Privacy Policy

Who is responsible

The controller of any personal data processed through this website is Buy Bought Will Buy Inc., 1000 2nd Ave, Suite 3200, Seattle, WA 98104, USA. Privacy questions and requests go to info@buyboughtwillbuy.com or by post to the address above.

The short version

• There is no account, login, newsletter or purchase on this site, so we ask you for nothing.
• Our web server keeps standard technical logs, as every web server does.
• Topic links take you to an advertising partner, which sets its own cookies and applies its own privacy policy.
• We do not sell personal information.

What we collect

Server logs

Our hosting provider records the request data needed to serve and secure the site: IP address, date and time, the page requested, HTTP status, referring address, and browser and operating system strings. These logs exist for delivery, security and troubleshooting. They are not combined with any other source to build a profile of you.

Information you send us

If you email or telephone us, we hold what you choose to tell us — typically your name, contact details and the substance of your enquiry — for as long as it takes to answer, plus a short period for our records. The contact form on this site does not transmit to a server; it simply confirms the address to write to.

What we do not collect

We do not ask for payment details, dates of birth, identity documents or account credentials, because there is nothing on this site that needs them. We do not knowingly collect information from children under 13.

Cookies and similar technologies

The pages of buyboughtwillbuy.com are static and set no advertising or analytics cookies of their own. When you follow a sponsored topic link you leave our site, and the advertising partner that operates the destination page may set cookies or use similar identifiers to measure the click and to select the offers shown to you. Those technologies are governed by that partner’s privacy policy, not this one, and you can also control them through your browser settings.

Why we process data, and on what basis

• Delivering and securing the site — our legitimate interest in a site that works and resists abuse.
• Answering your enquiry — our legitimate interest in responding, or steps taken at your request.
• Measuring advertising clicks — carried out by our advertising partner, on the legal basis it identifies, with consent where consent is required in your jurisdiction.
• Meeting legal obligations — where retention or disclosure is required by law.

Who data is shared with

Access is limited to the service providers that make the site work: our hosting and content-delivery provider, our email provider, and the advertising partner that operates the sponsored destination pages. Each acts under contract and only for the purpose described. We may also disclose information where we are legally required to, or to establish or defend legal claims. We do not sell personal information, and we do not share it for cross-context behavioural advertising on this site.

International transfers

We are based in the United States and our providers may process data there or elsewhere. Where data originating in the European Economic Area or the United Kingdom is transferred, it is covered by an approved transfer mechanism such as the European Commission’s Standard Contractual Clauses.

How long data is kept

• Server logs: normally up to 30 days, longer only where a security investigation requires it.
• Enquiry correspondence: up to 24 months after the matter is closed.
• Records we must keep by law: for the period the law prescribes.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable format, to withdraw consent where processing relies on consent, and to opt out of any sale or sharing of personal information. Residents of California, Colorado, Connecticut, Utah and Virginia, among others, have equivalent rights under state law, including the right not to be discriminated against for exercising them.

To exercise a right, email info@buyboughtwillbuy.com with enough detail for us to locate the relevant records. We respond within 30 days, or within 45 days where United States state law allows an extension and we tell you why. There is no charge unless a request is manifestly unfounded or excessive. If you are unhappy with our response, you may complain to your local supervisory authority or state attorney general.

Do Not Track and global opt-out signals

This site sets no tracking of its own, so a Do Not Track or Global Privacy Control signal has nothing to switch off here. Where such a signal reaches our advertising partner, that partner is responsible for honouring it in line with applicable law.

Security

The site is served over HTTPS with modern transport encryption, access to our systems is limited to the people who need it, and we apply provider security updates promptly. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We update this policy when the site or the law changes, and the date at the top of the page always shows the current version. Material changes are highlighted on this page for a reasonable period.