Privacy Policy
Last updated: 5 October 2026
This Privacy Policy explains what personal information Bunny collects when you use our website, how we use it, and the choices you have. We handle your information in line with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
1. What we collect
- Account and order details: your name, email address, mobile number, delivery address, order history, order notes, and reviews you write.
- Login security: your password (stored only as a one-way hash, never in plain text) and one-time email codes.
- Technical data: your IP address (used for security and to limit abuse), and small pieces of data saved in your browser, such as your shopping bag and login session.
- Payments: payments are handled by our payment gateway. We do not receive or store your card number, CVV or UPI PIN.
2. How we use it
- To process, deliver and support your orders, and to send order updates and confirmation emails.
- To create and secure your account, including sending verification and password-reset codes.
- To prevent fraud and misuse, and to meet legal, tax and accounting obligations.
- To improve our products and website.
We do not sell your personal information, and we do not send marketing messages unless you have agreed to receive them.
3. Who we share it with
Only with service providers who need it to serve you, and only for that purpose:
- our payment gateway (to take online payments),
- courier and logistics partners (name, address and phone, to deliver your parcel),
- our email and hosting providers, and
- government or legal authorities where the law requires it.
4. Cookies, browser storage and fonts
We use a session cookie to keep you logged in securely, and your browser’s local storage to remember your shopping bag. We do not use advertising or tracking cookies. Our pages load fonts from Google Fonts, so Google may receive your IP address when a page loads.
5. How long we keep it
We keep order and invoice records for as long as needed for legal, tax and accounting purposes. Other information is kept while your account is active and deleted or anonymised when it is no longer needed.
6. Security
The site uses HTTPS, passwords are hashed, access to our admin tools is restricted, and requests are checked and rate-limited. No system is completely secure, but we work to protect your information.
7. Your rights
You can ask us to give you a copy of your information, correct it, or delete your account and the information we are not required to keep, and you can withdraw consent you have given. You can update most details yourself under My account, or email support@bunnyshop.site.
8. Children
Our site is not meant for children under 18. If you believe a child has given us personal information, please tell us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when.
10. Contact and grievances
For privacy questions or complaints, contact Bunny at support@bunnyshop.site. Our address is Mihijam.