Privacy Policy

NearBuyYou is a trading name of Endler Software Ltd, a company registered in England and Wales (company number 17358444), registered office Unit 12 Gatehead Mill, Delph New Road, OL3 5DB. Endler Software Ltd is the "data controller" for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, contact us at info@nearbuyyou.com.

NearBuyYou is an online marketplace connecting local sellers of food and plants with nearby buyers. This policy explains what personal data we collect from buyers and sellers, why we collect it, how long we keep it, and what rights you have.

It does not cover the practices of sellers themselves. When you buy from a seller, that seller may hold your details (for example, to fulfil your order) as an independent data controller in their own right.

3.1 Everyone who visits the site — you can browse without an account. We ask for location before sign-up so the site is useful immediately.

3.2 Buyers with an account — we do not collect identity documents from buyers. Any identity or anti-money-laundering checks connected to payment are carried out by our payment provider (see Section 5).

3.3 Sellers — in addition to the account data above, we do not routinely collect government-issued ID from sellers. We verify your food business status against public registers and, where needed, directly with your local authority. Identity verification required to pay you is carried out by our payment provider (Section 5). If you upload a document that happens to contain more information than we need (for example, a screenshot showing unrelated details), we will only use what is relevant to verification, and you are welcome to redact the rest before uploading.

We use personal data to:

• Show you local listings and run the Following / Available Locally feeds
• Create and manage accounts, listings, and orders
• Verify seller food business registration, and re-verify it periodically
• Send transactional messages (order confirmations, back-in-stock alerts you requested, verification updates, renewal reminders)
• Prevent fraud, misuse, and unsafe or unlawful listings
• Handle complaints, disputes, and any food safety or regulatory enquiry
• Meet our legal, tax, and accounting obligations
• Improve the service (usually using aggregated or anonymised data)

We do not sell your personal data. We do not use your data for third-party advertising.

Marketing emails (for example, "new sellers near you") are sent only with your consent, and you can unsubscribe at any time.

Payments are processed by Stripe, not by us. When you pay, or when a seller sets up payouts, your card, bank, and identity details go directly to the payment provider.

• We do not store full card numbers or bank details.
• Identity and anti-money-laundering (KYC) checks on sellers are carried out and held by the payment provider, under their own privacy policy at stripe.com.
• We receive only limited information back — for example, whether verification succeeded, and the transaction records we need to run the marketplace and account for our fee.

• Sellers — when you place an order, the seller receives the details they need to fulfil it (your name, order, and collection/delivery details).
• Buyers — a seller's public profile, general location, and listings are visible to buyers. Your registration documents are never shown publicly.
• Service providers — Vercel (hosting), Supabase (database and account sign-in), Resend (transactional emails), Mapbox (the interactive map), and Cloudflare (bot protection on sign-up and log-in), each acting on our instructions under contract. We don't currently use any analytics or advertising service — see our Cookie Policy.
• Payment provider — as described in Section 5.
• Local authorities, the FSA, or other regulators — where we need to verify a registration, or where we are required to cooperate with a food safety or regulatory investigation.
• Legal and professional advisers, insurers, or law enforcement — where necessary to establish, exercise, or defend legal claims, or where we are legally required to disclose.
• A buyer of our business — if NearBuyYou is sold or restructured, data may transfer as part of that, subject to this policy.

We aim to store data within the UK or European Economic Area. Where a provider processes data outside the UK, we ensure appropriate safeguards are in place (such as UK International Data Transfer Agreements or adequacy regulations).

The 6-year periods reflect the limitation period for most civil claims in England and Wales, and the retention required by UK tax law. We keep the minimum needed for each purpose — which is why the underlying documents you upload are deleted well before the short record of what we verified.

Seller registration evidence and other sensitive records are stored with access restricted to staff who need it for verification or dispute handling, with encryption in transit and at rest, and access logging. We review who has admin access periodically.

No system is perfectly secure, but if a breach occurs that is likely to risk your rights, we will notify the ICO and, where required, you, without undue delay.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten"), where we have no overriding legal reason to keep it
• Restrict or object to processing, including profiling and direct marketing
• Portability — receive your data in a machine-readable format
• Withdraw consent at any time, where consent is the basis we rely on

To exercise any of these, contact info@nearbuyyou.com. We will respond within one month.

Note that some data must be retained even after account closure — for example, transaction records for tax purposes, and the short record of a seller's verified registration, which we may need to respond to a food safety enquiry or defend a claim. The documents you originally uploaded are deleted sooner (see Section 8).

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put things right first.

NearBuyYou is not intended for children. Seller accounts require you to be 18 or over. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

We may update this policy from time to time. If changes are significant, we will notify you by email or in-app notice before they take effect. The "last updated" date at the top always reflects the current version.