Privacy Policy

Last updated: June 2026

Bambelou ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who We Are

Business name: Bambelou
Website: bambelou.me
Email: hello@bambelou.me
Phone: 07873 376060
Address: 3 Chester Court, Lomond Grove, London, SE5 7HS, United Kingdom

2. What Information We Collect

When you use our website or place an order, we may collect:

Contact information: name, email address, phone number
Delivery information: shipping address
Payment information: billing address and payment method (we do not store full card numbers — these are handled securely by our payment processor)
Order information: products purchased, order history, and transaction details
Technical data: IP address, browser type, device type, pages visited, and cookies (see Section 7)
Communications: any messages you send us via email or our contact form

3. How We Use Your Information

We use your personal data to:

Process and fulfil your orders
Send order confirmations and shipping updates
Respond to your enquiries and provide customer support
Prevent fraud and maintain the security of our website
Comply with our legal obligations
Improve our website and customer experience (using anonymised analytics)
Send you marketing communications, only if you have opted in (you can unsubscribe at any time)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract: to fulfil orders you have placed with us
Legal obligation: to comply with UK tax, consumer, and data protection law
Legitimate interests: to prevent fraud, improve our services, and maintain website security
Consent: for marketing emails (you may withdraw consent at any time)

5. Sharing Your Information

We do not sell your personal data. We may share it with trusted third parties only where necessary:

Shopify — our e-commerce platform (processes orders and stores data securely)
Payment processors (e.g. Stripe, PayPal) — to securely handle transactions
Delivery couriers — to fulfil and track your order
Email service providers — to send order confirmations and support replies
Google — analytics (anonymised) and Shopping/Ads services
Legal authorities — if required by law or to protect our legal rights

All third-party processors are contractually required to handle your data securely and in compliance with UK GDPR.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy:

Order records are retained for 7 years for UK tax compliance
Marketing data is retained until you unsubscribe
Support enquiry records are retained for 2 years

7. Cookies

We use cookies to:

Keep your shopping cart active
Remember your preferences
Analyse website traffic (via Google Analytics)
Enable personalised advertising (only with your consent)

You can manage your cookie preferences via the cookie banner shown on your first visit, or through your browser settings. Disabling cookies may affect some features of the website.

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct any inaccurate data
Erase your data (the "right to be forgotten"), where applicable
Restrict how we process your data
Object to processing based on legitimate interests
Portability — receive your data in a portable format
Withdraw consent for marketing at any time

To exercise any of these rights, please contact us at hello@bambelou.me. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take the security of your personal data seriously. Our website uses SSL encryption (HTTPS) for all data transmission. Payment processing is handled by PCI-DSS compliant third-party providers. We do not store full payment card details on our systems.

10. Children's Privacy

Our website is intended for use by adults making purchases for children. We do not knowingly collect personal data directly from children under the age of 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: hello@bambelou.me
Phone: 07873 376060 (Mon–Fri, 9am–5pm)
Address: 3 Chester Court, Lomond Grove, London, SE5 7HS, United Kingdom