Privacy
Policy

Last updated: April 26, 2026

‍

Bambush is a UK-based platform celebrating Black culture, creativity and joy through the lens of making home. This website is operated by Keisha Maye (IG@kei.maye). If you have any questions about how your data is handled, you can contact Kei at kei@bambush.co.uk.

‍

What This Policy Covers

‍

This privacy policy explains what personal information we collect when you visit or make a purchase through the Bambush website, why we collect it, how we use it, and what rights you have over your data. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

‍

What Information is Collected

‍

When you visit the Bambush website, we may collect the following information:

‍

When you make a purchase:

• Your name
• Your email address
• Your payment information (processed securely through Paypal and/or Stripe)

‍

We do not store your full payment card details. All payment processing is handled by Paypal and/or Stripe, which operate their own privacy and security policies.

‍

When you browse the site:

• We may collect technical data such as your IP address, browser type, device type and pages visited through cookies or similar technologies. See the Cookies section below for more detail.

‍

Why Your Information is Collected

‍

We collect and use your personal data for the following reasons:

• To process and fulfil your purchases, including sending order confirmations and delivering digital files
• To keep a record of transactions for accounting and legal purposes
• To respond to any queries or issues you raise with us
• To add you to our mailing list if you have opted in
• ‍

The legal basis for processing your data is:

• Contract: Where we need your information to fulfil a purchase you have made
• Legitimate interest: Where we need to keep records of transactions or respond to communications
• Consent: Where you have opted in to our mailing list. You can withdraw this consent at any time

‍

How Your Data is Stored

‍

Your data is stored securely through the platforms we use to run the Bambush website. These include:

• Webflow: Hosts our website and processes ecommerce transactions. Webflow stores data on servers in the United States. You can read their privacy policy at webflow.com/legal/privacy.
• Stripe: Handles payment processing. Stripe stores data on servers in the United States. You can read their privacy policy at stripe.com/privacy.
• Paypal: As above. You can read their privacy policy here.

‍

Where your data is transferred outside of the UK, it is protected by appropriate safeguards in line with UK GDPR requirements.

‍

How Long Your Data is Kept

‍

We retain your personal data only for as long as necessary:

• Purchase records: Retained for up to 6 years for accounting and legal purposes, in line with HMRC requirements
• Technical browsing data: Retained in line with the retention policies of the platforms we use

‍

Cookies

‍

Cookies are small text files stored on your device when you visit a website. The Bambush website may use cookies for the following purposes:

• Essential cookies: Required for the website and checkout to function properly
• Analytics cookies: If enabled, these help us understand how visitors use the site so we can improve it

‍

We will update this section with full details of any analytics tools used. You can manage your cookie preferences through your browser settings at any time.

‍

Sharing Your Data

‍

We do not sell, rent or share your personal data with third parties for marketing purposes. Your data is only shared with the service providers listed above (Webflow and Stripe) to the extent necessary to operate the website and process your purchases.

We may also share your data if required to do so by law or in response to a valid legal request.

‍

Your Rights

‍

Under UK GDPR, you have the following rights over your personal data:

‍

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct any inaccurate data
• Right to erasure: You can ask us to delete your personal data, subject to any legal obligations we have to retain it
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a portable format
• Right to object: You can object to us processing your data in certain circumstances
• Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time

‍

To exercise any of these rights, please contact us at kei@bambush.co.uk. I will respond within 3 working days.

‍

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

‍

Third Party Links

‍

The Bambush website may contain links to external websites, including artist shops and print services. We are not responsible for the privacy practices of these external sites and encourage you to read their privacy policies.

‍

Changes to This Policy

‍

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to check back periodically.

‍

Contact

‍

If you have any questions about this privacy policy or how your data is handled, please contact Kei at kei@bambush.co.uk.

‍