Last updated: June 18, 2026
This Privacy & Cookie Policy describes how Bonjibon ("we", "us", or "our") collects, uses, and shares your personal information when you visit www.bonjibon.com (the "Site"), make a purchase, or otherwise interact with us. It also explains the cookies and tracking technologies we use and how you can control them.
By visiting the Site or making a purchase, you agree to the practices described in this policy. If you have questions, contact us at support@bonjibon.com.
1. INFORMATION WE COLLECT
Information you give us
We collect personal information you voluntarily provide when you create an account, make a purchase, sign up for our newsletter, or contact us. This includes:
- Name
- Email address
- Billing and shipping address
- Phone number
- Payment information (processed securely via Shopify — we do not store card details)
- Purchase history
- Account credentials
- Messages or other content you submit to us
Information collected automatically
When you visit the Site, we automatically collect information about your device and how you interact with us, including:
- IP address and approximate location (city or country level)
- Browser type, version, and language settings
- Operating system and device type
- Referring URLs and exit pages
- Pages and products viewed, clicks, and time spent on pages
- Session statistics and date/time of visits
We also use your IP address to determine your approximate location for the purpose of currency display, and store your selected currency in a temporary session cookie so prices remain consistent throughout your visit.
We collect this information through cookies and similar tracking technologies — see Section 4 for full details.
2. HOW WE USE YOUR INFORMATION
We use the information we collect to:
- Process and fulfil your orders, including payment, shipping, and order confirmations
- Create and manage your account
- Communicate with you about your orders and respond to your enquiries
- Send marketing and promotional emails if you have opted in (you may unsubscribe at any time)
- Send cart reminders and product recommendations
- Deliver personalised advertising on third-party platforms such as Facebook and Instagram
- Analyse site traffic and improve our Site and services
- Detect, prevent, and respond to fraud, security incidents, and other illegal activity
- Comply with our legal obligations
We will not process your information for purposes incompatible with those described above without your consent.
3. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information. We share your information only as necessary with the following:
Service providers
We work with trusted third-party vendors who perform services on our behalf, including e-commerce hosting, payment processing, email marketing, analytics, advertising, and website security. They are contractually required to protect your information and may only use it to provide services to us.
Our key service providers are:
Shopify Inc. (Canada): E-commerce platform, payment processing, hosting. Privacy Policy: https://www.shopify.com/legal/privacy
Cloudflare, Inc. (United States): Website security, traffic optimisation, and DDoS protection. Privacy Policy: https://www.cloudflare.com/privacypolicy/
Google Ireland Limited (Ireland): Analytics via Google Analytics 4. Privacy Policy: https://policies.google.com/privacy | Opt out: https://tools.google.com/dlpage/gaoptout
Meta Platforms, Inc. (United States): Advertising and conversion tracking via Meta Pixel and Events Manager. Privacy Policy: https://www.facebook.com/policy.php | Opt out: https://www.facebook.com/settings?tab=ads
Klaviyo Inc. (United States): Email marketing and customer communications. Privacy Policy: https://www.klaviyo.com/legal/privacy-notice | Opt out: https://www.klaviyo.com/legal/privacy-notice#your-choices
Legal and regulatory compliance
We may disclose your information where required by law, court order, or government authority, or where necessary to protect our rights, property, or the safety of others.
Business transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. COOKIES AND TRACKING TECHNOLOGIES
What are cookies?
Cookies are small data files placed on your device when you visit a website. We use both first-party cookies (set by us) and third-party cookies (set by our service providers). Some expire when you close your browser; others persist for a set period.
We also use related technologies including pixels, web beacons, and scripts that work similarly to cookies and may track your activity on our Site and on third-party platforms.
How to manage your preferences
When you first visit our Site, a cookie consent banner will appear. You can choose to accept all cookies, reject non-essential cookies, or customise your preferences by category.
Please note: if you reject all cookies, you will not be able to access or use our Site. Our Site requires cookies to function and access is conditional on accepting this policy. Essential cookies cannot be turned off as they are strictly necessary for the Site to operate.
You can also update your preferences at any time through the cookie preferences panel on our Site.
Necessary cookies
These cookies are required for the Site to function and cannot be switched off. They do not store personally identifiable information.
Cloudflare, Inc. (United States)
Cloudflare filters all traffic through www.bonjibon.com between the Site and your browser, providing security and performance optimisation.
Shopify Inc. (Canada)
Shopify powers our online store and places cookies on your device to enable core e-commerce functions including cart management, checkout, session management, fraud prevention, and currency display.
Measurement cookies
These cookies help us understand how visitors use our Site so we can improve it. They are only set with your consent where required by law.
