Privacy policy

Last updated: 8 September 2026

This notice explains what personal data we collect when you use aalaindia.co.uk, why we collect it, who we share it with and what rights you have. It is written under the UK General Data Protection Regulation and the Data Protection Act 2018.

Who we are

The data controller is Britbunch Limited, trading as Aala India, a company registered in England and Wales under company number 16266306. Our registered office is 56 Brook Road, Northfleet, Gravesend DA11 8RG. You can contact us about your data at sales@britbunch.co.uk, or on WhatsApp on +44 7438 535901.

What we collect

Order details: your name, delivery and billing addresses, email address, telephone number if you give one, and what you ordered.
Payment details: handled by Shopify's checkout and the payment method you choose. We never see or store your full card number.
Account details: if you create an account, the email address you sign in with and your order history.
Messages: anything you send us by email, on WhatsApp or through the contact page, and any review you leave.
Marketing preferences: whether you have asked for our emails, and whether you have unsubscribed.
Device and usage data: your IP address, browser, device type and how you move through the website, collected through cookies and similar technologies.

You do not have to give us any personal data. But we cannot take or deliver an order without your name, a delivery address and an email address, and a carrier may need a telephone number to deliver. Everything else, such as an account, a review or signing up for our emails, is optional.

Why we use it, and our lawful basis

To take and deliver your order, handle returns and answer your questions about it. Lawful basis: performing our contract with you (Article 6(1)(b)).
To keep records of orders, invoices and tax, which we must hold for six years. Lawful basis: our legal obligations (Article 6(1)(c)).
To run and protect the website and prevent fraud. Lawful basis: our legitimate interest in a secure, working shop (Article 6(1)(f)). You can object to this at any time.
To understand how the website is used, through analytics cookies. Lawful basis: your consent, given in the cookie banner (Article 6(1)(a)), which you can withdraw at any time.
To invite you to leave a review after a purchase, through Trustpilot. Lawful basis: our legitimate interest in honest feedback about our shop. Email us and we will stop sending invitations to you.
To send you marketing emails. If you sign up through the form on our website or tick the box at checkout, we email you because you have consented (Article 6(1)(a)). Where you have bought from us and were offered a simple way to refuse marketing when you gave us your email address, we may also email you about our own similar products, under regulation 22(3) of the Privacy and Electronic Communications Regulations 2003; our lawful basis is then our legitimate interest in telling existing customers about similar products (Article 6(1)(f)). We only write about our own products, and every email has an unsubscribe link.

Who we share it with

We share personal data only where it is needed to run the shop:

Shopify, which hosts the website, processes orders and payments, sends our order emails and stores our customer records.
The payment method you choose at checkout, such as Shopify Payments, Shop Pay, Apple Pay or Google Pay, which receives the details it needs to take your payment and handles them under its own privacy notice.
WhatsApp, if you message us there. WhatsApp is run by Meta and carries the message under its own privacy notice; we keep what you send us in the same way as an email.
Delivery carriers, who receive your name, delivery address and, where you have given them, your telephone number and email address, so they can deliver your parcel and contact you about the delivery.
Trustpilot, which may receive your name, email address and order reference so it can send you an invitation to review us. If you write a review, Trustpilot publishes it and handles your reviewer data as a separate controller under its own privacy notice.
Service providers we use to run the business, such as our email mailbox provider and any email or analytics service we use to send messages and understand how the website is used.
Professional advisers and authorities, such as any accountants or advisers we use, HM Revenue and Customs, and the police or courts where the law requires it.

We do not sell your personal data.

Transfers outside the UK

Shopify and some of our other providers may store or process personal data outside the UK. Wherever personal data leaves the UK, we make sure one of the safeguards in the UK GDPR applies: an adequacy decision covering the destination country, the UK Extension to the EU–US Data Privacy Framework for certified US companies, or the provider's contractual safeguards under the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Email us if you would like details of the safeguard that applies to a particular provider.

If you ask us to deliver outside the UK, your name, address and contact details are passed to the carrier and, where required, to the customs authority in the destination country. This is necessary to deliver what you ordered (Article 49(1)(b)).

How long we keep it

Order, invoice and tax records, and messages about an order: six years after the end of the financial year the order falls in, as HM Revenue and Customs requires and so we can deal with any claim under the Consumer Rights Act 2015.
Account details: until you close your account or ask us to delete it.
Marketing sign-ups: until you unsubscribe or ask us to stop. We then keep your email address on a suppression list only, so that we do not write to you again.
Enquiries not linked to an order: for as long as needed to deal with the matter.
Website usage: analytics cookies last for the periods set out in the cookie banner.

Your rights

You have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data deleted where there is no good reason for us to keep it;
restrict how we use your data while a query is resolved;
object to processing we carry out on the basis of our legitimate interests;
receive the data you gave us in a machine-readable format;
withdraw your consent at any time where we rely on it, which does not affect anything done before you withdrew it; and
not be subject to a decision based solely on automated processing that significantly affects you.

You can object to direct marketing at any time and we will stop. Use the unsubscribe link in any email, or write to us.

These rights are free to use. Email sales@britbunch.co.uk and we will reply within one month. If a request is complex we may need up to two months longer, and we will tell you within the first month if so. We may ask you to confirm your identity first. Some rights are qualified: we cannot, for example, delete order records we are required to keep.

Complaints

If you are unhappy with how we handle your data, please email sales@britbunch.co.uk with "Data complaint" in the subject line, and we will look into it and tell you what we have done.

You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. If you live in the European Economic Area, you may instead complain to the data protection authority in your own country.

Cookies

Cookies are small files placed on your device. "Similar technologies" means local storage and pixels that do the same job. The cookies on this website are set by Shopify, our platform provider, and fall into two groups.

Strictly necessary cookies make the site work and do not need your consent. They keep your basket together, make the checkout and your account secure, remember your country and currency, and record your cookie choice.

Analytics cookies are set only if you accept them in the banner. They tell us which pages are visited and how visitors arrive, so we can improve the shop. We do not currently use advertising or social-media tracking cookies. If we start to, we will update this notice and the banner will ask you first.

The banner lets you refuse optional cookies as easily as you can accept them, and lists what each one does and how long it lasts. You can change your choice at any time through the "Cookie preferences" link in the footer. Shopify's list of the cookies it sets on stores is at shopify.com/legal/cookies.

Children

The website is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.