DRAFT - have a lawyer review before launch

Privacy policy

Last updated: 23 October 2026

This policy explains what personal data Border Buy ("we", "us") processes when you use our website and app, why we do it, and what rights you have under the EU General Data Protection Regulation (GDPR) and similar laws.

1. Who we are (controller)

Jersey Tandoy
Marikina Philippines
Email: jerseythompson05221998@gmail.com

2. Data we collect

• Search terms and selected countries. When you search, we process the product name you type and the countries you choose. Please do not enter personal information in the search box.
• Hashed IP address for rate limiting. To prevent abuse, we limit how many searches can be made per hour. For this we convert your IP address into a salted, one-way hash. We never store or log your full IP address for this purpose.
• Technical log data. Our hosting provider processes technical data such as IP address, browser type, requested page and time of access in order to deliver the website and keep it secure.
• Advertising cookies and identifiers (only after consent). If you consent, Google AdSense may set cookies or use similar technologies to show ads, measure them and, if you allow it, personalise them.
• Local preferences. We store small preferences in your browser, such as your currency display choice or that you dismissed the install prompt. These stay on your device.
• Emails. If you contact us, we process your email address and the content of your message.

We do not require an account and do not collect your name, address or payment details.

3. Purposes and legal bases

• Providing search results (search terms sent to our price data provider): legitimate interest in operating the service you request (Art. 6(1)(f) GDPR) and performance of our terms of use (Art. 6(1)(b)).
• Rate limiting with hashed IP addresses and security logs: legitimate interest in protecting the service against abuse and keeping costs under control (Art. 6(1)(f)).
• Advertising cookies, ad measurement and personalisation: your consent (Art. 6(1)(a) GDPR and the ePrivacy rules), which you can withdraw at any time.
• Affiliate links: when you click "View at store", the retailer or affiliate network may record the click to attribute a commission. Where this involves cookies on their sites, they are responsible and may ask for your consent.
• Answering your messages: legitimate interest in responding to enquiries (Art. 6(1)(f)).

4. Third parties (processors and independent recipients)

• Vercel Inc. (USA) hosts the website and processes technical log data.
• SerpApi, LLC (USA) receives your search term and the selected country to retrieve shopping results and, when you click "View at store", a Google Shopping product reference to look up the store's product page. It does not receive your IP address from us.
• Google Ireland Ltd. / Google LLC provides Google AdSense and the consent management platform. Google processes data according to your consent choices. See how Google uses data from partner sites.
• Frankfurter API provides exchange rates. Our server calls it without any personal data.
• Affiliate networks and retailers receive information about clicks on affiliate links when you visit their sites.

5. International transfers

Border Buy is operated from the Philippines, and some of our service providers are located in the United States. Personal data may therefore be transferred to and processed in the Philippines and the United States. Where required, transfers are based on an adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or on Standard Contractual Clauses approved by the European Commission, together with additional safeguards where necessary.

6. Retention

• Search results are cached on our servers for up to 24 hours, without any link to you.
• Hashed IP addresses for rate limiting are kept in memory for at most 1 hour, then deleted.
• Hosting logs are kept by Vercel for a limited period according to its retention policy.
• Advertising cookies are kept for the period stated by Google, typically up to 13 months; your consent choice is stored by the consent platform for up to 13 months.
• Emails are kept as long as needed to handle your request, and at most 2 years, unless law requires longer.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal, using the "Cookie settings" link in the footer;
• lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

Because we store very little data and no names, we may not be able to identify you in our systems; we will explain this if it applies to your request.

8. Children

Border Buy is not directed at children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy. The date at the top shows the latest version.

10. Contact

For any privacy question or to exercise your rights, email us at jerseythompson05221998@gmail.com or see our contact page. More about cookies: cookie policy.