Policy

Privacy Policy

Last updated: 15 Oct 2025Applies to bonsai.ink and related services

We respect your privacy. This notice explains what we collect, how we use it, who we share it with, and the choices you have. By using our site or services, you agree to this policy.

Data Controller

Bonsai Ink Ltd. is the data controller for personal information processed in connection with our website and services.

Scope

This policy covers visitors, account holders, customers, and prospective customers who interact with bonsai.ink, our emails, and support channels.

Information We Collect

Information you provide

  • Contact details such as name, email, phone number
  • Shipping address and delivery instructions
  • Account credentials and profile details
  • Messages, reviews, support requests, and survey responses

Information from your use of our services

  • Device and log data such as IP address, browser type, pages viewed, referring pages, and timestamps
  • Approximate location derived from IP address
  • Cookie identifiers and similar technologies

Information from third parties

  • Payment status from payment providers
  • Delivery status from logistics partners
  • Marketing and analytics insights

How We Use Information

  • Provide, maintain, and improve the website and services
  • Process orders, payments, and deliveries
  • Send transactional messages such as order confirmations and shipping updates
  • Provide customer support and troubleshoot issues
  • Personalize content and recommendations
  • Conduct analytics, quality assurance, and product development
  • Prevent fraud, enforce policies, and comply with legal obligations
  • Send marketing communications if you opt in; you can unsubscribe at any time

Legal Bases

Where applicable, we rely on the following legal bases to process personal data:

  • Performance of a contract, for example to fulfill your order
  • Legitimate interests, such as site security, fraud prevention, and improving our services
  • Consent, for example for non-essential cookies and marketing
  • Compliance with legal obligations

How We Share Information

We do not sell your personal information. We share it only with:

  • Service providers acting on our behalf and under contract, including hosting, payment processing, logistics, customer support, and analytics
  • Professional advisers, auditors, and insurers
  • Law enforcement or authorities when required by law or to protect rights, property, or safety
  • Business transferees in the event of a merger, acquisition, or sale of assets

Payments

Payments are processed by secure third-party providers such as Paystack. We do not store full card numbers or sensitive payment data on our servers. Payment providers process your data in accordance with their own privacy notices.

Cookies & Tracking

We use cookies and similar technologies to operate the site, remember preferences, measure performance, and personalize content.

  • Strictly necessary cookies are required for core functionality
  • Functional and performance cookies help us improve the experience
  • Marketing cookies are used only with your consent

You can manage cookies in your browser settings. Blocking some cookies may affect site functionality.

Analytics

We use analytics to understand site usage and improve services. Analytics providers receive de-identified or pseudonymous information where possible and act under agreements requiring appropriate safeguards.

International Transfers

Your information may be processed outside your country. When we transfer personal data internationally, we use appropriate safeguards such as contractual data protection clauses and security measures.

Security

We implement administrative, technical, and physical measures designed to protect personal information, including encryption in transit, access controls, backups, and vendor due diligence. No method of transmission or storage is 100% secure; if we identify a breach affecting you, we will notify you as required by law.

Data Retention

We keep personal information only as long as needed for the purposes described, including:

  • Orders and billing records: up to 7 years for tax and accounting
  • Support records: up to 3 years after resolution
  • Marketing preferences: until you opt out or your account is deleted

When data is no longer needed, we delete or irreversibly anonymize it.

Your Privacy Rights

Depending on your region, you may have rights to:

  • Access a copy of your personal information
  • Correct incomplete or inaccurate data
  • Delete your information
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise these rights, email privacy@bonsai.ink. We may request information to verify your identity. If you are in the EU/UK or Kenya, you can also contact your local data protection authority. California residents may have additional rights under the CCPA/CPRA.

Children’s Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children. If you believe a child provided us information, contact us and we will delete it.

Third-Party Links

Our site may link to third-party websites or services that we do not control. Their privacy practices are governed by their own policies.

Changes to this Policy

We may update this policy to reflect changes to our practices or legal requirements. We will post the revised version with a new effective date. Material changes may be communicated by notice on the site or by email.

Contact Us