Privacy Policy

Last updated: August 29, 2026

At Bundlesaurus ("Bundlesaurus", "we", "us", or "our"), we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit or make a purchase from our online store.

By using our website or purchasing our products, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

Bundlesaurus
Calle Carlet 6
46183, Spain
Email: Bundlesaurus@outlook.com
Phone: +34 614 543 929

Bundlesaurus operates an online store selling baby and family products, including our hooded dinosaur baby-carrier cover.

2. Personal Information We Collect

When you visit our website, place an order, contact us, or otherwise interact with our store, we may collect certain personal information.

Depending on how you use our website, this may include:

• Your name

• Billing and shipping address

• Email address

• Telephone number

• Payment and transaction information

• Order details and purchase history

• Information you provide when contacting customer support

• Device and browser information

• IP address

• Information about how you interact with our website

• Cookie and similar technology information

We only collect information that is reasonably necessary for the purposes described in this Privacy Policy.

3. How We Collect Your Information

We may collect personal information:

• Directly from you when you place an order

• When you create or use an account, if applicable

• When you contact us

• Automatically when you browse our website through cookies and similar technologies

• Through Shopify and payment providers when you complete a transaction

4. How We Use Your Personal Information

We may use your personal information to:

• Process and fulfill your orders

• Process payments

• Arrange shipping and delivery

• Provide order confirmations and shipping updates

• Respond to customer service requests

• Manage returns, refunds, and exchanges

• Prevent fraud, abuse, and unauthorized transactions

• Maintain and improve our website

• Maintain the security of our website and services

• Comply with applicable legal and regulatory requirements

• Resolve disputes and enforce our terms and policies

We do not sell your personal information for money.

We do not use your personal information for email or SMS marketing.

5. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we process your personal information on one or more of the following legal bases:

Performance of a contract: We process information that is necessary to process and fulfill your order, take payment, arrange delivery, and provide related services.

Legal obligations: We may process information where necessary to comply with tax, accounting, consumer protection, fraud prevention, or other legal requirements.

Legitimate interests: We may process information where necessary for legitimate business purposes, such as maintaining website security, preventing fraud, improving our services, and protecting our legal rights, provided that these interests do not override your fundamental rights and freedoms.

Consent: Where consent is legally required, we will request it before processing your information for the relevant purpose. You may withdraw consent at any time.

6. Payments

Payments made through our store may be processed by third-party payment providers, including Shopify Payments, PayPal, Apple Pay, Google Pay, and Shop Pay, depending on the payment method selected at checkout.

We do not generally have access to your complete payment card details.

Payment providers may collect and process your information according to their own privacy policies and terms.

7. Shopify

Our online store is powered by Shopify.

Shopify may collect and process personal information in connection with the operation of our online store, including information necessary to provide shopping, checkout, payment, security, analytics, and related services.

Shopify may process personal information in countries outside your country of residence. Such processing is subject to Shopify's applicable privacy and data protection obligations.

For more information about how Shopify handles personal information, please review Shopify's privacy information and policies.

8. Shipping and Fulfillment

We use third-party suppliers and fulfillment partners to manufacture, prepare, and/or ship orders.

Because our business operates using a dropshipping model, information necessary to fulfill your order may be shared with relevant suppliers, fulfillment partners, shipping providers, and logistics companies.

This information may include:

• Your name

• Shipping address

• Telephone number, where necessary

• Order information

These parties receive only information reasonably necessary to fulfill and deliver your order.

Our products may be shipped from China or other locations depending on the fulfillment process.

9. International Data Transfers

Because Bundlesaurus operates internationally and uses service providers located in different countries, your personal information may be transferred to, stored in, or processed outside Spain, the European Economic Area (EEA), or your country of residence.

Where required by applicable law, we take appropriate safeguards for international transfers of personal information.

These safeguards may include contractual protections, adequacy decisions, or other legally recognized transfer mechanisms.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate properly, maintain security, remember preferences, process transactions, and understand how visitors interact with the website.

Some cookies are necessary for the operation of our store and cannot be disabled through our systems.

Where applicable law requires consent for non-essential cookies or similar technologies, we will request your consent before using them for the relevant purposes.

You may be able to manage or withdraw your cookie preferences through the cookie banner or privacy settings available on our website.

You can also control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

11. Data Sharing

We may disclose personal information to trusted third parties where reasonably necessary to operate our business and provide our services.

These parties may include:

• Shopify

• Payment processors

• Suppliers and fulfillment partners

• Shipping and logistics providers

• Technology and service providers

• Fraud prevention and security providers

• Professional advisers

• Government authorities or law enforcement where legally required

We do not authorize third parties to use your personal information for purposes unrelated to the services they provide to us, except where required or permitted by law.

12. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy.

Certain information may need to be retained for longer periods where required by law, including tax, accounting, consumer protection, fraud prevention, or legal requirements.

When personal information is no longer required, we will take reasonable steps to delete or anonymize it, where appropriate.

13. Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have certain rights regarding your personal information.

These may include the right to:

• Access the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information

• Request restriction of certain processing

• Object to certain processing

• Request portability of your personal information

• Withdraw consent where processing is based on consent

• Lodge a complaint with a competent data protection authority

If you are located in the European Economic Area, you may generally lodge a complaint with your local data protection authority.

In Spain, the relevant supervisory authority is the Spanish Data Protection Agency (AEPD).

To exercise your rights, contact us using the details provided below.

14. California and Other U.S. Privacy Rights

Certain U.S. states provide residents with additional privacy rights.

Where applicable, we will comply with privacy rights required by the laws applicable to our business and the relevant customer.

Depending on the applicable law, these rights may include rights to access, delete, correct, or opt out of certain processing of personal information.

We do not knowingly sell personal information for monetary consideration.

If you would like to submit a privacy request, please contact us at:

Bundlesaurus@outlook.com

We may need to verify your identity before completing certain requests.

15. Children's Privacy

Our website is intended for adults and for individuals purchasing products for babies and children.

We do not knowingly collect personal information directly from children under the age required by applicable law.

If you believe that a child has provided us with personal information, please contact us so that we can take appropriate action.

16. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

17. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, content, or security of third-party websites.

We encourage you to review the privacy policies of any third-party services you use.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, or applicable legal requirements.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically.

19. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your personal information is handled, please contact us:

Bundlesaurus
Calle Carlet 6
46183, Spain
Email: Bundlesaurus@outlook.com
Phone: +34 614 543 929