Privacy policy

Last updated: 9 October 2026

This notice explains what personal data we collect when you use aalaindia.co.uk, why we collect it, who we share it with and what rights you have. It is written under the UK General Data Protection Regulation and the Data Protection Act 2018.

Who we are

The data controller is Britbunch Limited, trading as Aala India, a company registered in England and Wales under company number 16266306. Our registered office is Container Unit 9, Denton Wharf, Mark Lane, Gravesend DA12 2PL. You can contact us about your data at sales@britbunch.co.uk, or on WhatsApp on +44 7438 535901.

What we collect

Order details: your name, delivery and billing addresses, email address, telephone number if you give one, and what you ordered.
Payment details: handled by Shopify's checkout and the payment method you choose. We never see or store your full card number.
Account details: if you create an account, the email address you sign in with and your order history.
Messages: anything you send us by email, on WhatsApp or through the contact page, and any review you leave.
Marketing preferences: whether you have asked for our emails, and whether you have unsubscribed.
Device and usage data: your IP address, browser, device type and how you move through the website, collected through cookies and similar technologies. If you accept analytics and marketing cookies, this includes the pages and products you view, what you search for, what you add to your basket, and whether you start a checkout or buy. We share that with Google, Meta and Pinterest, as explained under "Advertising and measurement" below.
Advertising identifiers: if you reach our website from a listing or advert on Google, Facebook, Instagram or Pinterest, the click identifier that platform adds to the link, and the identifiers stored in cookies set by its tag. These are used only by the tools described under "Advertising and measurement".

You do not have to give us any personal data. But we cannot take or deliver an order without your name, a delivery address and an email address, and a carrier may need a telephone number to deliver. Everything else, such as an account, a review or signing up for our emails, is optional.

Why we use it, and our lawful basis

To take and deliver your order, handle returns and answer your questions about it. Lawful basis: performing our contract with you (Article 6(1)(b)).
To keep records of orders, invoices and tax, which we must hold for six years. Lawful basis: our legal obligations (Article 6(1)(c)).
To run and protect the website and prevent fraud. Lawful basis: our legitimate interest in a secure, working shop (Article 6(1)(f)). You can object to this at any time.
To understand how the website is used, through analytics cookies set by Shopify and by the Google tag. Lawful basis: your consent, given in the cookie banner (Article 6(1)(a)), which you can withdraw at any time.
To measure our product listings and adverts, and to show our adverts to people likely to be interested, on Google, Facebook, Instagram and Pinterest, using the tools described under "Advertising and measurement". Lawful basis: your consent, given in the cookie banner (Article 6(1)(a)). You can withdraw it at any time through "Cookie preferences" in the footer of the website.
To invite you to leave a review after a purchase, through Trustpilot. Lawful basis: our legitimate interest in honest feedback about our shop. Email us and we will stop sending invitations to you.
To send you marketing emails. If you sign up through the form on our website or choose to receive our emails at checkout, we email you because you have consented (Article 6(1)(a)). Where you have bought from us and were offered a simple way to refuse marketing when you gave us your email address, we may also email you about our own similar products, under regulation 22(3) of the Privacy and Electronic Communications Regulations 2003; our lawful basis is then our legitimate interest in telling existing customers about similar products (Article 6(1)(f)). We only write about our own products, and every email has an unsubscribe link. Our marketing emails are sent through Shopify and contain a small image and tracked links that tell us whether an email was opened and which links were clicked; we use this only to see which emails are useful. To stop it, turn off images in your email app or unsubscribe.

Who we share it with

We share personal data only where it is needed to run the shop:

Shopify, which hosts the website, processes orders and payments, sends our order emails and stores our customer records. Shopify processes your data when you visit and buy from our shop, and uses some of it for its own purposes, as explained in the Shopify Consumer Privacy Policy. If you decline optional cookies in our banner, Shopify says it does not use your device data from our shop for non-essential purposes, including advertising. You can also make requests to Shopify directly at privacy.shopify.com.
The payment method you choose at checkout, such as Shopify Payments, Shop Pay, Apple Pay or Google Pay, which receives the details it needs to take your payment and handles them under its own privacy notice.
Google, only if you accept analytics or marketing cookies: the website activity and details described under "Advertising and measurement".
Meta (Meta Platforms, Inc., which runs Facebook and Instagram), only if you accept analytics and marketing cookies: the website activity and details described under "Advertising and measurement".
Pinterest (Pinterest Europe Ltd. and Pinterest, Inc.), only if you accept analytics and marketing cookies: the website activity and details described under "Advertising and measurement".
WhatsApp, if you message us there. WhatsApp is run by Meta and carries the message under its own privacy notice; we keep what you send us in the same way as an email.
Delivery carriers, who receive your name, delivery address and, where you have given them, your telephone number and email address, so they can deliver your parcel and contact you about the delivery.
Trustpilot, which may receive your name, email address and order reference so it can send you an invitation to review us. If you write a review, Trustpilot publishes it and handles your reviewer data as a separate controller under its own privacy notice.
Service providers we use to run the business, such as our email mailbox provider and any email or analytics service we use to send messages and understand how the website is used.
Professional advisers and authorities, such as any accountants or advisers we use, HM Revenue and Customs, and the police or courts where the law requires it.

