Privacy Policy

Information We Collect

When you use OneBuy, we collect the following information:

• Account Information: Name, email address, phone number, and profile details
• Transaction Data: Items bought/sold, payment information, shipping addresses
• Technical Data: IP address, browser type, device information, and cookies
• Communication Data: Messages between buyers and sellers, support inquiries

How We Use Your Information

OneBuy uses your information to:

• Process transactions and facilitate payments through Stripe
• Verify your identity and prevent fraud
• Communicate order updates, shipping confirmations, and support messages
• Improve our platform and personalise your experience
• Comply with legal obligations (UK GDPR and Online Safety Act)

Data Security

We implement industry-standard security measures to protect your data:

• 256-bit SSL encryption for all transactions
• Regular security audits and vulnerability scanning
• Secure data storage with encrypted backups
• Access controls and authentication for sensitive data
• Payment information is processed securely through Stripe (PCI-DSS compliant)

Cookies & Tracking

OneBuy uses cookies to enhance your experience:

• Essential Cookies: Required for shopping cart, login, and checkout
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our site
• Marketing Cookies: Used to show relevant advertisements (you can opt out)

You can manage cookie preferences through your browser settings. Disabling cookies may affect platform functionality.

Third-Party Services

OneBuy integrates with trusted third-party services:

Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests

To exercise any of these rights, contact us at our support team.