Privacy policy

Privacy Policy

Effective date: 16 July 2026

BUMZY (“BUMZY”, “we”, “us” or “our”) respects your privacy and is committed to handling your personal data responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose, retain and protect your personal data when you visit https://www.bumzy.in, create a customer account, place an order, contact us, request a return or refund, subscribe to marketing communications, or otherwise interact with our services.

By using our website or providing your personal data, you acknowledge the practices described in this Privacy Policy.

1. Personal Data We Collect

Depending on how you interact with BUMZY, we may collect the following information.

Information You Provide

  • Full name

  • Email address

  • Phone number

  • Shipping and billing addresses

  • Order and transaction details

  • Customer account information

  • Return, cancellation, exchange and refund details

  • UPI ID or bank account details when required to process a COD refund

  • Communications sent to customer support

  • Product reviews, feedback or survey responses

  • Marketing communication preferences

  • Photographs or videos voluntarily submitted for damaged, defective, missing or incorrect product claims

Please do not provide sensitive personal or financial information unless it is reasonably required for a specific transaction or request.

Payment Information

Online payments may be processed by authorised third-party payment providers such as Cashfree Payments or another payment partner displayed at checkout.

BUMZY generally does not directly receive or store complete card numbers, CVV details, UPI PINs or internet-banking passwords. Payment providers process such information under their own privacy and security practices.

For Cash on Delivery orders, the courier or logistics provider may collect the payable amount and share delivery, payment and settlement status with us.

Information Collected Automatically

When you visit or use our website, we and our technology providers may automatically collect:

  • IP address

  • Browser and device information

  • Operating system

  • Cookie identifiers

  • Pages viewed and links clicked

  • Referring website or source

  • Cart and checkout activity

  • Approximate location derived from IP address

  • Website performance and diagnostic information

  • Fraud, security and risk indicators

2. How We Use Personal Data

We may process personal data for the following purposes:

  • Creating and managing customer accounts

  • Processing and confirming orders

  • Collecting and verifying payments

  • Arranging packing, shipping, delivery and COD collection

  • Sending order confirmations and tracking updates

  • Processing cancellations, returns, replacements and refunds

  • Providing customer support

  • Preventing fraudulent, abusive or unauthorised transactions

  • Verifying addresses and COD orders

  • Managing inventory and business records

  • Improving our products, website and customer experience

  • Measuring website and marketing performance

  • Sending marketing communications where consent or another lawful basis applies

  • Complying with tax, accounting, consumer-protection and other legal obligations

  • Establishing, exercising or defending legal claims

Where processing is based on consent, you may withdraw your consent using the available unsubscribe method or by contacting us. Withdrawal does not affect processing already lawfully carried out or information that we must retain for legal purposes.

3. Customer Accounts

Customer accounts are provided through Shopify and can be accessed at:

https://account.bumzy.in

When you access your customer account, Shopify may process your login details, account activity, order history and authentication information to provide and secure the service.

Customer accounts may allow you to view orders, track deliveries, manage information, use eligible store credit, and submit return or cancellation requests.

4. How We Share Personal Data

We may share personal data only when reasonably necessary to operate BUMZY, provide requested services or comply with legal obligations.

Recipients may include:

  • Shopify, which hosts our online store, checkout and customer-account services

  • Payment providers, including Cashfree Payments or other providers selected at checkout

  • Banks and financial institutions involved in payments, settlements, chargebacks or refunds

  • Courier and logistics aggregators, shipping carriers, delivery partners and fulfilment providers

  • Email, SMS and customer-support providers

  • Analytics, advertising and fraud-prevention providers, where enabled

  • Professional advisers, including accountants, auditors, insurers and legal advisers

  • Government, regulatory, law-enforcement or judicial authorities, when disclosure is legally required

  • Business successors, if BUMZY is involved in a lawful merger, restructuring, financing, acquisition or transfer of business assets

We do not sell or rent personal data for monetary consideration.

Third-party providers may process personal data under their own privacy policies. We encourage you to review the policies of payment, courier and other services you choose to use.

5. Shopify

Our store is hosted by Shopify. Shopify processes personal data to provide services including storefront hosting, checkout, customer accounts, order management, fraud prevention and platform security.