Google Analytics 4 — Google Ireland Limited (Ireland)
Google Analytics tracks and examines the use of www.bonjibon.com and prepares reports on its activities. In Google Analytics 4, IP addresses are used at collection time and then discarded before data is logged. Personal data processed: number of users, session statistics, trackers, usage data.
Meta Events Manager — Meta Platforms, Inc. (United States)
By integrating the Meta Pixel, Meta Events Manager provides insights into traffic and interactions on www.bonjibon.com. Personal data processed: browsing history, clicks, page views, trackers, usage data.
Marketing cookies
These cookies are used to deliver personalised ads and measure the effectiveness of our campaigns. They are only set with your consent where required by law.
Klaviyo — Klaviyo Inc. (United States)
Klaviyo manages our email marketing and communications. We share information about purchasing users such as contact details and shopping histories. Personal data processed: email address, purchase history, trackers, usage data.
Meta Pixel / Meta Ads Conversion Tracking — Meta Platforms, Inc. (United States)
The Meta Pixel connects data from the Meta Audience Network with actions performed on www.bonjibon.com, tracking conversions attributable to ads on Facebook, Instagram, and Meta Audience Network. Personal data processed: trackers, usage data.
Opting out of interest-based advertising
You can opt out of interest-based advertising through the following industry tools:
- Digital Advertising Alliance of Canada (DAAC): https://youradchoices.ca
- Digital Advertising Alliance (US): https://optout.aboutads.info
- YourOnlineChoices (EU): https://www.youronlinechoices.eu
- Network Advertising Initiative (US): https://www.networkadvertising.org/choices
- AppChoices (mobile app): https://youradchoices.com/appchoices
Controlling cookies via your browser
You can also manage cookies through your browser settings. Please be aware that blocking all cookies will prevent you from accessing our Site:
- Google Chrome: https://support.google.com/chrome/answer/95647
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies
- Apple Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471
- Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge
- Microsoft Internet Explorer: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies
- Brave: https://support.brave.com/hc/en-us/articles/360022806212
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
5. INTERNATIONAL DATA TRANSFERS
Some of our service providers are based in the United States and Ireland. Your information may be transferred to, stored by, and processed in countries outside your own, including Canada, the United States, and Ireland.
Where personal data is transferred outside the EU/EEA or Switzerland, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission. Contact us at support@bonjibon.com for more information.
6. HOW LONG WE KEEP YOUR INFORMATION
We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law:
- Order and transaction data: as required by applicable tax and commercial law
- Account data: for as long as your account is active
- Marketing data: until you unsubscribe or request deletion
- Analytics data: in accordance with the settings of each provider
When data is no longer needed, we securely delete or anonymise it.
7. HOW WE KEEP YOUR INFORMATION SAFE
We implement appropriate technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.
No method of transmission over the internet is 100% secure. While we do our best to protect your information, we cannot guarantee its absolute security. Transmission of personal information to and from our Site is at your own risk.
8. MINORS
Our Site is intended for adults. We do not knowingly collect personal information from minors. By using our Site, you confirm that you are of legal age in your jurisdiction.
If you believe we have inadvertently collected information from a minor, please contact us at support@bonjibon.com and we will delete it promptly.
9. YOUR RIGHTS — ALL USERS
Regardless of where you live, you can:
- Request access to the personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your information
- Withdraw consent for marketing at any time via the unsubscribe link in any email
To exercise any of these rights, contact us at support@bonjibon.com. Requests are free of charge.
10. CANADIAN RESIDENTS
We collect, use, and disclose your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25).
Canadian residents have the right to:
- Access the personal information we hold about them
- Request correction of inaccurate information
- Withdraw consent to the collection, use, or disclosure of their personal information (subject to legal and contractual restrictions)
- Request deletion of their personal information, subject to our legal retention obligations
Quebec residents have additional rights under Law 25, including the right to data portability and the right to be informed of any automated decision-making that significantly affects them.
To exercise your rights, contact us at support@bonjibon.com. We will respond within 30 days.
11. EU / EEA AND SWISS RESIDENTS
This section applies to users in the European Union, European Economic Area, and Switzerland, and supersedes any conflicting provisions in this policy for those users.
Legal bases for processing
We process your personal information on the following legal bases:
- Consent: where you have given us explicit permission (e.g. marketing emails, non-essential cookies). You may withdraw consent at any time.
- Contract: where processing is necessary to fulfil your order or perform our contract with you.
- Legal obligation: where processing is required to comply with applicable law.
- Legitimate interests: where processing is reasonably necessary for our legitimate business interests such as fraud prevention and analytics, and those interests are not overridden by your rights.
