Privacy Policy
Controller: BUMI Move Ltd. (registered in England & Wales)
Registered office: 85 Great Portland Street, London, England, W1W 7LT
Email: hello@bumimove.com
Company number: 16336853
Last updated: 21.11.2025
1. Information We Collect
We collect and process the following personal data when you use our website and services:
Purchase & account data:
Name, billing/shipping address, email address, phone number, order details.
Payment data:
Payment method details processed by our payment providers (we do not store full card numbers).
Marketing data:
Email address and marketing preferences (where you opt in, or where permitted under PECR soft opt-in).
Technical & usage data:
IP address, device type, browser, pages viewed, and interaction data (collected via our website, e-commerce platforms, and analytics tools).
Support communications:
Messages you send us (e.g., returns, customer queries, complaints).
2. How We Use Your Information & Legal Bases
We use your personal data to:
Process and deliver orders, manage payments, and provide customer service
Legal basis: Contract (Art. 6(1)(b)).
Comply with legal and tax obligations (e.g., accounting and record-keeping)
Legal basis: Legal obligation (Art. 6(1)(c)).
Send marketing about similar products you have purchased (“soft opt-in”)
Legal basis: Legitimate interests (Art. 6(1)(f)).
You can opt out at any time.
Send marketing where you explicitly consented (e.g., newsletter sign-up)
Legal basis: Consent (Art. 6(1)(a)).
Improve our website, prevent fraud, secure our services, and measure performance
Legal basis: Legitimate interests (Art. 6(1)(f)).
You may withdraw consent at any time via the unsubscribe link or by contacting us.
Where we rely on legitimate interests, we balance those interests against your rights and expectations.
3. Cookies & Similar Technologies
We use:
Essential cookies for website functionality.
Non-essential cookies for analytics and marketing (used only with your consent).
You can manage your cookie preferences via our cookie banner or your browser settings.
For full details (types, purposes, and retention), please see our Cookie Policy.
4. Sharing Your Information (Processors / Recipients)
We share personal data with trusted third-party service providers under data-processing agreements, including:
Website & e-commerce platforms (e.g., Wix, Ecwid by Lightspeed) for hosting, checkout, and order management.
Payment processors (e.g., Stripe, PayPal, Apple Pay / Apple Payments) for secure transactions.
Fulfilment and logistics partners for warehousing and delivery.
Analytics, anti-fraud, and security tools to protect our services and improve performance.
We disclose only what is necessary and require all providers to protect your data.
We may also disclose information where required by law or to establish, exercise, or defend legal claims.
5. International Transfers
Your personal data may be processed outside the UK and/or EEA.
Where this occurs, we use appropriate safeguards such as:
UK International Data Transfer Agreement (IDTA)
EU Standard Contractual Clauses (SCCs)
Adequacy decisions, where applicable
6. Data Security
We apply technical and organisational measures appropriate to the risk, including:
Encryption in transit
Access controls and least-privilege access
Secure hosting environments
No system is completely secure, but we and our providers follow industry best practices.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described above, including legal and accounting requirements. Typical retention periods include:
Orders and invoices: up to 6 years (tax and legal requirements)
Customer service communications: up to 24 months after resolution
Marketing data: until you unsubscribe or after 24 months of inactivity
Technical logs: typically 12–24 months, unless required longer for security or fraud investigations
8. Your Rights (UK & EU GDPR)
You have the right to:
Access your personal data
Rectify inaccurate data
Request erasure
Restrict or object to processing
Data portability
Where processing is based on consent, you may withdraw consent at any time.
To exercise your rights, contact hello@bumimove.com
.
We will respond within one month, subject to lawful extensions.
Complaints:
You may lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
We encourage you to contact us first so we can address your concerns.
9. Children
Our website and products are intended for adults.
We do not knowingly collect personal data from children. If you believe a minor has provided personal data, please contact us and we will delete it.
10. Age of Consent
By using this website, you confirm that you are at least the age of majority in your country of residence, or that you have parental or guardian consent.
11. Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for their privacy practices and encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
Updates will be posted on this page with a revised “Last updated” date and, where appropriate, notified in a prominent manner.
13. Contact Us
For questions, requests, or complaints regarding this Privacy Policy, contact:
Email: hello@bumimove.com