Privacy Policy

Who we are

Bonsai Studio ("we", "us") is an independent software studio based in the United Kingdom. We operate this website (bonsaistudio.dev) and Bonsai WMS, a cloud-based warehouse management system for e-commerce fulfilment. For anything in this policy, contact hello@bonsaistudio.dev.

For data processed in Bonsai WMS we generally act as a processor on behalf of our customers, who remain the controllers of their operational data. For website enquiries and account administration we act as the controller.

What we collect

• Account data: your name and email address, managed through Auth0, plus the organisation you belong to.
• Operational data: products, stock levels, locations, purchase orders, orders, shipments and customer details needed to fulfil orders.
• Connected store data: Shopify products, orders, inventory levels and fulfilment status, strictly to operate your warehouse.
• Website enquiries: what you send through the contact form, delivered by Resend.
• Technical data: server logs and error reports where enabled. We do not run advertising trackers.

Why we process it

• To provide the service: syncing orders, running pick/pack/ship workflows, generating labels and pushing fulfilment status back to your sales channel.
• To operate and secure our systems: monitoring, debugging and preventing abuse.
• To respond when you contact us.
• To bill subscriptions. Payment details are handled by Stripe; we never see or store card numbers.

Shopify merchants and their customers

If you connect a Shopify store, end-customer data enters Bonsai WMS solely so your warehouse can fulfil those orders. We do not sell it, enrich it, advertise with it, or use it for any purpose beyond fulfilment.

We honour Shopify's mandatory privacy webhooks. Customer redaction requests remove names, addresses and order notes from affected orders while preserving anonymous operational records. Shop redaction deletes the store connection and marketplace data.

Who we share data with

We use a small set of service providers to run the product, each receiving only what their role requires. The current list is also published on our sub-processors page.

Retention and leaving

Operational data is retained while your organisation has an active account because warehouses need their history. If you cancel, we provide a full export on request, then delete or anonymise live operational data within 90 days of account closure. More detail is published in our data retention policy.

Security

All traffic is encrypted in transit. Marketplace access tokens and carrier credentials are encrypted at rest. Each organisation's data is isolated by tenant, and every inventory movement is recorded in an audit trail.

Your rights

Under UK and EU data protection law you can ask us for access to, correction of, or deletion of your personal data, and you can object to or restrict processing. Email hello@bonsaistudio.dev and we will respond within a month.

International transfers

Our infrastructure runs in the UK/EU where available. Where a provider processes data outside the UK/EEA, transfers are covered by adequacy decisions or standard contractual clauses.

Changes

If this policy changes materially we will update this page and note the date above. Continued use of the service after a change constitutes acceptance.