Privacy policy

BONZAI Studio is the controller of your personal data. Contact: hello@bonzai.store. Please add your full company name, registered address and (if applicable) your Data Protection Officer here before going live.

• Order data (name, email, shipping address, order contents, payment status) — to perform our contract with you, Art. 6(1)(b) GDPR.
• Payment data — handled directly by our payment providers; we never see or store your full card details.
• Support messages — to answer you, Art. 6(1)(b) and (f) GDPR.
• Technical data (IP address, device and browser info) — to run and secure the site, our legitimate interest, Art. 6(1)(f) GDPR.
• Marketing emails — only if you opt in, Art. 6(1)(a) GDPR. You can unsubscribe at any time.

• Shopify — store, checkout and order management
• Payment providers offered at checkout
• Shipping carriers and 17TRACK for parcel tracking
• Our hosting provider for delivering this website

Where a processor is outside the EEA, transfers are covered by adequacy decisions or the EU Standard Contractual Clauses.

We use strictly necessary cookies and browser local storage to keep your shopping cart between visits — these do not require consent. Any analytics or marketing cookies are only set after you give consent, and you can withdraw it at any time.

Order and invoice data are kept for the retention periods required by tax and commercial law (typically 6–10 years depending on your country). Other data is deleted once the purpose has been fulfilled.

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with your local supervisory authority.

To exercise any right, email hello@bonzai.store. We respond within one month.