Privacy Policy

1. Personal Data Controller

The Service is provided by LAGATE BUSINESS LTD, Thessalonikis 41, Geri, 2200 Nicosia, Cyprus (“Buyora”, “we”, “us”, “our”). VAT: 60115895L.

2. What Personal Data We Collect

Category	Examples	How we collect it
Identifiers	Name, email, postal address, phone, account ID, hashed password	Provided when you sign up, submit a claim, or contact support
Payment & Subscription	Last 4 digits of card, billing address, payment token, refund history	Sent by our payment providers; we never store full card data
Claim Documentation	Order receipts, invoices, merchant chats, shipping proof, legal letters	Uploaded via portal or sent by email
Device / Usage Data	IP address, browser type, OS, time zone, referral, visited pages	Automatically via cookies and logs
Marketing Preferences	Newsletter/SMS opt-in, referral source, campaign tags	Voluntarily submitted or tracked via analytics tools
Support Interactions	Emails, chats, ratings	Provided during your interactions with our team

Note: We do not knowingly collect data from children under 18, biometric data, or full credit card numbers.

3. Why We Process Your Data

Purpose	Description	Data used
Provide and maintain Service	Account creation, login, claims processing, bug resolution	Identifiers, Claims, Device
Payment processing	Start trial, billing, chargebacks, refunds	Payment & Subscription
Customer support	Respond to queries, resolve issues, confirm actions	Identifiers, Support Data
Improve and secure platform	Analytics, A/B testing, performance logs, fraud prevention	Device, Usage, Feedback
Marketing & Retargeting	Promotions, abandoned-cart emails, ad retargeting	Marketing, Hashed identifiers
Legal compliance	Tax records, legal requests, regulatory requirements	All categories as needed

4. Legal Bases (for EEA/UK Residents)

Legal Basis	Applies To
Contract (Art. 6(1)(b))	Account management, billing, support
Legitimate interest (f)	Analytics, marketing of similar services, fraud prevention
Consent (a)	Non-essential cookies, newsletters, personalized advertising
Legal obligation (c)	Bookkeeping, compliance with financial/legal requests

You may withdraw your consent or object to processing based on legitimate interest at any time—see Section 7.

5. Cookies & Similar Technologies

We use first-party and third-party cookies and trackers to:

Keep users logged in;
Remember preferences;
Analyze traffic and behavior;
Deliver relevant ads.

For more information and opt-out options, see our Cookie Policy.

6. Who Else Receives Your Data

Recipient Type	Examples	Purpose
Payment processors	Stripe, PayPal	Process payments, detect fraud
Hosting providers	AWS, Google Cloud	Store and secure application data
Analytics services	Google Analytics, Hotjar	Understand and improve product use
CRM and messaging tools	HubSpot, Twilio, Customer.io	Manage tickets, send alerts and service messages
Marketing platforms	Meta Ads, Google Ads, Microsoft Ads	Show targeted ads, measure campaign effectiveness
Legal advisors / courts	Bailiffs, local counsel	Legal escalations, compliance with laws
Governmental authorities	Tax authorities, regulators	When required by law or legal process

We do not sell your personal data for money. However, under certain U.S. laws, sharing for ad targeting may be treated as a “sale” (see Section 10).

7. Your Privacy Rights

If you live in EEA / UK	If you live in certain U.S. states	How to exercise it
Access, rectification, erasure, objection, portability, withdraw consent, lodge complaint	Access/know, delete, correct, opt-out of sale/sharing, portability	Email us at help@wearebuyora.com. We will verify your identity.

8. Age Limitation

Buyora is intended for users 18 years and older. We do not knowingly process data from minors. If you believe a minor submitted personal data, contact us for deletion.

9. International Data Transfers

Your data may be stored or processed in the European Union or other countries where we or our partners operate.

For transfers outside the EEA/UK, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards approved by relevant authorities.

10. U.S. State Privacy Rights

Residents of California, Virginia, Colorado, Connecticut, and Utah (and other U.S. states with privacy laws) may:

Opt out of the “sale” or “sharing” of personal data for advertising;
Request access, deletion, or correction of data;
Appeal denials of privacy requests.

To exercise these rights, email help@wearebuyora.com or use the “Do Not Sell/Share” link in the footer of our site.

11. Data Security

TLS 1.2+ encryption in transit
AES-256 encryption at rest for sensitive files
Access controls and MFA for internal systems
Routine security audits and incident response processes

12. Data Retention

We retain data only as long as necessary for the purposes outlined in Section 3, or to meet legal obligations.

Data Type	Retention Period
Account & billing records	10 years (for tax & legal compliance)
Claim documentation	7 years after claim resolution
Email opt-out list	Indefinitely (to honor your opt-out request)
Analytics logs	13 months, then anonymized or deleted

13. Changes to this Policy

We may update this Privacy Policy. If significant changes are made:

The “Last updated” date will change;
Active users may be notified by email or in-app banner.

Continuing to use the Service after changes take effect constitutes acceptance.

14. Contact

Buyora – LAGATE BUSINESS LTD

Thessalonikis 41, Geri, 2200 Nicosia, Cyprus

VAT: 60115895L

help@wearebuyora.com

+44 7488 813147

We respond to verified privacy requests within 30 days (or up to 45 days for California residents).

By using our website or starting a trial, you acknowledge that you have read and understood this Privacy Policy.