Website: https://nomadbunny.com
Effective Date: [FILL IN — effective date]
Last Updated: [FILL IN — last updated date]
Business Jurisdiction: [FILL IN — exact legal business location/jurisdiction]
Privacy Contact: [FILL IN — privacy/support email address]
Publishing note: Replace every `[FILL IN — ...]` placeholder before publishing. This draft should be reviewed by a qualified privacy lawyer for the laws applicable to NomadBunny and its customers.
1. Introduction
This Privacy Policy explains how NomadBunny ("NomadBunny," "we," "us," or "our") collects, uses, stores, shares, and protects personal information when you visit https://nomadbunny.com, create an account, place an order, contact customer support, or otherwise interact with our online store.
By using the Website, you acknowledge that you have read this Privacy Policy. Where consent is legally required, we will request it separately.
2. Personal Data We Collect
Depending on how you use the Website, we may collect the following categories of personal data:
2.1 Identity and Contact Information
This may include your name, email address, telephone number where provided, and other contact information needed to communicate with you or fulfill an order.
2.2 Shipping and Billing Information
We may collect shipping and billing-related information, such as your delivery address, billing address, postal code, city, state/province, country, and related order information.
2.3 Account Information
If you create an account, we may collect account credentials and authentication-related information. Account authentication and related customer account data are supported by Supabase.
We do not intentionally store your account password in plain text. Authentication credentials are handled through the applicable authentication system and security controls of the service used for authentication.
2.4 Order and Transaction Information
We may collect order history, purchased Products, order numbers, shipping status, refund/return information, customer communications, and related transaction records.
2.5 Support and Communications
If you contact us, we may retain information contained in your messages, including your contact details and information necessary to resolve your request.
2.6 Technical and Usage Information
Depending on the Website configuration, we may collect technical information such as IP address, browser type, device information, approximate location derived from technical information, pages visited, and basic Website activity.
The exact categories depend on the cookies, analytics, hosting, security, and other technical services currently enabled on the Website. See Section 8 below and update it before publishing to match the live Website.
3. Payment Card Information
NomadBunny uses Stripe to process online payments.
NomadBunny does not directly store full payment card numbers, CVV/security codes, or complete payment-card credentials on our own servers. Payment details are entered into or transmitted through Stripe's payment systems and are handled by Stripe subject to Stripe's own security and privacy practices.
For more information, see Stripe's privacy documentation:
Stripe Privacy Center: https://stripe.com/privacy
The Website may still receive limited payment-related information, such as payment status, transaction identifiers, card brand, or the last few digits where provided by Stripe, for order management and reconciliation.
4. How We Use Personal Data
We may use personal data to:
- process, confirm, and fulfill orders;
- create and manage customer accounts;
- authenticate users and maintain account security;
- communicate about orders, deliveries, returns, refunds, and customer support;
- provide and improve the Website, Products, and customer experience;
- detect, investigate, and prevent fraud, abuse, unauthorized transactions, security incidents, and other misuse;
- maintain business, accounting, tax, legal, and operational records;
- send marketing or promotional communications where you have opted in or where otherwise permitted by applicable law; and
- comply with legal obligations and respond to lawful requests.
5. Legal Bases for Processing
Where a privacy law requires us to identify a legal basis for processing, we may rely on the following bases, depending on the circumstances:
5.1 Contract Performance
We process personal data when necessary to provide the Products and services you request, process your order, manage your account, arrange delivery, or fulfill other contractual obligations.
5.2 Consent
We may rely on your consent for activities such as optional marketing emails or certain non-essential cookies and analytics where consent is legally required.
You may withdraw consent at any time, although withdrawal does not affect processing that was already lawful before withdrawal.
5.3 Legitimate Interests
Where permitted by law, we may process information for legitimate business interests, such as fraud prevention, Website security, service improvement, operational administration, and protection of our legal rights, provided those interests are not overridden by applicable privacy rights.
5.4 Legal Obligations
We may process or retain information when necessary to comply with applicable law, accounting requirements, tax obligations, legal claims, court orders, or other lawful requirements.
6. How We Share Personal Data
We may share personal data only as reasonably necessary to operate NomadBunny, provide requested services, fulfill orders, protect our systems, or comply with law.
6.1 Stripe
We share relevant payment and order information with Stripe to process payments, manage payment status, reduce payment fraud, and support transaction operations.
6.2 Supabase
We use Supabase for customer account-related services, authentication, and data storage. Customer information such as account information, order history, and addresses may be stored or processed through Supabase infrastructure according to the configuration used by NomadBunny.
6.3 Shipping and Delivery Providers
We may share the information required to fulfill an order with shipping carriers, logistics providers, fulfillment partners, or other delivery services used by NomadBunny.
6.4 Other Service Providers
We may use other vendors needed to operate the Website, such as hosting, security, email, customer-support, analytics, accounting, or infrastructure providers. These providers are expected to process data only as needed to provide services to NomadBunny, subject to applicable contractual and legal requirements.
6.5 Legal and Safety Disclosures
We may disclose information when reasonably necessary to comply with law, respond to lawful requests, enforce our agreements, investigate suspected fraud or abuse, protect the rights or safety of NomadBunny or others, or defend legal claims.
7. We Do Not Sell Personal Data
NomadBunny does not sell personal data to third parties.
We may still use service providers that process information on our behalf, as described above. Depending on applicable law, certain forms of advertising or analytics sharing may be treated as a "sale," "sharing," or similar regulated activity even where money is not exchanged. The Website configuration should therefore be reviewed and this section updated if advertising or data-sharing practices change.
8. Cookies and Analytics
Current configuration: [FILL IN — e.g. "Yes, basic site analytics" / "No third-party tracking currently used" / exact tools used]
NomadBunny may use cookies or similar technologies for essential Website functionality, authentication, security, preferences, shopping-cart functions, analytics, and other legitimate Website operations.
Where legally required, non-essential cookies or analytics will be used only after the required consent is obtained.
Before publishing this policy, update this section to identify the actual tools in use, such as analytics, advertising, error-monitoring, or session tools, and ensure the Website's cookie controls match this disclosure.
9. Data Storage and Security
Customer data may be stored using Supabase and other technology providers necessary to operate the Website.
We use reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no internet transmission or storage system can be guaranteed to be completely secure.
Access to sensitive systems should be limited to authorized personnel or service providers who need it to perform their functions.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, maintaining customer accounts, handling returns and disputes, preventing fraud, maintaining business records, and complying with legal, tax, accounting, or regulatory obligations.
Default retention period: [FILL IN — e.g. "Customer account data is retained while the account remains active and for [X] years after closure where needed for legal/business records; order records are retained for [X] years"]
Different categories of information may be retained for different periods depending on the purpose and applicable law.
When information is no longer needed, we may delete, anonymize, or securely dispose of it, subject to legal or operational retention requirements.
11. Your Privacy Rights
Depending on your location and applicable privacy laws, you may have rights regarding your personal data, including rights to:
- request access to personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of data in certain circumstances;
- request restriction of processing in certain circumstances;
- object to certain processing;
- request portability of certain data;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a relevant data-protection or privacy authority where applicable.
These rights are subject to applicable legal exceptions and may differ depending on your location.
Where GDPR or similar regional laws apply, additional rights and obligations may apply. If NomadBunny offers Products or services to residents of jurisdictions with specific privacy regimes, this Privacy Policy should be supplemented as necessary to satisfy those laws.
12. How to Submit a Privacy Request
To submit a privacy-related request, contact:
Email: [FILL IN — privacy/support email address]
Please include enough information for us to understand and respond to your request. We may take reasonable steps to verify the identity or authority of the requester where required to protect customer information.
We will respond within the timeframe required by applicable law.
13. International Data Transfers
Because NomadBunny may use global service providers, personal data may be processed or stored in countries other than the country where you live.
Where applicable law requires safeguards for international transfers, NomadBunny will use legally recognized mechanisms or other appropriate safeguards.
Transfer details to complete before publishing: [FILL IN — identify applicable transfer mechanism or state that no cross-border transfer occurs, based on your actual setup]
14. Children's Privacy
The Website is not directed at children under 18, and NomadBunny does not knowingly collect personal data from children under 18 for purposes that are prohibited by applicable law.
Where a minor is permitted to use the Website or make a purchase with parental or legal-guardian consent, the parent or guardian remains responsible for supervising that use to the extent required by applicable law.
If you believe a child has provided personal data inappropriately, contact us using the details in Section 12 so we can review the situation and take appropriate action.
15. Third-Party Websites and Services
The Website may contain links to third-party websites or use third-party services. Those third parties operate under their own terms and privacy policies.
NomadBunny is not responsible for the privacy practices of third-party websites or services outside our reasonable control. You should review their privacy notices before providing information to them.
16. Policy Changes
We may update this Privacy Policy when our practices, technology, service providers, or legal requirements change.
When we make material changes, we may provide notice through the Website, by email, or by another reasonable method where required by law. The updated policy will display a new "Last Updated" date.
17. Contact Us
For privacy questions, requests, or concerns, contact:
NomadBunny
Privacy Email: [FILL IN — privacy/support email address]
Website: https://nomadbunny.com
Business Address: [FILL IN — legal business address, if required]
18. Related Policies
- Terms and Conditions: [FILL IN — URL/path]
- Return Policy: [FILL IN — URL/path]
- Shipping Policy: [FILL IN — URL/path if applicable]