No products in the cart.
Effective Date: September 1, 2026
We know that shopping for intimacy products comes with an extra layer of trust. You’re not just handing over a delivery address. You’re trusting us to handle something personal with care. This policy explains, in plain terms, what information we collect when you use our website or place an order, why we collect it, and what say you have over it.
Baad Bunny is operated by Delkanda Enterprises (Pvt) Ltd (Company Registration No. PV00244627), registered at 133, Edirisinghe Road, Nugegoda 10250, Sri Lanka. Wherever this policy says “we,” “us,” or “our,” that’s who we mean. This policy is written to meet the standards set out in Sri Lanka’s Personal Data Protection Act No. 9 of 2022 (the “PDPA”) and the Consumer Affairs Authority’s e-commerce rules (Gazette No. 2332/15), and it applies to everyone who visits https://www.baadbunny.com/, whether or not you go on to place an order.
What information do we collect?
We only collect what we actually need to run the site and get your order to you. That includes:
- Contact and account details: your name, email, phone number, delivery address, and billing address
- Order details: what you bought, your order history, and how you paid. We never see or store your full card number, since payment is handled by our payment gateway, WEBXPAY
- Delivery preferences: whether you chose on-demand or scheduled delivery, your chosen time slot or date, and any delivery instructions you leave us
- Technical details: your IP address, browser and device type, and the pages you visit, mostly picked up through cookies
- Anything you tell us directly: messages sent through email, our contact form, or customer support
How do we use your information?
In short, to run your order and run the business responsibly:
- To process and fulfil your order, including coordinating on-demand and scheduled deliveries with our courier partners
- To send you order confirmations, delivery updates, and to respond when you reach out for support
- To understand how people use the site so we can keep improving it
- To send marketing emails or offers, but only if you’ve opted in, and you can opt out again at any time, no questions asked
- To meet our legal and regulatory obligations, including tax and consumer protection requirements
Our discretion commitment
Given what we sell, we go a step further than most stores when it comes to protecting your privacy:
- Your payment statement, packaging, and delivery label will never reveal what you bought. They’re written to be completely discreet
- We don’t share your order history with anyone for marketing purposes, ever
- Inside our own team, access to customer data is limited to the people who actually need it to get your order to you
We keep data collection to a minimum
We only ever collect data for a specific, stated reason, such as fulfilling your order, running your account, or meeting a legal requirement, and we don’t repurpose it beyond that. This is a core requirement of the PDPA, and it’s also just good practice: the less we hold that we don’t need, the less there is to worry about.
Who do we share your data with?
We share the minimum necessary information with a small number of trusted partners, and with no one else:
- Our payment gateway, WEBXPAY, to process your payment securely
- Our courier partners, PickMe Flash and/or Uber Parcel, so they can deliver your order. They only ever receive your name, delivery address, and phone number, never a description of what’s inside the package
- The service providers who host and support our website, all of whom are bound by confidentiality obligations
We do not sell your personal data to anyone, under any circumstances.
How do we keep your data secure?
We use reasonable technical and organisational safeguards to protect your information, including encrypted data transmission (TLS/SSL), restricted internal access controls, and secure storage practices. No system is ever perfectly unbreakable, but we take this seriously and keep our practices up to date.
How long do we keep your data?
We keep your information only as long as we genuinely need it: to fulfil your order, meet our legal and tax obligations, and resolve any disputes that come up. Once none of those reasons apply, we securely delete or anonymise it.
Your rights under the PDPA
Sri Lanka’s data protection law gives you real, enforceable rights over your own information. You can:
- Ask us what personal data we hold about you
- Ask us to correct anything that’s inaccurate or out of date
- Ask us to delete your data, except where we’re required to keep it for legal reasons
- Withdraw your consent to marketing emails at any time
To use any of these rights, just email us at hello@baadbunny.com and we’ll take it from there.
Cookies
We use cookies to keep the site running smoothly: remembering what’s in your cart, keeping you logged in, and understanding how the site is used so we can improve it. You’re always in control of these through your browser’s cookie settings.
Age restriction
Our products are intended exclusively for adults aged 18 and older. See our Age Restriction / 18+ Policy for the full details.
Changes to this policy
We may update this policy from time to time, whether that’s to reflect a change in the law or a change in how we operate. Whenever we do, the updated version will be posted here with a new effective date.
Contact us
Questions about this policy, or about your data specifically: hello@baadbunny.com. Our full details:
Delkanda Enterprises (Pvt) Ltd
(Company Registration No. PV00244627)
133, Edirisinghe Road,
Nugegoda 10250, Sri Lanka.