Privacy Policy for BlueLink SBS

1. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

• Personal Data: Full Name; Email Address; Phone Number; Username; Profile Picture; Payment Information (processed via Paystack; we do not store full card details); Bank Account Details (for seller payouts and buyer refunds); Content you upload (product descriptions, images, etc.).
• Authentication Data: For email-based registration we use an OTP sent to your email for verification. For OAuth registration via Google we receive information permitted by your Google account settings (typically email, name, and profile picture).
• Usage Data: IP address, browser type and version, pages visited, time and date of visit, time spent on pages, and diagnostic data.

How We Use Your Information

• Create, manage, and secure your account.
• Facilitate the core escrow service: holding buyer funds until delivery is confirmed.
• Generate and manage your unique product bluelink.
• Process payments, refunds, and seller payouts.
• Notify you about transaction status, delivery timelines, and important service updates (via email/SMS).
• Provide customer support and respond to inquiries.
• Send marketing and promotional communications (you may opt-out at any time).
• Detect, prevent, and address technical issues, fraud, or prohibited activities.
• Comply with legal obligations under Nigerian law, including the NDPA.

Legal Basis for Processing (NDPA)

• Performance of a Contract: Processing is necessary to provide the Service and fulfill our Terms of Service with you.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating, securing, and improving our Service, and preventing fraud.
• Consent: For certain non-essential communications (like marketing emails), we rely on your explicit consent, which you can withdraw at any time.
• Legal Obligation: To comply with applicable laws and regulations.

Sharing and Disclosure of Information

• With Third-Party Service Providers (Data Processors) under contractual safeguards: Paystack for payment processing; Google for authentication (OAuth) and analytics; SendPulse for email and SMS notifications; Vercel & Railway for hosting and infrastructure.
• For Legal Reasons: When required by law or in response to valid requests by public authorities.
• To Protect Rights: To protect and defend our rights or property, or the safety of our users and the public.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Data Retention

• We retain Personal Data indefinitely while your account is active and as necessary to provide the Service.
• After account closure or transaction completion we retain data for legitimate business purposes, including legal and tax obligations, dispute resolution, record-keeping, and fraud prevention.
• Data is deleted or anonymized when no longer necessary for the purposes for which it was collected.

Your Data Protection Rights (NDPA)

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Deletion): Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request restriction of processing under certain conditions.
• Right to Data Portability: Request transfer of your data to another organization in a structured format.
• Right to Object: Object to our processing of your personal data.
• To exercise these rights, contact support@bluel.ink with the subject line "Data Rights Request." We respond within one month and may need to verify your identity.

Data Security

• We use commercially acceptable technical and organizational security measures such as SSL/TLS encryption, secure access controls, and periodic reviews. No method of transmission or storage is 100% secure.

International Transfers

• Your information may be transferred to and stored on servers outside Nigeria. Transfers are governed by standard contractual clauses or other safeguards as required by the NDPA.

Children's Privacy

• The Service is not intended for anyone under 13. We do not knowingly collect personal data from children under 13. Contact us if you believe a child has provided data; we will remove it.

Links to Other Sites

• The Service may contain links to other sites (e.g., seller product pages). We are not responsible for the content or privacy practices of third-party sites. Review their privacy policies.

Changes to This Privacy Policy

• We may update this Privacy Policy periodically. Changes are posted on this page with an updated "Last Updated" date. Please review periodically.

Contact Us

• BlueLink SBS
• Journalist Estate, Arepo, Ogun State, Nigeria.
• Email: support@bluel.ink