This Privacy Policy explains how Bunny Bash collects, uses and protects your personal data when you visit bunnybash.in, enquire with us, book a call or work with us on an experience. It is written to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
1. Who we are
Bunny Bash Events And Rentals (“Bunny Bash”, “we”, “us”) is a sole proprietorship based at 22/1 Doddiah Layout, Kalkere Main Road, Opposite Krishna Haven Apartment, Horamavu, Bengaluru, Karnataka 560043. For the personal data described here, we are the Data Fiduciary: we decide why and how it is used.
2. What we collect
- Contact details: your name, mobile or WhatsApp number and email address.
- Event details: the occasion, date, city or venue, guest count, budget range, preferences and any notes you share, including the pieces you choose on Shape Your Experience.
- Appointment details: the date, time and mode of any consultation call you book.
- Conversations: messages, calls and emails you exchange with us on WhatsApp, phone or email.
- Billing details: billing name, address and GST number (for businesses), and records of payments. Payments are processed by banks or payment partners. We do not store your card details.
- Website usage: pages visited, device and browser type, approximate location and similar information collected through cookies and analytics tools (see section 9).
- Photos and videos: pictures of the setups we create at your event. People appear in them only as described in section 4.
We only ask for what we need. If you choose not to share something, we may not be able to prepare a proposal or deliver that part of the service.
3. Why we use it
- To reply to your enquiry, understand your brief and prepare ideas, estimates and proposals.
- To schedule and hold consultation calls, and to send confirmations and reminders.
- To plan, coordinate and deliver your experience, including sharing the necessary details with our team, vendors and artists.
- To raise invoices, receive payments and meet our tax, accounting and other legal obligations.
- To keep our website secure and understand how it is used, so we can improve it.
- To send you ideas, offers or updates about our work, only if you have agreed to receive them.
We process your personal data on the basis of the consent you give when you contact us, submit a form or book a call, and for certain legitimate uses permitted by law (for example, when you voluntarily share your details to receive a service, or to comply with the law).
4. Photos of our work
We photograph and film the setups and experiences we design, and may use them on our website and social media as part of our portfolio. We focus on the design, not on guests. We will not publish identifiable photos of you, your guests or any child without your permission, and you can ask us to remove any image that shows you at any time.
5. Your consent and how to withdraw it
Where we rely on your consent, you can withdraw it at any time by writing to connect@bunnybash.in or messaging us on WhatsApp. Withdrawing is as easy as giving consent. Once you withdraw, we will stop processing your data for that purpose within a reasonable time, unless we must keep it to complete a service you have already booked or to comply with the law. Withdrawal does not affect anything done before it.
6. Who we share it with
We never sell your personal data. We share it only when needed, and only as much as needed:
- Service providers who help us run our business, such as website hosting, email, WhatsApp messaging, calendar and analytics providers. They act on our instructions.
- Vendors, artists and venues involved in delivering your experience, for example a name and phone number for on-site coordination.
- Banks and payment partners to process payments and refunds.
- Government authorities when the law requires it.
Some of our service providers may store data on servers outside India. Where this happens, we transfer data only as permitted under Indian law.
7. How long we keep it
- Enquiries that do not go ahead: up to 24 months from our last conversation, after which we delete or anonymise them.
- Clients: for as long as needed to deliver the experience and handle follow-ups, and afterwards for as long as tax, accounting and other laws require us to keep invoices and records.
- Website analytics: according to the retention settings of our analytics provider.
We may keep limited logs for the minimum period required by law. When data is no longer needed, we erase it.
8. How we protect it
We take reasonable security safeguards to protect your personal data, including access controls, password protection, secure (HTTPS) connections and limiting access to people who need it for their work. If a personal data breach occurs, we will inform you and the Data Protection Board of India as required by law.
9. Cookies and similar tools
Our website uses a small number of cookies and browser storage:
- Essential: to keep the website working and secure.
- Preferences: to remember small choices, such as whether you have already seen the Shape Your Experience introduction or the app install prompt.
- Analytics: Google Analytics helps us understand which pages are visited and how the site performs.
You can block or delete cookies in your browser settings. The website will still work, though some preferences will not be remembered.
10. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- ask for a summary of the personal data we hold about you and how we use it, and who we have shared it with;
- ask us to correct, complete or update your personal data;
- ask us to erase your personal data, unless we must keep it to complete a service or comply with the law;
- withdraw your consent at any time;
- have your grievances addressed by us; and
- nominate another person to exercise these rights on your behalf in case of death or incapacity.
To use any of these rights, write to connect@bunnybash.in. We may ask you to confirm your identity before acting on a request.
11. Children
Our website and services are meant for adults. Personal celebrations for children are booked by a parent or lawful guardian. We do not knowingly collect personal data directly from anyone under 18. Any details about a child that a parent shares with us, such as a name for decor, are used only to deliver that event, with the parent’s consent. We do not track children or show them targeted advertising.
12. Grievance Officer
If you have a question or complaint about how we handle your personal data, please contact:
Grievance Officer, Bunny Bash
Email: connect@bunnybash.in
Address: 22/1 Doddiah Layout, Kalkere Main Road, Opposite Krishna Haven Apartment, Horamavu, Bengaluru, Karnataka 560043
We will acknowledge your complaint and resolve it as soon as possible, and in any case within the period required by law (currently no later than 90 days). If you are not satisfied with our response, you may approach the Data Protection Board of India.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will let you know where appropriate.
