Privacy Policy

1. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

Information you provide

• Account details — name, email address, mobile number and password when you register.
• Vendor details — shop name, shop email, shop phone, address, trading hours, logo and banner images.
• Order & payment details — items purchased, delivery address and payment information processed by our payment partners.
• Communications — messages, reviews and support requests you send us.

Information collected automatically

• Device and browser type, IP address, and general location.
• Usage data such as pages viewed, products browsed, and actions taken.
• Cookies and similar technologies (see Section 6).

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and verify your identity (for example, via email OTP).
• Process orders, payments, shipping and returns.
• Review and manage vendor applications and listings.
• Provide customer support and respond to your enquiries.
• Send transactional messages and, where you have consented, marketing communications.
• Improve and personalise the Services and prevent fraud and abuse.
• Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share it with:

• Vendors — order details necessary to fulfil your purchase.
• Service providers — payment processors, hosting, email/SMS delivery, and analytics partners who act on our behalf.
• Legal authorities — where required by law or to protect our rights, users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes and enforce our agreements. When information is no longer required, we securely delete or anonymise it.

5. Data Security

We use appropriate technical and organisational measures to protect your personal information, including encryption in transit, hashed passwords and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Services are used, and improve your experience. You can control cookies through your browser settings; disabling some cookies may affect the functionality of the Services.

7. Your Rights & Choices

Depending on your location, you may have the right to:

• Access, correct or delete the personal information we hold about you.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time using the unsubscribe link or by contacting us.

To exercise any of these rights, please contact us using the details in Section 10.

8. Children's Privacy

The Services are not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Where changes are significant, we will provide a more prominent notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or requests regarding this Privacy Policy or your personal information, please contact us at privacy@bimba.example.