Privacy Policy

Bunna Superstore
Last updated: February 2026

1. Who We Are

Bunna Superstore is a UK-based online retailer of food products, herbs, botanicals, beverages, and household essentials.

Trading name: Bunna Superstore
Business address:
60 Montgomery Street
Birmingham
B11 1DU
United Kingdom

Email: info@bunnastore.com
Telephone: +44 121 819 2022

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Bunna Superstore is the data controller responsible for your personal data.

2. The Personal Data We Collect

We collect personal data when you use our website, place an order, create an account, or subscribe to our newsletter.

2.1 When You Place an Order

We collect:

  • Full name
  • Billing address
  • Shipping address
  • Email address
  • Telephone number
  • Order details
  • Payment information (processed securely by our payment provider)

We do not store full payment card details.

2.2 When You Create an Account

We collect:

  • Name
  • Email address
  • Username
  • Encrypted password
  • Order history

You are responsible for keeping your login details secure.

2.3 When You Subscribe to Our Newsletter

If you opt in to receive marketing communications, we collect:

  • Email address
  • Marketing preferences

Newsletter subscriptions are managed via Mailchimp, our email marketing provider.

You may unsubscribe at any time using the link in our emails.

2.4 Website Usage Data

When you browse our website, we automatically collect certain information, including:

  • IP address
  • Browser type and version
  • Device type
  • Pages visited
  • Time spent on pages
  • Referring website
  • Cookies and similar tracking technologies

This information is collected through:

  • WordPress and WooCommerce
  • Google Analytics

Google Analytics collects pseudonymous usage data to help us understand how visitors interact with our website.

3. How We Use Your Personal Data

We use your personal data to:

  • Process and fulfil orders
  • Deliver products within the United Kingdom
  • Communicate about your orders
  • Provide customer support
  • Manage your account
  • Improve website functionality and user experience
  • Prevent fraud and enhance security
  • Send marketing communications (where you have provided consent)
  • Comply with legal and accounting obligations

We do not sell your personal data.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Article 6(1)(b) – Contract

To process and fulfil orders placed through our website.

Article 6(1)(c) – Legal Obligation

To comply with tax, accounting, and regulatory requirements.

Article 6(1)(f) – Legitimate Interests

To operate and improve our website, prevent fraud, and maintain security.

Article 6(1)(a) – Consent

For marketing communications and newsletter subscriptions.

You may withdraw your consent for marketing at any time.

5. Payments

Payments are processed via WooCommerce Payments, which is powered by Stripe.

Stripe processes payment data securely in accordance with its own privacy policy and security standards. Bunna Superstore does not store full payment card numbers.

6. Email Marketing

We use Mailchimp to manage newsletter subscriptions and marketing emails.

Mailchimp may process your email address and related engagement data (such as email opens and clicks) on our behalf.

You can unsubscribe from marketing emails at any time.

7. Analytics

We use Google Analytics to analyse website usage and improve our services.

Google Analytics collects pseudonymous information such as:

  • IP address
  • Device type
  • Pages visited
  • Session duration

You can manage analytics tracking through your browser settings or Google’s opt-out tools.

8. Cookies

Our website uses cookies and similar technologies to:

  • Enable core website functionality
  • Maintain shopping cart and checkout sessions
  • Remember login sessions
  • Analyse website traffic
  • Improve performance

You can manage or disable cookies via your browser settings.

Where required, we display a cookie consent banner.

9. Data Sharing and Third Parties

We share personal data only where necessary to operate our business and provide our services.

We may share your data with:

  • Payment processor: WooCommerce Payments (Stripe)
  • Email marketing provider: Mailchimp
  • Analytics provider: Google Analytics
  • Delivery providers: to fulfil orders
  • Website hosting and IT service providers
  • Professional advisers and legal authorities where required by law

These third parties process data in accordance with applicable data protection laws.

We do not sell or rent personal data.

10. International Data Transfers

We operate within the United Kingdom.

Some service providers (such as Stripe, Mailchimp, or Google) may process data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK data protection law.

11. Data Retention

We retain personal data only for as long as necessary.

  • Order and transaction records are retained for 6 years in accordance with UK legal requirements.
  • Customer account data is retained until you request deletion.
  • Marketing data is retained until you unsubscribe or withdraw consent.

We may retain limited data where required to comply with legal obligations or resolve disputes.

12. Your Rights

Under UK GDPR, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request erasure of your data
  • Request restriction of processing
  • Object to processing
  • Request data portability
  • Withdraw consent for marketing at any time

To exercise your rights, please contact:

info@bunnastore.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk

13. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • SSL encryption (HTTPS)
  • Secure hosting environment
  • Encrypted passwords
  • Restricted administrative access
  • Regular software updates

However, no system can guarantee absolute security.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The most recent version will always be available on this page, with the updated date clearly displayed.