase from a specific store, we may also need to involve that vendor, since they control some of the order data as well.

Security

We use reasonable technical measures (encrypted connections, hashed passwords, access controls) to protect personal data, but no system is 100% secure — we can't guarantee absolute security of information transmitted to us.

Changes to this policy

We may update this policy from time to time; significant changes will be reflected by an updated date at the top of this page.