Updated July 28, 2025
This Privacy Notice explains how information about you, that directly identifies you, or that makes you identifiable (“personal information”) is collected, used, disclosed, and otherwise processed by Bambu in connection with our services.
When we use the terms “Bambu”, “Bambu Inc.”, “Bambu Wallet”, “we”, “us”, or “our” in this Privacy Notice, we are referring to Bambu, Inc. and its affiliates. When we use the term “Service” or “Services,” we are referring to all of the services and product offerings that we offer as a controller, our website https://www.BambuWallet.com/ or any other Bambu Wallet product or service that posts or links to this Privacy Notice.
Bambu as a Data Controller: For purposes of data protection laws, Bambu is the “data controller” (or similar term under applicable laws) and is generally responsible for and controls the processing of your personal information collected through your use of our Service. This Privacy Notice applies only to instances where Bambu acts as a data controller.
Bambu as a Data Processor: In providing our Service, our customers may collect data in our products and services, or we may collect data on their behalf, which may include personal information or data about our customers’ end users (“Customer Data”). In such instances, Bambu acts as a “data processor” (or similar term under applicable laws), and we have contractually committed ourselves to process Customer Data on behalf and under the instruction of the respective customer, who is the data controller. This Privacy Notice does not apply to the processing of Customer Data and we recommend you read the privacy notice of the respective customer if their processing concerns your personal information.
When you interact with us, we are collecting personal information about you. Sometimes we collect personal information automatically when you interact with our Services and sometimes we collect the personal information directly from you. At times, we may collect personal information about you from third parties.
Personal Information You Provide
We may collect the following personal information you provide in connection with our Service:
Personal Information Automatically Collected
As is true of most digital platforms, we and our third-party providers and partners collect certain personal information automatically when you visit, interact with, or use our Service and emails. Such information is collected through the use of cookies and similar technologies such as pixels and Local Storage Objects (LSOs) like HTML5 (together “cookies”). This helps us to provide you with a good experience when you use our Services and also allows us to monitor and analyze how you use and interact with our Services so that we can continue to improve our Services. It also helps us and our partners to determine products and services that may be of interest to you.
Specifically, we may collect the following information:
Personal Information from Other Sources and Third Parties
We may also obtain personal information from third parties, which we may combine with personal information we collect either automatically or directly from an individual.
We may receive personal information from the following third parties:
We may use the personal information we collect for the following purposes:
We may also share, transmit, disclose, grant access to, make available, and provide personal information with and to third parties, as described below.
We may share (or we may permit these parties to collect) personal information with online advertising networks, social media companies, and other third-party services, including information about your use of our Service over time, so that they may play or display ads that may be relevant to your interests on other websites or apps, or on other devices you may use. Typically, though not always, the information we share is provided through cookies or similar tracking technologies, which recognize the device you are using and collect information, including hashed data, clickstream information, browser type, time and date you visited the website and other information. This information is used to display targeted ads on other websites, apps, or services. We or the online advertising networks use this information to make the advertisements you see online more relevant to your interests. We may also display targeted advertising to you through social media platforms, such as LinkedIn, Facebook, Twitter, Google, and others. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our services while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. These advertisements are governed by the privacy policies of those social media companies that provide them.
In accordance with applicable privacy law and the jurisdiction in which you reside, you may be able to exercise some or all of the following rights in relation to the personal information about you that we have collected (subject to certain limitations at law):
Before processing your request, we will need to verify your identity and confirm you are a resident of a jurisdiction that offers such right(s). In order to verify your identity, we will generally either require the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems. This process may require us to request additional personal information from you. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
To exercise your right to opt-out: please submit a request, as follows: Opt Out Request
You do not need to create an account with us to exercise your right to opt-out. However, we may ask you to provide additional personal information so that we can properly identify you to track compliance with your opt-out request. We will only use personal information provided in an opt-out request to review and comply with the request. If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems. We may not process your request if we, in good faith, believe that the request is fraudulent. In such instances, we will send a notice to the requestor explaining our decision.
Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 16 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 16, we will promptly delete that personal information.
The Services may contain integrations or links to third party websites or services, including those of our business partners. By interacting with these third parties, you are providing information directly to the third party and not Bambu. Please note that Bambu is not responsible for the privacy practices of these third parties or any entity that it does not own or control. We encourage you to review the privacy notices and online terms of those third parties to learn more about how they handle your personal information.
