Privacy Policy

Bubalaa (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you visit or make a purchase from bubalaa.co.uk.

Data Controller

Bubalaa is the data controller responsible for your personal data.

Trading Name: Bubalaa

Karen Nelson trading as Bubalaa
Bedford, United Kingdom

Email: hello@bubalaa.co.uk

If you have any questions about this Privacy Policy or your personal data, please contact us using the details above.

Collected Personal Data

We may collect and process the following personal data:

Full name
Billing and delivery address
Email address
Telephone number
Order details and purchase history
Payment confirmation information (payments are processed securely by third-party providers; we do not store full card details)
Information submitted through contact forms
Email marketing preferences (where you opt in)
Technical data such as IP address, browser type and pages visited (via cookies)

We do not intentionally collect sensitive personal data.

How We Use Your Data

We use your personal data to:

To process and fulfil orders
Communicate regarding purchases or enquiries
Provide customer support
Send marketing communications where you have given consent
Improve our website and services
Comply with legal and tax obligations

Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract – to process and deliver your order
Legal obligation – for accounting and tax compliance
Legitimate interests – to improve our services and prevent fraud
Consent – for email marketing and non-essential cookies

you may withdraw consent at any time where consent is the lawful basis.

Payments

Payments are processed securely by third-party payment providers such as [Stripe / PayPal / insert provider]. We do not store full payment card details on our systems.

Marketing Communications

If you opt in to receive marketing emails, we may contact you with updates, new product launches and offers. You can unsubscribe at any time using the link in our emails.

We do not sell or share your personal data for third-party marketing.

Cookies

Our website uses cookies to:

Enable essential site functionality
Analyse website performance
Improve user experience

Non-essential cookies are only used where you provide consent. You may manage or withdraw cookie consent at any time via our cookie banner.

For more details, please see our Cookie Policy.

Data Sharing

We may share your data with trusted third parties who help us operate our business, including:

Payment processors
Website hosting providers
Email marketing platforms
Delivery and courier services
Accountants and legal advisors

All third parties are required to respect the security of your personal data.

Data Retention

We retain personal data only as long as necessary:

Order and transaction records are kept for a minimum of 6 years to comply with UK tax law (HMRC requirements)
Marketing data is retained until you withdraw consent
Contact enquiries are retained only as long as necessary to resolve your request

Your Rights

Under UK data protection law, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request deletion of your data (where legally permitted)
Object to processing
Request restriction of processing
Request transfer of your data
Withdraw consent at any time

To exercise your rights, please contact us at hello@bubalaa.co.uk

If you are unhappy with how we handle your data, you may lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

Data Security

We implement appropriate security measures to protect your personal data. However, no online transmission is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.