We do not sell your personal data. We do share website activity with Google, Meta and Pinterest for measurement and advertising, as described below, and only if you accept it.

Advertising and measurement

We list our products on Google and may advertise on Google, Facebook, Instagram and Pinterest. To see whether those listings and adverts lead to visits and sales, and to show our adverts to people likely to be interested, our website uses three tools, each connected through one of Shopify's sales channels:

The Google tag, through Shopify's Google & YouTube channel. It runs only if you accept analytics or marketing cookies, and it tells Google which of the two you accepted. It sends information to Google Merchant Center, the service that shows our products on Google, and it sets cookies named _ga and _ga_WQX8LJW45J.
The Meta pixel, through Shopify's Facebook & Instagram channel. It runs only if you accept analytics and marketing cookies, and it sets a cookie named _fbp. Shopify also sends the same events to Meta from its own servers, through Meta's Conversions API.
The Pinterest tag, through Shopify's Pinterest channel. It runs only if you accept analytics and marketing cookies, and it sets a cookie named _pin_unauth.

What is sent. All three receive the pages and products you view, whether you buy (with the order value, currency and product codes), your IP address, browser and device details, and identifiers from their cookies and from the link you clicked. Meta and Pinterest also receive the collections you view, what you search for, what you add to your basket, and when you start a checkout or add payment details. When you start a checkout or buy, these tools also receive contact details you have given us: your email address, telephone number, name and address, and, for Meta and Pinterest, your customer number with us. On pages you view while signed in to an account with us, the Google tag also receives your email address, telephone number, name and address, and the Pinterest tag your email address, telephone number, name and customer number. The Google tag may also pick up an email address, telephone number or postal address that you type into a form on our website. The Meta pixel and the Pinterest tag turn contact details into a scrambled code (a hash) in your browser before sending them. The platform can still match that code to an account on its service, so we treat it as personal data.

Why. To see whether our listings and adverts lead to visits and sales; to show our adverts to people who have visited our website, and to stop showing them to people who have already bought; and to let these platforms find other people likely to be interested in what we sell. We do not ask any of them to target or exclude anyone by ethnicity, religion, health or any other sensitive characteristic.

Only with your consent. If you decline, or later switch these cookies off, the Google tag, the Meta pixel and the Pinterest tag do not run in your browser. Lawful basis: your consent (Article 6(1)(a)). Our cookie banner is shown to visitors in the United Kingdom; see "Cookies" below for visits from other countries.

Who is responsible. For collecting this information on our website through the Meta pixel and sending it to Meta, Britbunch Limited and Meta Platforms, Inc. (1601 Willow Road, Menlo Park, CA 94025, USA) are joint controllers under Article 26 of the UK GDPR, on the terms in Meta's Business Tools Terms and its UK Controller Addendum. You can exercise your rights about this with us or with Meta. Once Meta has the information, it uses it as an independent controller under its own privacy policy: facebook.com/privacy/policy. How Google uses information from websites that use its services is explained at policies.google.com/technologies/partner-sites. Pinterest Europe Ltd. and Pinterest, Inc. handle the information they receive under Pinterest's privacy policy: policy.pinterest.com/en-gb/privacy-policy.

Customer lists. We do not upload customers' email addresses or telephone numbers to Google, Meta or Pinterest to build advertising audiences. If we ever start, we will update this notice first and tell you how to object.

Your choices. You can withdraw consent at any time through "Cookie preferences" in the footer of the website. You can also control the adverts you see in your Google, Facebook, Instagram and Pinterest settings.

