LEGAL

Privacy Policy

Please read this policy carefully.

Privacy Policy

This policy explains what personal information Bomha collects, why we collect it, and what rights you have. By using our store you agree to this policy.

Who we are

Bomha, (address). Contact: support@bomha.com. For EU and UK data protection law we are the data controller for your personal information.

Information we collect

Contact details — name, email, phone, billing and shipping address.
Order information — items purchased, order value, delivery details, subscription status.
Payment information — processed by our payment providers. We never see or store your full card number.
Device and usage data — IP address, browser, pages viewed, and similar information collected through cookies.
Communications — messages you send us by email.

How we use it

To process, ship and support your orders, and to manage subscriptions.
To provide customer service and respond to your questions.
To send order and shipping notifications.
To send marketing emails, where you have opted in. You may unsubscribe at any time.
To detect and prevent fraud and to keep the store secure.
To meet legal, tax and accounting obligations.

Legal bases (EU / UK)

We process your information to perform our contract with you (orders and subscriptions), on the basis of your consent (marketing and non-essential cookies), for our legitimate interests (fraud prevention, improving the store), and to comply with legal obligations.

Who we share it with

We share personal information only with providers who help us run the store: our ecommerce platform (Shopify), payment processors, shipping carriers, email and subscription tools, and analytics providers. They may only use it to provide their service to us. We do not sell your personal information.

International transfers

We ship to 28 countries and our providers may process data outside your country. Where information leaves the EEA or UK, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

Order and transaction records are kept for as long as required by tax and accounting law. Marketing contact details are kept until you unsubscribe. Support emails are kept for up to 2 years.

Cookies

We use essential cookies to run the cart and checkout, and optional analytics and marketing cookies. You can accept or decline non-essential cookies through the banner on our site, and manage cookies in your browser settings.

Your rights

Depending on where you live, you may request access to your data, correction, deletion, a copy of it, restriction of processing, or object to processing. You may also withdraw consent at any time and opt out of marketing. To exercise any of these, email support@bomha.com. We respond within the period required by law. If you are unhappy with our response, you may complain to your local data protection authority.

Children

Our store is not intended for children and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

Security

We use industry-standard safeguards, and payments are handled by PCI-compliant providers. No system is perfectly secure, so please avoid sending sensitive information by email.