Privacy Policy

Bumbazi Limited (“Bumbazi”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website www.bumbazi.com, make a purchase, or otherwise interact with us.

Information We Collect

We may collect the following types of personal data:

Identity Data: name, title.
Contact Data: billing address, delivery address, email address, telephone number.
Transaction Data: payment details and purchase history (processed securely by third-party payment providers; we do not store card details).
Technical Data: IP address, browser type, device information, time zone, and how you interact with our site.
Marketing Data: your preferences for receiving marketing and communications.

How We Use Your Information

We use your personal data to:

Process and deliver your orders.
Communicate with you regarding your purchase.
Manage returns, exchanges, and customer service requests.
Improve our website, products, and services.
Send marketing communications (only if you have opted in).
Comply with legal and regulatory requirements.

Legal Basis for Processing- We process your data on the following lawful grounds under UK GDPR:

Contract – to fulfil your order.
Consent – where you have opted in to marketing.
Legal obligation – to comply with tax, accounting, or legal requirements.
Legitimate interests – to improve our services and protect against fraud.

Sharing Your Information

We only share your personal data with:

Trusted service providers (e.g. payment processors, delivery couriers, IT support).
Analytics and advertising platforms (e.g. Google Analytics, Meta Pixel) to improve performance and marketing.
Legal authorities where required by law.

We never sell your personal data.

Cookies Policy

We may use trusted third-party services such as Google Analytics, Meta (Facebook/Instagram) Pixel, and Shopify cookies for analytics, marketing, and improving our services.

You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

By using our website, you consent to the use of cookies in accordance with this policy. You will also see a cookie banner when you first visit the site, allowing you to accept or manage your preferences.

International Data Transfers

Some service providers may transfer personal data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

Data Retention
We keep your personal data only as long as necessary:

Order and transaction records: 6 years (for legal/tax purposes).
Marketing data: until you unsubscribe or request deletion.

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (“right to be forgotten”).
Restrict or object to processing.
Request transfer of your data to another provider.
Withdraw consent for marketing at any time.

To exercise your rights, contact us at emily@bumbazi.com.

Security

We use appropriate technical and organisational measures to protect your personal data. While no system is completely secure, we take data protection seriously and continuously monitor for risks.

Marketing Communications

You will only receive marketing emails from us if you have opted in. You can unsubscribe at any time by clicking the link in our emails or contacting us directly.

Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website.

Contact Us

If you have questions about this policy or how your data is handled, please contact:
Email: emily@bumbazi.com
Post: Bumbazi Limited, 19–21 Monmouth Street, London, WC2H 9DD, United Kingdom

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.