Information processed through Shopify may be handled by Shopify and its approved subprocessors in India or other countries in accordance with Shopify’s contractual and privacy arrangements.

You can learn more by reviewing Shopify’s privacy information at:

https://www.shopify.com/legal/privacy

6. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage and similar technologies to:

  • Keep the website and checkout functioning

  • Remember preferences and cart contents

  • Secure accounts and transactions

  • Detect fraud and abuse

  • Measure traffic and website performance

  • Understand how visitors use the website

  • Support advertising and marketing where permitted

Some cookies are necessary for the website to function. Other cookies may depend on your consent or browser preferences.

You can control cookies through your browser or any privacy choices displayed on our website. Blocking necessary cookies may affect cart, checkout, login or other features.

7. Marketing Communications

If you choose to receive promotional emails or messages, we may use your contact information to send product updates, offers and BUMZY news.

You may unsubscribe from marketing emails using the unsubscribe link in the message or by contacting support@bumzy.in.

Withdrawing marketing consent does not prevent us from sending transactional communications such as order confirmations, delivery updates, security alerts, return updates and refund information.

We will not send promotional SMS messages unless the required consent and messaging facilities are in place.

8. Order Verification and Fraud Prevention

We may use order, device, address, payment and previous transaction information to identify suspicious activity and protect BUMZY and its customers.

COD orders may be confirmed through email, phone, OTP, WhatsApp or another reasonable verification method before dispatch.

Orders may be placed on hold or cancelled where there are reasonable indicators of fraud, abuse, invalid contact information, repeated refusal of COD orders or other security risks.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including:

  • Completing orders and providing support

  • Managing returns, refunds, warranties and disputes

  • Maintaining tax, accounting and transaction records

  • Preventing fraud and misuse

  • Meeting legal and regulatory requirements

  • Establishing or defending legal claims

When personal data is no longer required, we may delete, anonymise or securely restrict it, subject to technical and legal limitations.

10. Data Security

We and our service providers use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission, electronic storage system or payment system can be guaranteed to be completely secure. You are responsible for protecting access to your email, phone and customer account.

If you believe your account or personal data has been compromised, contact us promptly at support@bumzy.in.

11. International Data Processing

Shopify and some service providers may process or store personal data outside India.

Where cross-border processing occurs, we will rely on applicable contractual, technical and legal safeguards and comply with restrictions imposed under applicable Indian law.

12. Your Privacy Rights

Subject to applicable law and verification of your identity, you may have the right to:

  • Ask what personal data we process about you

  • Request access to available information about your personal data

  • Request correction of inaccurate or incomplete personal data

  • Request deletion of personal data that is no longer required, subject to legal retention obligations

  • Withdraw consent where processing is based on consent

  • Opt out of marketing communications

  • Raise a grievance regarding our processing of personal data

  • Nominate another person to exercise applicable rights in the event of death or incapacity, where provided by law

To submit a privacy request, email support@bumzy.in with the subject line “Privacy Request”.

We may request reasonable information to verify your identity and protect your account before acting on a request. We will respond within the period required under applicable law.

13. Children’s Privacy

BUMZY is intended for customers who are legally capable of entering into a purchase transaction.

We do not knowingly seek to collect personal data directly from children for targeted advertising or other purposes requiring parental consent. Orders for minors should be placed and managed by a parent or lawful guardian.

If you believe a child has provided personal data without appropriate authorisation, contact support@bumzy.in.

14. Third-Party Links

Our website may contain links to third-party websites, applications or services.

BUMZY is not responsible for the privacy, security or content practices of third parties. Please review their policies before providing personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices or legal requirements.

The revised policy will be published on this page with an updated effective date. Material changes may also be communicated through the website, customer account or available contact details where appropriate.

16. Privacy Questions and Grievances

For privacy questions, requests or grievances, contact:

BUMZY Privacy Contact
Email: support@bumzy.in
Website: https://www.bumzy.in
Customer account: https://account.bumzy.in

Please include your name, order number where relevant, a description of your request and the email address or phone number associated with your account.

We will acknowledge and address privacy grievances within the period required under applicable law.