Privacy Policy

1. Overview & Commitment

BUBBLE BOOM (“we”, “our”, or “us”) is committed to safeguarding your personal data and respecting your individual privacy. This Privacy Policy details the types of personal data we collect through our online storefront (https://bubbleboomstore.com), how we process and store it, and your statutory rights regarding your personal information.

2. Information We Collect

• Contact & Identity Data: Full name, verified email address, and 10-digit Indian phone number collected during registration, guest checkout, or customer service correspondence.
• Fulfillment & Location Data: Delivery street address, city, state, postal PIN code, and delivery notes necessary to route shipments.
• Transaction & Payment Data: Order reference numbers, items purchased, totals, and Cashfree payment confirmation identifiers. We do not store your complete credit/debit card numbers, CVVs, or bank net-banking passwords. All payment transactions are securely handled directly by RBI-licensed payment aggregators (Cashfree Payments).
• Technical & Session Data: IP addresses, browser specifications, and temporary guest cart session identifiers stored in HTTP-only cookies.

3. Purpose of Processing

We process personal data strictly for lawful e-commerce purposes, including:

• Fulfilling customer orders and orchestrating logistics dispatch and return pickups.
• Verifying transaction authenticity and preventing fraudulent payment attempts.
• Sending essential transactional messages (order confirmation, dispatch AWB alerts, invoice receipts).
• Maintaining compliance with Indian tax regulations (GST invoicing) and statutory audit guidelines.

4. Third-Party Disclosures

We do not sell, rent, or trade your personal data to marketing brokers. We share minimal necessary data with vetted infrastructure partners solely to fulfill our services:

• Payment Aggregator: Cashfree Payments India Pvt. Ltd. (PCI-DSS Level 1 compliant payment processing).
• Logistics Carriers: BlueDart, Delhivery, and Shiprocket for parcel transportation and tracking updates.
• Cloud Infrastructure & Database: Supabase and Vercel for encrypted database storage and web delivery.

5. Data Retention & Security

We retain personal transaction records for as long as required under Indian commercial and taxation laws. We employ SSL/TLS 256-bit encryption in transit, row-level database security (RLS) policies, and role-based access control (RBAC) to safeguard customer records against unauthorized disclosure.

6. Your Rights & Grievance Redressal

Under the DPDP Act 2023, you have the right to access, rectify, or request deletion of your personal data. For privacy inquiries or grievances, contact our Grievance Redressal Officer at: