Privacy Policy
We collect as little as we can. We have no accounts, no ad trackers and no analytics cookies. Payment details go to Paystack, not to us. Whatever you put in a bid is public.
1. Controller
Olasunkanmi Fafowora, trading as QwikBuy, Lagos, Nigeria, is the data controller. Privacy contact: privacy@qwikbuy.lol.
2. What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Listing content (product, store name, prices, promo code, photo, link, country, bid, times) | Showing your deal publicly and keeping it under “Previously featured” | Contract | While the site runs, unless removed |
| Payment records from Paystack (transaction reference and ID, amount, currency, status) | Confirming payment, handling refunds, chargebacks and accounting | Contract; legal obligation | As long as tax and accounting law requires (typically 6–7 years) |
| Terms version accepted and acceptance time | Proving what was agreed | Legitimate interests; contract | Same as payment records |
| Receipt email (passed to Paystack, which requires it; not stored by us) | Sending your receipt | Contract | Under Paystack’s policy |
| Images you upload | Showing your ad. We re-encode every image, which removes embedded metadata such as GPS location and camera details. | Contract | Unpaid uploads are deleted within 2 days. Paid images are kept with the bid. Removed images are quarantined while any legal hold lasts. |
| Upload record (time, approximate country from Cloudflare) | Investigating abuse and illegal content | Legitimate interests; legal obligation | Same as the image |
| Bot-check signals (Cloudflare Turnstile: browser and device characteristics, IP) | Stopping bots and fraud at checkout | Legitimate interests | Processed by Cloudflare. Not used for advertising. |
| Site usage via Cloudflare Web Analytics (pages viewed, referrer, browser, device type, country, page speed) | Understanding how the site is used so we can improve it. Cookieless; no personal profile is built. | Legitimate interests | Aggregated by Cloudflare |
| Visit counts for the public Stats page | Counting daily unique visitors without cookies. Your IP address and browser type are combined with a random salt that changes every day and turned into a one-way hash. The salt and hashes are deleted after the day ends, and no IP is stored. | Legitimate interests | Only daily totals are kept |
| Technical data (IP address, user agent, request logs) handled by Cloudflare | Security, preventing abuse and DDoS, debugging | Legitimate interests | Short-lived operational logs |
| Messages you send us (support, takedown or legal requests) | Replying and keeping a record of complaints | Legitimate interests; legal obligation | Up to 3 years |
Your listing is public and may be seen, screenshotted and shared by anyone. Don’t put personal information in them that you don’t want public.
3. Who we share it with
- Paystack (payment processing). Paystack collects your payment details directly under its own privacy policy.
- Cloudflare (hosting, database, image storage, Turnstile bot protection, Web Analytics, email alerts, security), as our processor.
- Authorities or courts, where the law requires it, or where it’s needed to protect rights and safety.
- A buyer of our business, if one exists, bound by this policy.
We do not sell personal data. We do not share it for cross-context behavioural advertising.
4. International transfers
Our providers operate globally, so your data may be processed outside your country. Where the law requires it, for example under the GDPR, the UK GDPR or the Nigeria Data Protection Act 2023, we rely on appropriate safeguards such as Standard Contractual Clauses.
5. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your data, to data portability, and to withdraw consent. Email privacy@qwikbuy.lol. We will reply within the time the law requires, usually one month. Some records, such as payment records, we must keep by law. You may also complain to your data protection authority, for example the Nigeria Data Protection Commission, the UK ICO or your EU supervisory authority. California residents: we do not sell or share personal information, and you will not be treated differently for exercising your rights.
6. Children
The service is for adults only (18+). We don’t knowingly collect data from children.
7. Security
We use encryption in transit, least-privilege access, signed payment webhooks, and we don’t store card data. No system is perfectly secure. If a breach affects you, we will notify you as the law requires.
8. Cookies
See the Cookie Policy.
9. Changes
We will post updates here and change the effective date.