We reserve the right to change this Privacy Notice from time to time in our sole discretion. We will notify you about material changes in the way we treat personal information by adequately informing you via your account, by placing a prominent notice on our website, or through other appropriate communication channels. It is your responsibility to review this Privacy Notice periodically. All changes shall be effective from the date of publication unless otherwise provided.
If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to privacy@bambuwallet.com.
This Privacy Notice is designed to apply to our website visitors, users of our Service, and other companies and users on a global basis. Please refer below for additional disclosures that may be applicable to you:
ADDITIONAL DISCLOSURES FOR AUSTRALIA RESIDENTS
These additional disclosures for Australian residents (“Australian Disclosures”) supplement the information contained in our Privacy Notice and applies solely to individuals in Australia (“you”).
These Australian Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individuals in Australia, either online or offline, within the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”) found in Schedule 1 of the Privacy Act.
Unless otherwise expressly stated, all terms in these Australian Disclosures have the same meaning as defined in our Privacy Notice or as otherwise defined in the Privacy Act.
When we use the term “personal information” in this Australian Disclosures notice, we mean information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information or opinion:
A. HOW WE COLLECT YOUR PERSONAL INFORMATION
The various ways in which your personal information is collected are described in Section 1 of our Privacy Notice, We may also collect your personal information if we record any phone calls or video calls (with your permission) between you and Bambu.
B. OVERSEAS TRANSFERS OF YOUR PERSONAL INFORMATION
Your personal information may be transferred to and stored in locations outside Australia where we and our third-party service providers have operations, including in the United States, where Bambu, Inc. is located and the United Kingdom.
In the event of a transfer by Bambu to a location outside Australia, we ensure that: (i) personal information is transferred to countries recognized as having an equivalent level of privacy protection to Australia; or (ii) the transfer is made pursuant to appropriate safeguards, such as contractual obligations.
C. STORING YOUR PERSONAL INFORMATION
We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage. All personal information we collect will be stored by our cloud hosting provider on secure servers.
We will never send you unsolicited emails or contact you by phone requesting credit or debit card information.
D. YOUR PRIVACY RIGHTS
You have various rights under the APPs.
Right to access and request
You have the right to request access to and/or the correction of your personal information held by Bambu. You can exercise these rights by contacting our Privacy Officer at privacy@bambuwallet.com.
We will respond to your request within a reasonable time. If your request is refused, you will be provided with written reasons for the refusal and information about the mechanisms you can use to complain about the refusal.
Right to complain
You also have a right to make a privacy complaint to our Privacy Officer at privacy@bambuwallet.com.
Our Privacy Officer will first consider your complaint to determine whether there are simple or immediate steps which can be taken to resolve the complaint. Our Privacy Officer will endeavor to complete the investigation into your complaint promptly. You may be asked to provide further information about your complaint and the outcome you are seeking. Our Privacy Officer will then typically gather relevant facts, locate, and review relevant documents, and speak with individuals involved.
In most cases, our Privacy Officer will investigate and provide a written response to your complaint within 30 days of receipt of the complaint. If the matter is more complex or the investigation may take longer, our Privacy Officer will let you know.
If you are not satisfied with Bambu’s response to your complaint, a complaint may be made to the Office of the Australian Information Commissioner (“OAIC”). The OAIC can be contacted by telephone on 1300 363 992 or by using the contact details on the website www.oaic.gov.au.
ADDITIONAL DISCLOSURES FOR CALIFORNIA RESIDENTS (UNITED STATES)
These additional disclosures for California residents (“CA Disclosures”) supplement the information contained in our Privacy Notice and apply solely to individual residents of the State of California (“consumers” or “you”).
These CA Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”)
Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our Privacy Notice or as otherwise defined in the CCPA.
When we use the term “personal information” in this CA Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
A. COLLECTION AND USE OF PERSONAL INFORMATION
We collect personal information from and about you for a variety of purposes, as described in the How We Collect Your Personal Information and How We Use Your Personal Information sections of the Privacy Notice.
Categories of Personal Information Collected. In the last 12 months, we have collected the following categories of personal information:
We collect this information from the following sources: directly from you, from our business partners and affiliates, from your browser or device when you visit our App or use our Services, or from third parties that you permit to share information with us. Please see the How We Collect Your Personal Information section of the Privacy Notice for more information about the sources of personal information we collect.
B. DISCLOSURE OF PERSONAL INFORMATION
We share personal information with third parties for business purposes. The categories of third parties to whom we disclose your personal information for a business purpose include: (i) other brands and affiliates in our family of companies; (ii) our service providers and advisors; (iii) analytics providers; (iv) marketing and strategic partners; and (v) social networks.