Your rights under the GDPR
EU/EEA and UK users have the right to:
- Withdraw consent at any time
- Object to processing based on legitimate interests or for direct marketing
- Access your personal data and obtain a copy
- Request rectification of inaccurate data
- Request erasure of your data (right to be forgotten)
- Restrict the processing of your data
- Data portability (receive your data in a machine-readable format)
- Lodge a complaint with your national data protection authority
We will respond to requests within 30 days. Contact us at support@bonjibon.com.
Data retention (EU/EEA and Switzerland)
Personal data collected for the performance of a contract will be retained until the contract is fully performed. Personal data collected for legitimate interests will be retained as long as needed for those purposes. Once the retention period expires, personal data will be deleted.
Swiss users
Swiss users have rights under the Swiss Federal Act on Data Protection, including the right to access personal data, object to processing, data portability, and correction of inaccurate data.
12. UNITED STATES RESIDENTS
This section applies to residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other US states with applicable privacy laws.
Categories of personal information we collect
In the past 12 months we have collected the following:
- Identifiers: name, email address, IP address, account name — YES
- Personal information per California Customer Records statute: name, contact and financial information — YES
- Protected classification characteristics — NO
- Commercial information: purchase history, transaction details — YES
- Biometric information — NO
- Internet or electronic network activity: browsing history, pages visited, interactions — YES
- Geolocation data: approximate location based on IP address — YES
- Audio, electronic, sensory, or similar information — NO
- Professional or employment-related information — NO
- Education information — NO
- Inferences drawn from collected data — YES
- Sensitive personal information — NO
We do not sell your personal information. We have disclosed commercial information, internet activity, geolocation data, and inferences to third parties for advertising and analytics purposes in the past 12 months.
Your rights
You have the right to:
- Know whether we are processing your personal data
- Access your personal data
- Correct inaccuracies in your personal data
- Request deletion of your personal data
- Obtain a portable copy of personal data you previously shared with us
- Opt out of the sale, sharing, or use of your personal data for targeted advertising
- Non-discrimination for exercising your rights
Depending on your state, you may also have the right to a list of specific third parties to whom we have disclosed your data (California, Delaware, Maryland, Minnesota, Oregon), and the right to review and correct profiling decisions (Connecticut, Minnesota).
How to exercise your rights
Email us at support@bonjibon.com. We will respond within 45 days, or within the timeframe required by applicable law. We may ask you to verify your identity before processing your request. You may designate an authorised agent to make requests on your behalf.
Appeals
If we decline to act on your request, you may appeal by emailing support@bonjibon.com and stating you wish to appeal. We will respond within 60 days with a written explanation. If your appeal is denied, you may submit a complaint to your state's attorney general.
Global Privacy Control
We honour Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a valid opt-out from the sale or sharing of your personal information for targeted advertising under applicable US state law. For more information, visit https://globalprivacycontrol.org.
Do-Not-Track
We do not currently respond to Do-Not-Track (DNT) browser signals as no uniform industry standard for recognising DNT has been adopted. We do however honour GPC signals as described above.
California Shine the Light
California residents may request once per year, free of charge, information about the categories of personal information we disclosed to third parties for their direct marketing purposes. To request this, contact us at support@bonjibon.com.
13. CHANGES TO THIS POLICY
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Where required by law, we will notify you of material changes.
14. CONTACT US
If you have any questions, concerns, or requests relating to this policy or how we handle your personal information, please contact us:
Bonjibon
support@bonjibon.com
www.bonjibon.com
15. DEFINITIONS
Personal Data / Personal Information: Any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.
Sensitive Personal Information: Any personal information that is not publicly available and reveals information considered sensitive under applicable privacy law.
Usage Data: Information collected automatically through www.bonjibon.com, including IP addresses, domain names, URI addresses, time of request, server response codes, country of origin, browser and operating system information, time details per visit, and other parameters about the device and user's IT environment.
Tracker: Any technology — e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting — that enables the tracking of users by accessing or storing information on the user's device.
Cookie: A Tracker consisting of small sets of data stored in the user's browser.
Sale (US): Any exchange of personal information by us to a third party for monetary or other valuable consideration, as defined by applicable US state law. Disclosure under a written service provider contract does not constitute a Sale.
Sharing (California): Any disclosure of a consumer's personal information to a third party for cross-context behavioural advertising, as defined by California privacy laws.
Targeted Advertising: Displaying advertisements selected based on personal information obtained from a consumer's activities over time and across nonaffiliated websites or applications.
European Union (EU): Unless otherwise specified, all references to the EU include all current member states of the EU and the European Economic Area.
Data Controller: The natural or legal person that determines the purposes and means of the processing of personal data. The Data Controller for www.bonjibon.com is Bonjibon.
Data Processor: The natural or legal person that processes personal data on behalf of the Data Controller.
This policy relates solely to www.bonjibon.com, unless otherwise stated within this document.