LIMITED TIME OFFER - 20% off your first order.  SIGN UP HERE

Last updated September 2022.

This privacy policy applies to your use of bndle, our online marketplace, found here: http://www.bndle.com/

We are bndle Ltd, a limited company registered in England and Wales under company number 13521264 with its registered address at 20-22 Wenlock Road, London, N1 7GU (“we” or “us”). This policy explains what personal data we collect about you, why and what your rights are in respect of that data. You should read this policy together with our terms and conditions, available on our website, as both will apply to your use of our website and any purchases you make.

About us

We respect your right to privacy and so we’ll only process personal information about you in line with applicable data protection laws. We comply with the retained EU law version of the General Data Protection Regulation (2016/679) and the Data Protection Act 2018. If any of these laws are replaced or superseded, we’ll comply with that too.

We’re registered with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues ico.org.uk, and our registration number is 13521264 . If you have any concerns about data protection, we would appreciate if you contacted us first so we can discuss these with you before you approach the ICO. You can reach us at [email protected]

What information do we collect?

Personal data, or personal information, is any information about an individual from which that person can be identified. It doesn’t include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you when you use our website. Personal data falls under the following categories:

  • Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
  • Contact Data includes billing address, delivery address, email address and telephone numbers.
  • Financial Data includes bank account and payment card details.
  • Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
  • Usage Data includes information about how you use our website, products, and services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Whenever we collect personal data about you, we must have a legal ground (lawful basis) to do so. We must also observe the principles of data minimisation and only collect as much personal data as necessary and retain that data for no longer than necessary.

CircumstanceType of data Purpose and lawful basis
When you make an enquiry on our website Identity Data – full name

Contact Data – email address, phone number
We ask you to provide the Identity and Contact Data so that we can perform a contract with you (i.e., respond to your enquiry). We rely on your consent to us contacting you.
When you make a purchase over our websiteIdentity Data – full name. We may also collect data regarding your child, including their date of birth and/or expected due date

Contact Data – email address, phone number, billing address, postal address

Transaction Data - details about payments to and from you and other details of products and services you have purchased from us

Marketing and Communications Data – preferences for receiving marketing
We ask you to provide the Identity and Contact Data so that we can perform a contract with you (i.e. arrange for your goods to be sent to you). We ask you for certain identity data, with your consent, so that we can provide our personalised products to you.

We will add you to our mailing list, so that we can email you relevant products or services we think you will be interested in, and the purpose is direct marketing. We only do this with your consent. You can choose to opt out of marketing emails by clicking ‘unsubscribe’ in the footers to our marketing emails, or by contacting us at [email protected]

Please note that all payments are processed by the third party payment provider. We do not collect, nor do we see or store, your Financial Data. When making payment, you choose to provide your Financial Data to that third party. You should therefore read the terms and conditions and privacy policies of our payment provider, as these will apply to your payment.

Storing your personal data

We store your personal data on our servers within the EEA. We may transfer your collected data to storage outside the European Economic Area (EEA) or the UK, or it may be processed outside the EEA or the UK so you can receive the goods ordered, and deal with payment. We also store your data outside the EEA, in Canada. In this case, we take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA or the UK. This means that sometimes we use legally binding contractual terms between us and any third parties we engage with and the use of the EU-approved Model Contractual Arrangements. We are still be responsible for protection of your personal data, even where we have transferred it outside the EEA or the UK.

Data security is of great importance to us, and to protect your data we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure data collected.

Specifically, we use MongoDB Atlas to host personal data collected. MongoDB Atlas uses Amazon Web Services as an upstream provider. You can find more information on these providers’ security measures here:

https://www.mongodb.com/legal/privacy-policy

https://aws.amazon.com/privacy/?nc1=f_pr

We also store some data on Shopify. You can find information on how Shopify complies with their privacy obligations here: https://www.shopify.com/legal/privacy

Disclosing your personal data

We may disclose your information in the following cases:

  • If we want to sell our business, or our company, we can disclose it to the potential buyer
  • We can disclose it to other businesses in our group, as defined in the UK Companies Act 2006
  • We can disclose it if we have a legal obligation to do so, or in order to protect other people's property, safety, or rights
  • We can exchange information with others to protect against fraud or credit risks.

We might contract with third parties/subcontractors to supply our services to you on our behalf. These include cloud services used to send emails and technology providers that assist in providing the website to you. The lawful basis is that it is necessary for our legitimate interest to present relevant content, products, and services to our target audience.

This also includes the sellers of products on our website, who are providing the products directly to you. The lawful basis for this is for us to perform a contract with you.

If any of your personal data is shared with a third party, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law, as described in this policy.

Your rights

When you provide us with personal data, you have certain legal rights, and these include:

  • To request access to, deletion or correction of, your personal data held by us at no cost to you
  • To request that your personal data be transferred to another person (data portability)
  • To be informed of what data processing is taking place
  • To restrict processing
  • To object to processing of your personal data
  • To complain to a supervisory authority.

We regularly review our data retention obligations to ensure we are not retaining data for longer than we’re legally obliged to. If you wish to access, rectify, erase, or transfer your personal data, please contact us at [email protected]

Third party links

This policy only relates to our website. We might have links on/within our website to other websites, and these websites will have their own terms and conditions and privacy policies. We have no control over these websites and so you must read their terms and conditions and privacy policies before making payment.

Changes to this policy

We can update this policy from time to time as laws change or as our website changes. If we make material changes to this policy, and we need your consent to those changes, we will contact you by email to do so.