Privacy Policy

Last updated 7 September 2026. What we collect, why we collect it, who else sees it, and how to make us delete it.

What we collect

• Your account: name, email address, password (stored hashed, never in readable form).
• Your orders: delivery address, phone and WhatsApp number, what you asked for, the occasion, notes you send us, and the messages between you and your shopper.
• Payments: we record that a payment succeeded and for how much. We never see or store your card or bank account number — Stripe handles that directly.
• Sign-in via Google or Facebook, if you use it: your name, email address and profile picture from that provider. Nothing else, and we never receive your password.
• Basic technical data your browser sends when you visit.

Why we collect it

To shop for you and deliver your order; to quote you and take payment; to message you about your order; to declare goods to customs, which legally requires your name and address; and to keep the records tax and accounting rules require.

Who else sees it

Only those who need it to complete your order:

• Our shoppers and packers in India — what they need to buy and pack your order.
• Couriers and customs authorities — your name, address and phone, plus a description and value of the goods. This is a legal requirement for international shipping and cannot be avoided.
• Stripe, for payment processing.
• Meta (WhatsApp), if you choose to receive order updates on WhatsApp.
• Our hosting and infrastructure providers, who store the data on our behalf.

We do not sell your personal data, and we do not share it for anyone else's advertising.

Advertising and measurement

We use Google Analytics to count visits and see which pages are read. It sets cookies in your browser. We look at it in aggregate — how many people, which pages — not to build a profile of you.

If and when we advertise, this site may also carry the Meta pixel, which tells us whether an ad reached someone. You can opt out through your Meta ad preferences, or by blocking third-party cookies in your browser. We do not run advertising based on the contents of your orders or your messages with us, and we never share those with an ad platform.

Where your data goes

BazaarBuddy is operated from the United States and our sourcing operation is in India, so your order details are necessarily transferred to and processed in both countries. If you are in the UK or EU, that is a transfer outside your jurisdiction, made because it is necessary to perform the service you asked for.

How long we keep it

Order and payment records are kept for as long as tax and accounting rules require. Account details are kept while your account is open. Message threads are kept while they may still matter to an order or a claim, then deleted.

Your rights

Wherever you live, you can ask us to:

• send you a copy of the data we hold about you;
• correct anything wrong;
• delete your account and personal data, except records we are legally required to retain;
• stop messaging you on WhatsApp or by email.

If you are in the UK or EU, these are your rights under UK/EU GDPR. If you are in California, the CCPA gives you equivalent rights, including the right not to be discriminated against for exercising them. Ask us in your order thread or by email and we will action it.

Security

The site is served over HTTPS. Passwords are hashed. Payment details go straight to Stripe and never touch our servers. Access to customer data is limited to the people fulfilling orders.

Children

BazaarBuddy is not intended for children under 16 and we do not knowingly collect their data.

Contact

For any privacy request, message us in your order thread or by email. Tell us what you want and we will confirm when it is done.