Transfers outside the UK

Shopify and some of our other providers may store or process personal data outside the UK. Wherever personal data leaves the UK, we make sure one of the safeguards in the UK GDPR applies: an adequacy decision covering the destination country, the UK Extension to the EU–US Data Privacy Framework for certified US companies, or the provider's contractual safeguards under the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Email us if you would like details of the safeguard that applies to a particular provider.

Google, Meta and Pinterest may process the information described under "Advertising and measurement" in the United States. The safeguard each relies on, as stated in its own terms:

Google: Google LLC complies with the UK Extension to the EU–US Data Privacy Framework (policies.google.com/privacy/frameworks).
Meta: for information sent to Meta Platforms, Inc. through its business tools, Meta's UK Data Transfer Addendum applies the International Data Transfer Addendum to the EU Standard Contractual Clauses, issued by the Information Commissioner (facebook.com/legal/terms/UK_Data_Transfer_Addendum).
Pinterest: for personal data of UK residents transferred to the United States, Pinterest relies on the UK Extension to the EU–US Data Privacy Framework, which Pinterest, Inc. has certified to (policy.pinterest.com/en-gb/privacy-policy).

If you ask us to deliver outside the UK, your name, address and contact details are passed to the carrier and, where required, to the customs authority in the destination country. This is necessary to deliver what you ordered (Article 49(1)(b)).

How long we keep it

Order, invoice and tax records, and messages about an order: six years after the end of the financial year the order falls in, as HM Revenue and Customs requires and so we can deal with any claim under the Consumer Rights Act 2015.
Account details: until you close your account or ask us to delete it.
Marketing sign-ups: until you unsubscribe or ask us to stop. We then keep your email address on a suppression list only, so that we do not write to you again.
Enquiries not linked to an order: for as long as needed to deal with the matter.
Cookies: for the periods set by each provider (see the pages linked under "Cookies" below).
Website activity sent to Meta: Meta's Business Tools Terms allow it to keep this for up to two years.
Website activity sent to Google and Pinterest: for the periods set out in their own privacy policies, linked above.

Your rights

You have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data deleted where there is no good reason for us to keep it;
restrict how we use your data while a query is resolved;
object to processing we carry out on the basis of our legitimate interests;
receive the data you gave us in a machine-readable format;
withdraw your consent at any time where we rely on it, which does not affect anything done before you withdrew it; and
not be subject to a decision based solely on automated processing that significantly affects you.

You can object to direct marketing at any time and we will stop. Use the unsubscribe link in any email, or write to us.

These rights are free to use. Email sales@britbunch.co.uk and we will reply within one month. If a request is complex we may need up to two months longer, and we will tell you within the first month if so. We may ask you to confirm your identity first. Some rights are qualified: we cannot, for example, delete order records we are required to keep.

Complaints

If you are unhappy with how we handle your data, please email sales@britbunch.co.uk with "Data complaint" in the subject line, and we will look into it and tell you what we have done.

You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. If you live in the European Economic Area, you may instead complain to the data protection authority in your own country.

Cookies

Cookies are small files placed on your device. "Similar technologies" means local storage, pixels and tags that do the same job.

When you visit from the UK, our cookie banner asks for your choice before any optional cookies are used. It lets you refuse them as easily as you can accept them, and lets you choose by category under "Manage preferences". You can change your choice at any time through the "Cookie preferences" link in the footer of the website.

If you visit from outside the UK, you will not currently see the banner, and the analytics and marketing tools described here may run on your visit. You can block them in your browser settings, and you can email us to ask about any data we hold.

Required cookies are set by Shopify, our platform provider. They make the site work and do not need your consent: they keep your basket together, make the checkout and your account secure, remember your country and currency, and record your cookie choice.

Analytics cookies are set by Shopify, and by the Google tag, only if you accept them. They tell us which pages are visited and how visitors arrive, so we can improve the shop.

Marketing cookies and tags come from Google (the Google tag), Meta (the Meta pixel, for Facebook and Instagram) and Pinterest (the Pinterest tag). They let us measure our listings and adverts and show our adverts to people who have visited our website, as explained under "Advertising and measurement". The Google tag runs if you accept analytics or marketing cookies. The Meta pixel and the Pinterest tag run only if you accept both analytics and marketing cookies.

Personalisation: if you accept it, our website keeps a list of the last four products you viewed in your browser's local storage, so it can suggest them in our search box. The list stays on your device.

Each provider explains its own cookies: Shopify, Google, Meta and Pinterest.

Children

The website is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.