In the previous 12 months, we have disclosed all of the categories of personal information we collect, explained in the Collection and Use of Personal Information section of these CA Disclosures, to third parties for a business purpose, as describe the How We Share Your Personal Information section of the Privacy Notice.
C. SALE OF PERSONAL INFORMATION
As further described in the How We Share Your Personal Information section of the Privacy Notice, we may “sell” or “share” your personal information (as those terms are defined by the CCPA) to third parties, subject to your right to opt out of those sales or sharing (see Exercise Your Right to Opt-Out below).
In the last 12 months, we have sold or shared the following categories of personal information for the purposes described in our Privacy Notice, subject to your settings and preferences and your Right to Opt-Out: Identifiers, such as your name and email address, CA Customer Categories, such as your name and phone number, and Commercial Information, such as records of services purchased, obtained or considered.
The categories of third parties to whom we may sell or share the personal information include:
We may also disclose personal information to third parties at your direction or upon your request, in connection with a corporate business transaction, or to comply with legal or contractual obligations, as described in our Privacy Notice.
D. YOUR CALIFORNIA PRIVACY RIGHTS
As a California resident, you may be able to exercise the following rights in relation to the personal information that we have collected about you (subject to certain limitations at law):
|
The Right to Access/Know |
You have the right to request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity: |
|
The Right to Request Deletion |
You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions. |
|
The Right to Correction |
You have the right to request that any inaccuracies in your personal information be corrected, taking into account the nature of the personal information and the purposes of the processing of your personal information. |
|
The Right to Opt-Out of Sales or Sharing of Personal Information |
You have the right to direct us not to “sell” your personal information to third parties for monetary or other valuable consideration, or “share” your personal information to third parties for cross-context behavioral advertising purposes. |
|
The Right to Limit Use and Disclosure of Personal Information |
You have the right to direct us to limit the use of your sensitive personal information to certain purposes, subject to certain exceptions. |
|
The Right to Control Over Automated Decision-Making / Profiling |
You have the right to direct us not to use automated decision-making or profiling for certain purposes. |
|
The Right to Non-Retaliation |
You have the right not to receive retaliatory or discriminatory treatment for exercising these rights. |
|
“Shine the Light” |
California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law, or the right to opt out of such practices (Civ. Code §1798.83). |
E. HOW TO EXERCISE YOUR CALIFORNIA PRIVACY RIGHTS
Exercise Your Right to Access, Right to Know, Right to Correction, and Right to Deletion
To exercise your Right to Access, Right to Know, Right to Correction, or your Right to Deletion: please submit a request by filling out Right to Know, Delete & Limit.
Before processing your request, we will need to verify your identity and confirm you are a resident of the State of California. In order to verify your identity, we will generally either require the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems. This process may require us to request additional personal information from you, including, but not limited to, your email address, phone number, and/or date of last transaction on our Services.
In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
Exercise Your Right to Opt-Out of Personal Information Sales or Sharing for Targeted Advertising
Unless you have exercised your Right to Opt-Out, we may disclose or “sell” your personal information to third parties for monetary or other valuable consideration, or “share” your personal information to third parties for cross-context behavioral advertising purposes. The third parties to whom we sell or share personal information may use such information for their own purposes in accordance with their own privacy policies.
You do not need to create an account with us to exercise your Right to Opt-Out. However, we may ask you to provide additional personal information so that we can properly identify you to track compliance with your opt-out request. We will only use personal information provided in an opt-out request to review and comply with the request. If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems.
To exercise the Right to Opt-Out of personal information “sales,” you may submit a request by clicking the link below:
DO NOT SELL MY PERSONAL INFORMATION
Additionally, as is common practice among companies that operate online, we permit third party advertising networks, social media companies and other third party businesses to collect and disclose your personal information (including preferences, geolocation, commercial information and internet, network and device information) directly from your browser or device through cookies or tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us. These third parties use this information for the purposes of serving ads that are more relevant, for ad campaign measurement and analytics, and for fraud detection and reporting and may sell or share that information to other businesses for advertising and other purposes.
Authorized Agents
In certain circumstances, you may permit an authorized agent to submit requests to exercise your California Privacy Rights on your behalf. The authorized agent must provide a letter signed by you confirming the agent has permission to submit a request on your behalf or must provide sufficient evidence to show that the authorized agent has been lawfully vested with power of attorney.
