Privacy Policy

1. Who we are

Bandara LLP operates the Bandara shopping service at bandara.shop. For privacy questions, email privacy@bandarallp.com. The registered address is 303B, Nityanand Complex, 247A, Bund Garden Road, Pune 411001.

2. Information we collect

The information depends on the way you use Bandara and may include:

• name, email address, phone number and date of birth;
• delivery, billing and saved address details;
• account login, security and preference information;
• cart, wishlist, order, invoice, return, refund and Bandara Credit records;
• payment status, gateway identifiers, bank-transfer or cheque references and reconciliation information;
• B2B business details, pricing, MOQ, credit limits, payment terms and account correspondence;
• support tickets, messages, attachments, complaints and grievance communications;
• device, browser, IP address, session, security and technical logs reasonably generated by the website.

Date of birth is used for birthday-related Bandara Credit or account benefits and reasonable account validation. It is not used for general advertising.

3. How information is collected

We receive information directly when you register, sign in, enter an address, place or pay for an order, submit B2B information, raise a ticket, make a complaint or contact us. We also receive transaction status and technical information from service providers used to complete or secure those activities.

Bandara may derive geographic coordinates, serviceability and delivery distance from an address entered by the customer. This does not mean that Bandara continuously tracks the customer’s device location.

4. Why we use personal data

Bandara uses personal data to:

• create, authenticate and secure accounts;
• display customer-specific B2B prices, MOQ, credit and payment terms;
• process orders, payments, invoices, refunds and account adjustments;
• verify serviceability, calculate delivery fees and complete delivery;
• operate Bandara Credit and apply eligible birthday or purchase benefits;
• provide support, investigate complaints and prevent fraud or misuse;
• maintain business, tax, food-safety, accounting and audit records;
• operate, troubleshoot and protect the website and related systems;
• comply with applicable law and lawful requests.

Bandara does not currently use Google Analytics, Meta Pixel or another general advertising analytics tool and does not currently send general marketing through email, SMS or WhatsApp. Necessary service communications about verification, security, orders, delivery, payment, refunds and support may still be sent.

5. Payments, maps and address-based location

Payments

Eligible online payments are handled through Razorpay. Bandara receives payment status, transaction references and reconciliation information needed to confirm an order, issue a refund or investigate a problem. Complete card credentials are entered into the payment provider’s secure flow rather than being intentionally stored by Bandara.

Maps and delivery distance

Google mapping or distance services may process an entered delivery address or derived coordinates to confirm serviceability, estimate distance, calculate delivery charges and assist delivery. Assigned delivery personnel may receive the recipient name, address, phone number and instructions reasonably needed for the assigned delivery.

6. When information is shared

Bandara shares personal data only to the extent reasonably necessary for the purpose involved, including with:

• Razorpay and relevant banks or payment networks for payments, reconciliation and refunds;
• Google services used for maps, distance calculation, translation and reCAPTCHA;
• IBM or other authorised infrastructure, hosting and backup providers;
• couriers, cold-chain carriers and assigned delivery personnel;
• professional advisers, auditors, insurers or authorities where necessary or legally required;
• a successor organisation in a lawful restructuring, merger or transfer, subject to appropriate protections.

Service providers are expected to use information for the contracted or legally permitted purpose and to apply appropriate safeguards. Bandara does not sell customer personal data.

7. Cookies and security tools

Bandara uses necessary cookies or similar storage for sessions, login, cart continuity, security, preferences and core website operation. Google reCAPTCHA may process device and interaction signals to distinguish legitimate use from automated abuse. Google Translate may process page text or language selections when translation is used.

Blocking necessary cookies may prevent login, cart, checkout or account features from working correctly. Any future non-essential analytics or advertising technology should be described here before it is activated.

8. How long information is kept

Bandara keeps personal data only for as long as reasonably necessary for the purpose collected. Active account and operational records may be reviewed after one financial year, but invoices, orders, tax, accounting, food-safety, fraud-prevention, dispute and audit records may be retained for the longer period required by applicable law or while a proceeding or claim remains open.

When data is no longer required, Bandara will delete, anonymise or securely isolate it in accordance with applicable retention and backup processes.

9. Security

Bandara applies reasonable administrative, technical and organisational controls designed to protect personal data, including access restriction, authentication, logging, secure payment-provider flows, backups and system maintenance. No online system can be guaranteed absolutely secure.

Customers should use a unique password or PIN, protect OTPs, sign out on shared devices and report suspected unauthorised access. Bandara will not ask for a complete password or PIN through an unsolicited message.

10. Your choices and requests

Subject to applicable law and necessary verification, you may request access to or correction of account information, raise a concern about processing, or request account deletion through the inbuilt support ticket system or by contacting support.

An account-deletion request does not require Bandara to erase records that must be kept for tax, accounting, food-safety, fraud prevention, legal claims or another lawful obligation. Where deletion is not immediately possible, access may be restricted and the reason explained.

Privacy enquiries may be sent to privacy@bandarallp.com. General order support remains available at support@bandarallp.com.

11. Children

Bandara’s shopping service is intended for people legally capable of placing an order. A person under 18 should use it only through, or with the involvement of, a parent or legal guardian. A guardian who believes a child provided personal data without appropriate involvement should contact the privacy email.

12. Changes, complaints and contact

Bandara may update this policy to reflect changes in services, providers, security practices or applicable law. The current version and effective date will appear on this page, with reasonable notice of material changes where appropriate or required.

For order and service questions, see Help & FAQs. Contractual terms are in Terms & Policies.