Privacy Policy

1. About This Notice

This Privacy Notice explains how BukExchange (a multi-vendor book marketplace) collects, uses, and protects your personal data when you use our platform, including our website, mobile app, and related services. Since BukExchange connects buyers and independent booksellers, vendors may also process your data for order fulfillment—please review their policies where applicable.

2. Who We Are

BukExchange is an online marketplace specializing in books, where:

  • Vendors (booksellers) list and sell books directly to buyers.
  • Buyers purchase books across genres, formats, and sellers.
  • BukExchange facilitates transactions but does not handle shipping, returns, or vendor operations.

Your data is controlled by BukExchange Inc. (operating this platform) and, where relevant, individual vendors.

3. Data We Collect

A. Data You Provide

When you register, shop, or interact with vendors, we collect:

  • Identity & Contact Data: Name, email, phone, shipping address.
  • Account Data: Username, password, preferences.
  • Transaction Data: Purchase history, payment details (processed securely via third-party gateways like PayPal/Stripe).
  • Communications: Messages with vendors, reviews, or support queries.
B. Data We Automatically Collect
  • Device & Usage Data: IP address, browser type, pages visited, search queries.
  • Cookies: For functionality, analytics, and personalized ads (see our Cookie Policy).
  • Vendor-Shared Data: Order status, shipping updates (vendors may share tracking info via our platform).

4. How We Use Your Data

PurposeLegal Basis
Account creation & managementContract fulfillment
Processing orders & paymentsContract + legal compliance
Fraud preventionLegitimate interest
Customer supportConsent + legitimate interest
Personalized recommendationsConsent (opt-in)
Analytics & platform improvementLegitimate interest

Vendors may use your data only for order fulfillment (shipping, returns).

5. Data Sharing

We share data with:

  • Vendors: Only what’s needed to fulfill orders (name, address, contact).
  • Payment Processors: Never store full card details.
  • Logistics Partners: Only if vendors use integrated shipping services.
  • Legal Authorities: If required by law (e.g., fraud investigations).

We do NOT sell your data to third-party advertisers.

6. International Transfers

If vendors or partners operate globally, we ensure safeguards (e.g., Standard Contractual Clauses) for cross-border data transfers.

7. Data Retention

  • Active accounts: Retained while you use BukExchange.
  • Inactive accounts: Deleted after 3 years of inactivity.
  • Transaction records: Kept for 7 years for tax/legal compliance.

8. Your Rights

You can:
✅ Access, correct, or delete your data.
✅ Object to processing (e.g., opt out of marketing).
✅ Port your data (request a copy in machine-readable format).
✅ Lodge complaints with your local data protection authority.

To exercise these rights, contact:
📧 privacy@bukexchange.com
or visit Account Settings → Privacy Dashboard.

9. Security Measures

  • Encryption: SSL for all data transfers.
  • Access Controls: Strict vendor/data processor agreements.
  • Breach Protocols: 72-hour notification for significant incidents.

10. Vendor Responsibilities

Vendors must:

  • Protect buyer data and comply with this notice.
  • Delete data after order fulfillment unless legally required to retain.
  • Report breaches to BukExchange immediately.

11. Updates & Contact

We may update this notice; changes will be posted on our platform.
Questions? Contact our Data Protection Officer:
📧 support@bukexchange.com