Privacy Policy
Last Updated: March 21, 2026
1. Introduction
Welcome to BuBuu Kids. We are an online children's bookshop, boutique, and the proud creators of the 'BrainBox' subscription. Your privacy is critically important to us, and this Privacy Policy outlines how we collect, use, and protect your personal information when you use our services.
2. Information We Collect
To fulfill your orders and provide a seamless shopping experience, we collect only the necessary personal information. This includes your:
- Name
- Email Address
- Phone Number
- Physical Address
This data is securely stored and used exclusively for order processing, delivery, and customer service communication.
3. Third-Party Services & Disclosures
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties, except for trusted service providers who assist us in operating our website and conducting our business.
Transactional Emails & Cross-Border Processing via AWS
We explicitly use Amazon Web Services (AWS) Simple Email Service (SES) to safely and reliably deliver critical transactional emails to our customers. This includes account verifications, order confirmations, shipping updates, and tracking information. As AWS operates globally, this involves cross-border data processing. By using our services, you acknowledge and agree to the secure transfer and processing of your email data across international borders, fully maintained under AWS’s rigorous privacy and security standards.
4. Your Rights (Sri Lanka PDPA Compliance)
In accordance with the Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022, you hold specific rights globally regarding your personal information collected by BuBuu Kids:
- Right of Access: You may request a copy of the personal data we hold about you and information regarding its processing.
- Right to Rectification: You can ask us to correct or complete any inaccurate or incomplete data.
- Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary, or if you withdraw your consent.
- Right to Withdraw Consent: You may withdraw your consent to data processing at any time, though this will not affect the lawfulness of processing based on consent before withdrawal.
5. Data Deletion Requests
If you wish to exercise your right to delete your data or manage your privacy preferences, please contact us directly using the information provided below. We will promptly process your request in accordance with applicable laws.
6. Contact Us
If you have any questions or concerns about this Privacy Policy, our data collection practices, or if you wish to exercise your rights, please reach out to our privacy team at: