This policy explains what information Bump and Beyond collects, why, and what you can do about it. We collect as little as we need to deliver your product.
What we collect
- Your details: your name and email address, plus a phone number only if you choose to give one.
- Order details: what you ordered, when, the price paid and the order status.
- Technical data: the essential cookies our store needs to run your checkout and remember your session, and standard server logs (such as IP address and browser type) kept for security.
How we use it
- To deliver your product and give you access to your downloads.
- To send order confirmations and reply when you contact us.
- To keep the records we are required to keep for accounting and tax.
We don’t sell your information or share it for advertising.
Marketing emails (optional)
At checkout there is a separate marketing checkbox, which is unticked by default. We will only send you occasional emails about our products if you tick it. You can withdraw your consent at any time by using the unsubscribe link in any email or by writing to us. Your order is not affected either way.
Payments
Payments for paid products are handled by a third-party payment processor. Your card or bank details go directly to the processor and are never seen or stored by us. We receive only a confirmation that the payment succeeded. The processor handles your payment data under its own privacy policy.
Your sheet stays with you
Our products are spreadsheet files. When you download one, it is saved on your device. If you upload it to Google Drive or use the Open in Google Sheets button, it is stored in your own Google Drive, under your own Google account. We can’t see your copy or anything you type into it, and we have no access to your Drive. Google handles that data under its own privacy policy.
How long we keep it
We keep order records for as long as the law requires for accounting purposes. We delete other data, or make it anonymous, when we no longer need it.
Your rights
Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:
- ask what personal data we hold about you and how we use it
- have inaccurate or incomplete data corrected or updated
- have your data erased, unless we are legally required to keep it
- withdraw any consent you have given, such as for marketing emails
- have a grievance addressed, and nominate someone to exercise these rights on your behalf
To use any of these rights, or to raise a privacy concern, email hello@bumpnbeyond.org. We usually reply within 2 working days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Changes to this policy
If we change this policy, we will update this page and the date below.
Last updated: 6 November 2026.