Who is responsible
The controller of the personal data described here is Buyz (buyz.ie), based in Ireland. Contact: hello@buyz.ie.
Hosting and server logs
Buyz is served by Firebase Hosting, a Google service. Firebase Hosting uses the IP address of each request to detect abuse and to give us statistics about how the site is used. Google acts as our processor under the Firebase Data Processing and Security Terms. We do not use this data to identify visitors. Legal basis: our legitimate interest in running a secure website (GDPR Article 6(1)(f)).
How long: Google states that Firebase Hosting keeps IP data for a few months. It does not publish an exact period.
Where: Firebase Hosting runs on Google's global infrastructure, so Google may process and store this data outside the European Economic Area, wherever Google or its agents have facilities. For transfers to the United States, Google states that it complies with the EU-U.S. Data Privacy Framework.
Analytics
We use Google Analytics 4 only if you press “Accept analytics” in the banner. Until then no Google Analytics code loads. With your consent it records which pages you open, which deals you see and which “Go to shop” links you press, plus device, browser and approximate location (country or city level, derived from your IP address).
How long: Google Analytics keeps the event and user-level data linked to its cookies for 2 months, then deletes it in its monthly clean-up. Totals in our reports, such as how many visits a page had, are kept without those identifiers.
Google Ireland Limited processes this data for us. Google may transfer data outside the European Economic Area under the safeguards it describes in its terms. Legal basis: your consent (GDPR Article 6(1)(a)). You can withdraw it at any time with “Cookie settings” at the bottom of every page.
Your choice itself is stored in your browser's local storage under the name buyz-consent-v1, not in a cookie, and is not sent to us. Details are on the cookies page.
When you write to us
If you e-mail us, we use your address and message only to reply and to fix what you reported, and we delete the thread within 12 months unless it is needed for a legal claim. Legal basis: our legitimate interest in answering you.
Links to shops
“Go to shop” takes you to the shop's own website. From then on the shop's privacy notice applies, not this one.
Your rights
You can ask for access to your data, correction, erasure, restriction of processing and data portability, and you can object to processing based on our legitimate interests. Write to the address above. You also have the right to complain to the Data Protection Commission in Ireland (dataprotection.ie).
Changes
When this notice changes, the date at the top of the summary changes with it.