Privacy Policy

Privacy Policy

Bandita Ltd — Privacy Policy

This privacy policy explains how Bandita Ltd, trading as Bandari (playbandari.com), collects, uses and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Bandita Ltd, trading as Bandari 29 High Street, Bruton, Somerset, BA10 0AH Company registration number: 15677533 Contact: hello@playbandari.com


What data we collect

When you use our website or place an order we may collect the following personal data:

  • Your name, email address, postal address and telephone number
  • Payment information (processed securely — we do not store card details)
  • Order history and purchase details
  • Browsing behaviour and preferences on our website (via cookies)
  • Communications you send to us by email or through our website

How we use your data

We use your personal data to:

  • Process and fulfil your orders and send order confirmations
  • Arrange delivery of your purchases
  • Process returns and refunds
  • Respond to your enquiries and provide customer service
  • Send you marketing emails if you have opted in to receive them
  • Improve our website and customer experience
  • Comply with our legal obligations

Our legal basis for processing your data

We process your personal data on the following legal grounds:

  • Contract — to fulfil orders you place with us
  • Legitimate interests — to improve our services and prevent fraud
  • Consent — for marketing emails, which you can withdraw at any time
  • Legal obligation — where required by law

Marketing emails

If you have opted in to receive marketing emails from Bandari, we will send you updates about new collections, promotions and news. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at hello@playbandari.com. We will never sell your data to third parties for marketing purposes.


Cookies

Our website uses cookies to monitor browsing preferences and improve your experience. Cookies are small text files stored on your device. You can choose to accept or decline cookies through your browser settings, though this may affect your experience of our website. For full details please see our Cookie Policy [link].


Who we share your data with

We may share your personal data with trusted third parties where necessary to fulfil your order or operate our business, including:

  • Payment processors (such as Shopify Payments, Stripe or PayPal)
  • Delivery and courier services (such as Royal Mail and international couriers)
  • Email marketing platforms (such as Klaviyo)
  • Website and e-commerce platforms (Shopify)

All third parties are required to handle your data securely and in accordance with UK GDPR. We do not sell your personal data to any third party.


International data transfers

As we use third party services such as Shopify and Klaviyo, your data may be processed outside the UK. Where this occurs we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.


How long we keep your data

We retain your personal data only for as long as necessary:

  • Order and transaction data is kept for 7 years for legal and accounting purposes
  • Marketing data is kept until you unsubscribe or request deletion
  • Customer service communications are kept for 2 years

Your rights

Under UK GDPR you have the following rights regarding your personal data:

  • Right to access — request a copy of the data we hold about you
  • Right to rectification — ask us to correct inaccurate data
  • Right to erasure — ask us to delete your data where there is no legitimate reason to retain it
  • Right to restrict processing — ask us to limit how we use your data
  • Right to data portability — request your data in a portable format
  • Right to object — object to our processing of your data for marketing purposes

To exercise any of these rights please contact us at hello@playbandari.com. We will respond within 30 days.


Data security

We take the security of your personal data seriously. Our website is SSL encrypted and all payment processing is handled by secure, PCI-compliant payment providers. We do not store your full card details.


Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to check this page periodically.


Contact & complaints

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@playbandari.com.

If you are unhappy with how we have handled your data you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

This privacy policy was last updated in June 2026.