Controller and contact details
Urban Sky Web Ltd is the controller of personal information handled through MainBuyer.com. It is registered in England and Wales under company number 17421062. Its registered office is 14/2E Docklands Business Centre, 10–16 Tiller Road, London, E14 8PX.
Privacy enquiries and rights requests can be sent to contact@mainbuyer.com.
Information we collect
If you create an account, MainBuyer processes your display name, email address, password hash, role and account timestamps. It also processes information you include in an enquiry, security and session data, country preferences, country-level location data and routine server logs.
When you follow a retailer or provider link, MainBuyer records the product, offer, retailer, country, referring page, browser user-agent and time. The click ledger deliberately excludes IP addresses. If you consent to analytics, Google Analytics also measures visits and interactions.
Purposes and lawful bases
Account information is processed to provide the account you request and take steps connected with that service. MainBuyer relies on legitimate interests to secure and operate the website, remember or infer the appropriate market, answer business and editorial enquiries, measure outbound retailer interest and protect against misuse. Those interests are balanced against visitor privacy and the data used is limited to what is reasonably necessary.
Optional Google Analytics is processed only with consent. Information may also be retained or disclosed where necessary to meet a legal obligation or establish, exercise or defend legal claims.
Cookies, local storage and country selection
Strictly necessary technologies support sessions, security, account sign-in, country selection and your stored consent choice. The mainbuyer_country cookie lasts for up to one year. MainBuyer uses Google Analytics only after an active choice to accept analytics; rejecting it does not restrict use of the website.
Where the hosting layer supplies a country code derived from an IP address, MainBuyer uses that code to select a market. If it does not, MainBuyer may send the IP address to ipwho.is solely to obtain a country code. MainBuyer does not add that IP address to its own country or click records, and a lookup result may be cached in server memory for up to six hours.
Recipients and international transfers
Information may be processed by service providers that support hosting, security and email; by Google when analytics consent is given; by ipwho.is when fallback country detection is required; and by an affiliate network or retailer after you choose to visit its website. Information may also be disclosed to professional advisers or public authorities where legally required.
Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, MainBuyer relies on an applicable adequacy regulation or approved contractual safeguards and supplementary measures. You may ask for more information about the safeguard used.
Retention
Account information is kept while an account remains active and afterwards only for as long as needed for security, disputes and legal or accounting obligations. Direct correspondence is normally deleted within 24 months after the enquiry is closed unless a longer period is necessary for an ongoing relationship or legal claim. MainBuyer automatically removes outbound-click ledger entries after 24 months.
Country-lookup cache entries expire within six hours and the country cookie within one year. Analytics data is retained according to the configured Google Analytics retention setting. Hosting and security logs are retained according to the provider's operational schedule. These periods are reviewed and data is deleted or anonymised when it is no longer needed.
Your data-protection rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or a copy of your personal information. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.
MainBuyer does not use personal information for solely automated decisions that produce legal or similarly significant effects. If you are dissatisfied, please contact MainBuyer first; you also have the right to complain to the UK Information Commissioner's Office.
Optional analytics
MainBuyer uses Google Analytics only when a visitor actively accepts analytics in the cookie banner. Before acceptance, MainBuyer does not load the Google Analytics tracking script.
If analytics is accepted, Google Analytics may use cookies such as _ga and related _ga_* cookies to measure visits and interactions. MainBuyer disables Google advertising signals and advertising personalisation in its Analytics configuration.
Your analytics choice is stored locally in your browser so MainBuyer can remember it. You can reopen the consent controls at any time using Cookie settings in the footer and change your choice.
Country selection
MainBuyer uses country-level location information to direct visitors to the appropriate market version of the site and show retailers for that country. Where the hosting or CDN provides a country code derived from the visitor's IP address, MainBuyer uses that code directly.
If no country code is supplied by the hosting layer, MainBuyer may send the visitor's IP address to the IPWhois country lookup service at ipwho.is solely to obtain a country code. MainBuyer does not write the IP address to its own country-selection database or click ledger. Country lookup results may be held temporarily in server memory for up to six hours to reduce repeated lookups.
A visitor can choose a different MainBuyer country manually. That choice is stored in the strictly functional mainbuyer_country cookie for up to one year and takes priority over automatic country detection.
Complaints and further information
You can find out more about your rights or make a complaint at the Information Commissioner's Office. MainBuyer will not treat you unfairly for exercising a data-protection right.
Contact: contact@mainbuyer.com