Privacy Policy – BumSuit Premium Baby Products

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from https://bumsuit.com (“Site”).
BumSuit is owned and operated by Kamson Healthcare Pvt. Ltd.

This policy is compliant with:

• General Data Protection Regulation (GDPR) – EU Regulation 2016/679

• Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (India)

---

Who We Are

Our website address is: https://bumsuit.com

Information We Collect

When you interact with our website, we may collect the following information:

• Name, email address, phone number

• Billing and shipping address

• Order details and transaction data

• IP address, browser type, and device information

• Any information voluntarily provided through contact forms or comments

We do not knowingly collect personal data from children. Purchases are made by parents or guardians.

---

Comments

When visitors leave comments on the website, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help detect spam.

An anonymized string (hash) generated from your email address may be shared with the Gravatar service to verify profile images. Gravatar’s privacy policy is available at:
https://automattic.com/privacy/

Once approved, your profile picture may be visible publicly with your comment.

---

Media

If you upload images to the website, please avoid uploading images containing embedded location data (EXIF GPS). Visitors can download and extract location data from images hosted on the site.

---

Cookies

We use cookies to enhance your browsing experience.

• Comment cookies store your name and email for one year

• Temporary cookies are used to check browser compatibility

• Login cookies last 2 days

• “Remember Me” cookies last 2 weeks

• Screen preference cookies last 1 year

• Post-edit cookies expire after 1 day

You may disable cookies via your browser settings.

---

Embedded Content from Other Websites

Articles may include embedded content (videos, images, articles, etc.). Embedded content behaves exactly as if you visited the third-party website.

These websites may:

• Collect personal data

• Use cookies

• Apply third-party tracking

• Monitor interactions with embedded content

---

Legal Basis for Processing Data (GDPR)

We process personal data under the following lawful bases:

• Consent provided by the user

• Performance of a contract (order fulfillment)

• Legal obligation under applicable laws

• Legitimate business interests, provided such interests do not override user rights

---

Use of Personal Data

Your personal data is used to:

• Process and fulfill orders

• Provide customer support

• Communicate order and service updates

• Improve website functionality and security

• Comply with legal and regulatory requirements

---

Data Protection Under Indian IT Act

In accordance with the Information Technology Act, 2000 and IT Rules, 2011, we:

• Implement reasonable security practices

• Protect sensitive personal data from unauthorized access

• Collect personal data only for lawful and necessary purposes

• Do not share sensitive personal data without user consent unless required by law

---

Who We Share Your Data With

We do not sell or rent your personal data.

Data may be shared only with:

• Payment gateways

• Logistics and delivery partners

• IT service providers (hosting, analytics, security)

• Government or legal authorities when required by law

If you request a password reset, your IP address will be included in the reset email.

---

Data Retention

• Comments and metadata are stored indefinitely

• Registered user data is retained until the account is deleted

• Order and transaction data is retained as required by law and accounting regulations

---

Your Rights Under GDPR

If you are located in the European Union, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase personal data (“Right to be Forgotten”)

• Restrict or object to data processing

• Data portability

• Withdraw consent at any time

---

Your Rights Under Indian Law

Under Indian law, you have the right to:

• Review personal data provided to us

• Request correction or deletion

• Withdraw consent by written communication

---

Where Your Data Is Sent

Visitor comments may be checked through automated spam detection services.
Data may be stored on secure servers located in India or other jurisdictions with adequate data protection safeguards.

---

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Updates will be posted on this page.

---

Contact Information

For privacy-related concerns, data access, or deletion requests, contact us at:
📧 customercare@kamsoncare.com