PRIVACY POLICY
Introduction
At Bun and Bali (BunandBali.com), we care profoundly about your privacy and the security of your personal data. We appreciate your trust in us when you choose to do business with us, and we are committed to honoring that trust by employing appropriate safeguards, honoring your rights, and acting transparently.
This Privacy Policy sets out the basis on which we collect, process, store, and protect your personal information in compliance with the Information Technology Act, 2000 (India), the General Data Protection Regulation (EU-GDPR), and other applicable data protection legislation across jurisdictions in which we operate.
We may collect the following types of information from you when you use our website or services:
Personal Information:
● Name (first and last)
● Email address
● Phone number
● Billing and delivery address
● Date of birth (with consent)
● National identification number or business registration number (for invoicing or export compliance)
Financial Information:
● Credit card or bank details (processed through secured payments gateway — we do not store this directly)
● Transactions and payments made to us
● Invoice details or payments related to your order
Technical Information:
● IP address
● Browser type and version
● Time zone setting
● Device information (model, operating system)
● Access logs and activity on our website (pages visited, products viewed, search inquiries)
Other Information (with consent):
● Customer reviews or testimonials
● Communication preferences (SMS, phone, email)
● Product customization details (such as initials for personalization)
2 How We Use Your Information
We process your personal data for the following purposes:
To Provide Our Services:
● Filling your orders and delivering products
● Providing customer service and support
● Communicating delivery status and order-related messages
● Facilitating payments and financial transactions safely
To Improve Our Website and Services:
● Analyzing usage patterns and preferences
● Detecting and addressing technical issues or weaknesses
● Updating and optimizing functionality for a better customer experience
To Market Our Services (with consent):
● Providing promotions, offers, and news about our products
● Designing loyalty programs or special rewards
● Providing tailored product recommendations
● Measuring marketing campaigns’ performance
To Combat Fraud and Ensure Security:
● Verifying your identity and securing your account
Preventing suspicious transactions or unlawful activity
● Combatting cyberthreats and phishing attacks
To Perform Our Legal Obligations:
● Completing financial audits and account reconciliation
● Providing information to regulators, regulators’ inquiries, or law enforcement, if applicable
● Staying compliant with export controls, taxes, or customs legislation
4 Legal Basis for Processing
We process your data with your consent, to perform our contractual obligations, or when we have a lawful basis or legitimate interest (such as fraud prevention or delivering services safely).
5 Disclosure of Your Information
We may share your information with: Service Providers and Partners:
● Shipping companies (DHL, FedEx)
● Payment processors
● Customer service providers
● Cloud service providers (with data processing agreements)
Competent Authorities:
Law enforcement or regulators when we are legally obligated
● Tax authorities or financial regulators in case of financial transactions
● To protect and defend our rights or respond to legal processes (such as a court order or subpoena)
Business Transfers:
● In the event we sell or transfer a portion of our business, your data may be included in the transfer, under appropriate safeguards.
6 Security Measures
We implement technical and organizational measures designed to protect your data from:
● Unauthorized access
● Theft or disclosure
● Loss or destruction
● Alteration or unlawful processing
We use SSL (Safe Sockets Layer), PCI-DSS compliant payments, and firewalls alongside internal controls and training for all our team members.
7 International Transfers
Some of your data may be processed or stored in servers located outside your country of residence (for example, in data centers within the EU or USA). We will always transfer data with appropriate safeguards in place, honoring
applicable legislation (such as Standard Contractual Clauses under GDPR).
8 Your Rights
You have the following rights with regard to your personal data:
Access: You may request a copy of your data.
Correction: You may ask us to correct inaccuracies or omissions.
Erasure: You may request deletion under certain conditions.
Restriction: You may prohibit or restrict the processing of your data in some cases.
Data Portability: You may transfer your data to another service provider in a standard format.
Withdrawal of Consent: If you previously gave consent (for promotions or marketing), you may withdraw it at any time.
Complaint: If you believe we are processing your data in violation of applicable legislation, you may lodge a complaint with your country’s data protection authority.
9 Children's Privacy
We do not knowingly collect or process data from children under the age of 18 without parental consent. If you believe we may have inadvertently collected information from a minor, please contact us immediately, and we will promptly delete it.
10 Changes to Our Privacy Policy
We may update this Privacy Policy from time to time in response to:
Legislative or regulatory updates
● Improvement of our services
● Security and operational practices
We will notify you of significant policy updates by email or through a notification on our website.
11 Contact Information
If you have any questions or concerns about this Privacy Policy or the way we handle your data, please feel free to contact us at:
● Email: Info@bunandbali.com
● Website: [https://bunandbali.com]
Bun and Bali is committed to honoring your rights and securing your data while delivering the finest, most trustworthy jewelry and service.