Privacy Policy

Within the scope of the Services, your personal data is processed by Bu Gider, registered in the United Kingdom, acting as data controller.

We only collect data that is necessary to provide the Services, on the basis of a clear purpose:

Data you provide directly

• Account details: name, email address, password (stored encrypted).
• Billing details: billing name, tax/country information. Card data is never stored by us; payments are handled by PCI-DSS-compliant payment providers.
• Store integration data: API keys and order/product data for the marketplace stores you connect.
• Communication content: support tickets, forms and messages you send us.

Data we collect automatically

• Usage data: pages visited, features used, session durations.
• Device and connection data: IP address, browser type, operating system, language preference.
• Cookies and similar technologies (details in the Cookie Policy).

We process your personal data for the following legitimate purposes:

• Create your account, verify your identity and deliver the Services.
• Run product research, tracking, analytics and reporting features.
• Take payments, handle billing and manage subscriptions.
• Provide support and respond to your requests.
• Improve the Services, maintain security and prevent abuse.
• Send you product updates and marketing messages where you have opted in.
• Comply with our legal obligations.

We process your data only where we have a valid legal basis:

• Performance of a contract: to deliver the Services to you (GDPR Art. 6(1)(b)).
• Consent: for marketing messages and optional cookies (GDPR Art. 6(1)(a)).
• Legitimate interests: security, fraud prevention and improving the Services (GDPR Art. 6(1)(f)).
• Legal obligation: statutory retention and reporting requirements (GDPR Art. 6(1)(c)).

We never sell your personal data. We share it only in the following limited circumstances and only as much as needed:

• Service providers: contracted partners for cloud hosting, payments, email and analytics (acting as data processors).
• Marketplace APIs: solely to exchange data with the stores you have connected.
• Legal authorities: with official bodies where required by applicable law.
• Corporate transactions: in a merger or acquisition, with the protections in this policy preserved.

We keep your data only for as long as the purpose of collection requires and within the bounds of statutory retention obligations. When you close your account, your personal data is deleted or anonymized within a reasonable period; data we are legally required to keep is securely retained for the relevant period.

As a data subject, you have the following rights:

• Learn whether your data is being processed and access it.
• Request correction of inaccurate or incomplete data.
• Request erasure or destruction of your data.
• Request restriction of processing and portability of your data.
• Object to processing and withdraw your consent at any time.
• Lodge a complaint with a supervisory authority (the relevant data protection authority / KVKK Authority).

To exercise these rights, contact us at info@bugider.com; we respond to requests within 30 days at the latest.

We apply industry-standard measures to protect your data:

• Encryption in transit and at rest (TLS / AES).
• Role-based access control and the principle of least privilege.
• Regular backups, monitoring and security audits.
• Breach notification processes in line with regulation.

Our Services are not directed at anyone under the age of 18. If we become aware that we have collected data belonging to someone under this age, we delete it as soon as possible.

For any questions, requests or applications regarding this Privacy Policy, contact us at info@bugider.com.