Privacy Policy

Privacy Policy
Controller: BUMI Move Ltd (registered in England & Wales)
Registered office: 85 Great Portland Street, London, England, W1W 7LT
Email: hello@bumimove.com

Last updated: 18.09.2025



1. Information We Collect

We collect and process the following personal data when you use our website and services:

Purchase & account data: name, billing/shipping address, email, phone, order details.

Payment data: payment method details processed by our payment providers (we do not store full card numbers).

Marketing data: email address and preferences (where you opt in, or where permitted under PECR soft opt-in).

Technical & usage data: IP address, device, browser, pages viewed, interaction data (collected via our website/e-commerce platforms and analytics).

Support communications: messages you send us (e.g., returns, queries).


2. How We Use Your Information & Legal Bases

We use your data to:

Process and deliver orders; manage payments; provide customer service — Contract (Art. 6(1)(b)).

Comply with legal and tax obligations (e.g., record-keeping) — Legal obligation (Art. 6(1)(c)).

Send you marketing about similar products where you purchased from us (“soft opt-in”) — Legitimate interests (Art. 6(1)(f)), and you can opt out at any time.

Send you marketing where you explicitly consented (newsletter sign-up) — Consent (Art. 6(1)(a)).

Improve our site, prevent fraud, secure our services, measure performance — Legitimate interests (Art. 6(1)(f)).

You can withdraw consent at any time (unsubscribe link or email us). Where we rely on legitimate interests, we balance those interests against your rights and expectations.


3. Cookies & Similar Technologies

We use essential cookies for site functionality and non-essential cookies for analytics/marketing. Non-essential cookies are used only with your consent. You can manage preferences via our cookie banner or browser settings.
See our Cookie Policy for full details (types, purposes, retention).


4. Sharing Your Information (Processors/Recipients)

We share personal data with trusted service providers to run our business, under data processing agreements:

Website & e-commerce platforms (e.g., Wix, Ecwid by Lightspeed) for hosting, checkout and order management.

Payment processors (e.g., Stripe, PayPal, Apple Pay / Apple Payments) for secure transactions.

Fulfilment & logistics partners for warehousing and delivery.

Analytics/anti-fraud/security tools to keep the site secure and improve performance.

We only disclose what is necessary and require providers to protect your data. We may also disclose information if required by law or to defend legal claims.


5. International Transfers

Your data may be processed outside the UK/EEA. Where this occurs, we use appropriate safeguards such as UK International Data Transfer Agreement (IDTA), EU Standard Contractual Clauses (SCCs) and/or rely on adequacy decisions, as applicable.


6. Data Security

We use technical and organisational measures appropriate to the risk (encryption in transit, access controls, least-privilege access, secure hosting). While no method is 100% secure, we and our providers follow industry best practices.


7. How Long We Keep Your Data (Retention)

We keep personal data only as long as necessary for the purposes above, including to meet legal/accounting requirements. Typical periods:

Orders & invoices: up to 6 years (tax/legal).

Customer service messages: up to 24 months after resolution.

Marketing data: until you unsubscribe or after 24 months of inactivity.

Technical logs: typically 12–24 months, unless needed longer for security/fraud investigations.


8. Your Rights (UK & EU GDPR)

You have the right to access, rectify, erase, restrict or object to processing, and to data portability. Where we rely on consent, you can withdraw consent at any time.
To exercise your rights, contact hello@bumimove.com. We will respond within one month (subject to extensions permitted by law).

Complaints: You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113. We’d appreciate the chance to resolve your concerns first.


9. Children

Our products and site are intended for adults. We do not knowingly collect data relating to children. If you believe a minor has provided data, please contact us so we can delete it.


10. Age of Consent

By using this site, you confirm you are at least the age of majority in your country of residence, or have parental/guardian consent.


11. Third-Party Links

Our site may link to third-party sites. Their privacy practices are their own; please review their privacy policies.


12. Changes to This Policy

We may update this Policy from time to time. We will post changes here with an updated date and, where appropriate, notify you in a prominent way.


13. Contact Us

Questions, requests or complaints: hello@bumimove.com.