Privacy Policy

Last updated: 5 July 2026

This policy explains, in plain English, what personal data BunnyDing collects when you use our stock-alert service, why we collect it, and the rights you have over it. We keep the data we hold to the minimum we need to email you when the product you asked us to watch is back in stock.

Who we are

BunnyDing is a stock-alert email service for UK shoppers. You pay a one-off fee to be emailed when a portable air conditioner is back in stock at UK retailers (online, and collect-in-store at Argos). BunnyDing is a service operated by Carbonkites Ltd, a company registered in England & Wales. For the purposes of UK data protection law, Carbonkites Ltd is the “data controller” for the personal data described here.

If you have any questions about your privacy or want to exercise any of your rights, email us at support@bunnyding.com.

What we collect

• Your email address — so we can send you the stock alerts you paid for, and a confirmation when your watch starts.
• Optional postcode / approximate location — only if you opt in to in-store collection alerts. We use it to find shops near you and to work out which branches to check. If you don’t opt in, you don’t need to give us a location.
• Your watch preferences — the product types, retailers and search radius you chose, so we only email you about things you actually asked us to watch.
• Payment — payments are processed by Stripe. Your card details are entered on Stripe’s secure checkout and are handled by Stripe, not by us. We do not see or store your full card number.

Why we use it, and our lawful basis

We process your data to perform the contract you enter into when you pay for a watch: monitoring the retailers you selected and emailing you when a match comes back in stock. We only email you about the products, types and shops you asked us to watch. We do not use your details for advertising, and we do not send marketing you didn’t ask for.

Who we share it with

We use a small number of trusted service providers (“processors”) who handle data on our behalf and only on our instructions:

• Stripe (United States) — to take and process your one-off payment.
• Resend (United States) — to deliver your stock alerts and confirmation emails.
• Hosting and infrastructure — Supabase, which stores your watch and preferences securely in the UK; Railway, which runs our alert checks in the EEA; and Vercel, which serves the website.

We do not sell your data to anyone, and we don’t share it for third-party advertising. We may disclose data if we’re legally required to (for example, in response to a valid legal request).

Where your data is processed

Your watch details and preferences are stored in the UK (Supabase), and our alert checks run in the EEA (Railway, in Amsterdam). The UK recognises the EEA as providing adequate data protection, so no additional transfer safeguards are needed for this.

Two providers process limited data in the United States: Stripe (to take your payment) and Resend (to send your emails). Where your personal data is transferred to them, it is protected by their certification under the UK Extension to the EU–US Data Privacy Framework and/or standard contractual clauses (the UK IDTA / Addendum). Email support@bunnyding.com if you’d like more detail.

How long we keep it

We keep your email, preferences and any optional location for as long as your watch is active, so we can keep monitoring and alerting you. When you cancel, when a watch expires, or when we retire a listing, we delete or anonymise this data.

We keep a minimal record of your payment (such as the transaction reference and amount, not your card details) for 6 years to meet our legal obligations under UK tax and company law. The lawful basis for that residual processing is legal obligation.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected (rectification).
• Have your data erased.
• Object to, or restrict, how we use your data.
• Receive your data in a portable format.
• Complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you think we’ve mishandled your data.

To exercise any of these, email support@bunnyding.com. We’d appreciate the chance to put things right first, but you can go to the ICO at any time.

Cookies and analytics

We use minimal, essential cookies only — for example, a session cookie to keep you signed in to your account. To understand visitor numbers we use Vercel Web Analytics, which is privacy-friendly and cookieless: it counts visits without setting cookies, without cross-site tracking, and without building a profile of you. We do not use advertising cookies.

Unsubscribing

Every alert email includes an unsubscribe link. Following it stops the alerts and removes the associated watch. You can also manage or cancel your watches from your account page, or email us and we’ll sort it out for you.

Note: This is a plain-English summary of our policies; if anything is unclear, contact us.