Privacy policy

Last Updated: November 24, 2025

This Privacy Policy describes how Bambuá (“Bambuá,” “we,” “us,” or “our”) collects, uses, and discloses personal information when you visit or interact with our website, make a purchase, or otherwise use our services (the “Services”).

Bambuá is operated by Bambuá EU OÜ, a private limited company registered in Tallinn, Estonia.

When we refer to “personal information,” we mean any information that identifies, relates to, or could reasonably be linked to an individual. This Privacy Policy applies to all visitors, users, and customers who access or use the Services.

By visiting or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller and EU Representative

Data Controller

Bambuá EU OÜ
Harju Maakond, Lasnamäe linnaosa, Lõõtsa tn, 5-11
Tallinn, 11415
Estonia.

EU Representative (per Article 27 GDPR)
Niek Volkert
Rua dos Oceanos 4
2655-484 Ericeira
Portugal

You may contact either address for questions related to your personal information.

2. Personal Information We Collect

We collect and process the following categories of personal information, depending on how you interact with the Services:

Contact Information

Name, billing address, shipping address, email address, phone number.

Payment & Transaction Information

Payment method details (processed securely by Shopify or third-party payment providers), payment confirmations, transaction history, order details, returns, and exchanges.

Account Information

Username, password, security questions, preferences, saved items, and settings.

Communications

Information you provide when contacting customer service or interacting with us.

Device & Usage Information

IP address, browser type, device identifiers, cookies, browsing behavior, and activity on the Services.

Automatically Collected Data

Information gathered through cookies, pixels, and tracking technologies, including Meta Pixel, Google Analytics 4, TikTok Pixel, Pinterest Tag, Shopify analytics, and email tracking via Omnisend/Shopify Email.

3. Sources of Personal Information

We collect personal information from:

Direct interactions: account creation, purchases, forms, customer service.
Automated technologies: cookies, pixels, and tracking tools.
Third-party service providers: payment processors, analytics providers, email services.
Dropshipping suppliers: information we share only as needed for your order.
Marketing partners and advertising platforms.

4. How We Use Your Personal Information

We use personal information for the following purposes:

To Provide and Improve the Services

Process and fulfill orders
Handle payments, returns, exchanges, and shipping
Personalize your shopping experience
Provide product recommendations
Maintain and manage your account
Display recently viewed products and saved preferences

For Marketing and Advertising

Send promotional emails (if you opt in)
Display relevant ads on platforms such as Meta, TikTok, Pinterest, and Google
Retargeting and performance measurement

Tracking technologies used for marketing may include:

Meta Pixel
Google Analytics 4
TikTok Pixel
Pinterest Tag
Shopify analytics
Omnisend email tracking

For Security & Fraud Prevention

Authenticate accounts
Detect and prevent fraudulent or malicious activity
Secure transactions and protect our Services

To Communicate With You

Customer support
Order confirmations and notifications
Transaction-related messages

For Legal Compliance

Respond to legal requests
Comply with applicable data protection laws
Enforce our Terms of Service

5. How We Share Personal Information

We may disclose your personal information with the following categories of recipients:

Shopify

The Services are hosted on Shopify, which processes your personal information to operate and improve the platform.
Shopify acts as a service provider and, in certain enhanced features, an independent controller.

Learn more at: https://privacy.shopify.com

Dropshipping Suppliers

We work with multiple fulfillment partners.
We share only the information necessary to fulfill your order, including:

Name
Shipping address
Contact details
Order contents

Suppliers are contractually obligated to handle your data securely.

Service Providers

Including:

Payment processors
Email/SMS marketing providers (Shopify Email, Omnisend)
Shipping and logistics companies
Analytics and advertising vendors
Cloud services

Advertising Partners

Information may be shared with platforms like Meta, TikTok, Google, and Pinterest for personalized advertising and performance measurement, in accordance with their own privacy notices.

Legal, Corporate & Safety Reasons

We may disclose information:

To comply with legal obligations
To protect our rights and the rights of users
In connection with a business sale, merger, or restructuring

6. Children’s Privacy

The Services are not intended for individuals under the age of majority.
We do not knowingly collect or sell personal information of children under 16.

7. Security & Data Retention

We implement reasonable technical and organizational measures to protect your data, though no method is 100% secure.

We retain personal information as long as needed to:

Operate the Services
Fulfill orders
Comply with legal obligations
Resolve disputes

8. Your Rights & Choices

Depending on your location, you may have the right to:

Access personal information
Request deletion
Correct inaccuracies
Request data portability
Object to processing
Restrict processing
Withdraw consent (when applicable)

To exercise your rights, contact us at: support@bambua.eu

If you unsubscribe from promotional emails, we may still send transactional messages.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your own, including the United States.

Where required, transfers are protected by:

Standard Contractual Clauses (SCCs)
EU/UK adequacy decisions
Other lawful safeguards

10. Third-Party Websites

The Services may contain links to third-party sites.
We are not responsible for their content, privacy practices, or security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices.
We will update the “Last Updated” date and provide additional notice when required by law.

12. Contact Us

If you have questions or wish to exercise your privacy rights, contact us:

Email: support@bambua.eu

Bambuá EU OÜ
Harju Maakond, Lasnamäe linnaosa, Lõõtsa tn, 5-11
Tallinn, 11415
Estonia.

EU Representative:
Niek Volkert
Rua dos Oceanos 4
2655-484 Ericeira
Portugal