For security purposes, we may need to verify your identity and confirm directly with you that you have provided the authorized agent permission to submit the request, and it may take additional time to fulfil agent-submitted requests. We may deny a request in the event we are not able to verify the authorized agent’s authority to act on your behalf. Please note that for privacy and security reasons, we will direct future communications to the data subject on whose behalf the request was made.
“Shine the Light” Disclosures
The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. To opt out of this type of sharing, please submit a request by filling out Understand My Use Of Data and specifying your desire to understand data usage.
Notice of Financial Incentives
In addition, we may offer you financial incentives for the collection, sale, retention, and use of your personal information as permitted by the CCPA that can, without limitation, result in reasonably different prices, rates, or quality levels. The material aspects of any financial incentive will be explained and described in its program terms. Please note that participating in incentive programs is entirely optional, you will have to affirmatively opt-in to the program and you can opt-out of each program (i.e., terminate participation and forgo the ongoing incentives) prospectively by following the instructions in the applicable program description and terms. We may add or change incentive programs, and/or their terms by posting notice on the program descriptions and terms linked to above, so check them regularly.
Each financial incentive or price or service difference related to the collection and use of personal information is based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer itself and the anticipated revenue generation that may be realized by rewarding brand loyalty. We calculate the value of the offer and financial incentive by using the expense related to the offer.
Minors
We do not sell the personal information and do not have actual knowledge that we sell the personal information of minors under 16 years of age. Please contact us at privacy@bambuwallet.com to inform us if you, or your minor child, are under the age of 16.
If you are under the age of 18 and you want to remove your name or comments from our website or publicly displayed content, please contact us directly at privacy@bambuwallet.com. We may not be able to modify or delete your information in all circumstances.
ADDITIONAL DISCLOSURES FOR NEVADA RESIDENTS (UNITED STATES)
If you are a resident of the State of Nevada in the United States, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. To opt out of this kind of future sales, please submit a request by filling out our request form.
ADDITIONAL DISCLOSURES FOR THE EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND
Bambu Wallet maintains operations in Europe and may direct our services to individuals located in the EEA, UK and Switzerland. In these instances, the following additional disclosures apply to our processing of personal data.
When we use the term “personal data” in this section, we mean information relating to an identified or identifiable natural person.
CONTROLLERS
Bambu, Inc. is the controller of your personal data.
In addition, Bambu Ltd and Bambu Ireland Limited are jointly responsible to process your personal data for the following reasons: perform our contractual services, as further described below.
A. LEGAL BASES FOR THE PROCESSING
We use your personal data based on the following legal grounds according to the Regulation (EU) 2016/679 (the “EU GDPR”) or, where applicable, the “UK GDPR” as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the UK European Union (Withdrawal) Act 2018 GDPR:
|
Category of Data Subject |
Personal Data Processed |
Purposes of Processing |
Legal Basis for Processing |
|
• Customers, where the customer is a natural person • Users (who may be customer employees) |
Email and password, company name, company URL, office phone number and office address. You may also add or confirm your name, company industry, tax ID, billing address, time zone and source of contact/lead |
Account creation and profile information for a Bambu account |
• Performance of a contract • Consent |
|
• Customers, if a natural person • Users (who may be customer employees) |
Name, job title, email address, signature (if wet signed or a copy of their autograph is used), customer name and address, and information about how you heard about us. |
• If your company enters into a contractual relationship with us • Deliver the Services you have requested, including facilitating your messages to other users or groups and for account and contract management (including customer support) |
• Performance of a contract |
|
• Customers, if a natural person |
We will only receive the last 4 digits of the credit card number along with transaction-related information (i.e., payment date, amount, device type, IP address and card type). If custom billing is arranged, the account contact’s name, email, job title, company and address may be collected as well. |
Processing payments for the Services |
• Performance of a contract |
|
• Customers, if a natural person • Users (who may be customer employees) |
Name, email address, mailing address, phone number, company/company URL, account ID, type of inquiry, or any other personal information you choose to provide to us, such as how many contacts you have/your company has, which products interest you, what platform is currently being used, and meeting dates and times, applicable marketing interests and communication preferences |
• Communications with customers and users of Bambu. • Marketing and Sales of our Services to individuals, including through email, direct mail, phone, video call, text message, or through other forms of communications platforms (i.e. WhatsApp) • To send gifts to you • Conduct marketing research • Opportunity tracking, conversion, and lead generation |
• Legitimate interest to communicate with and market to customers |
|
• Customers, if a natural person • Users (who may be customer employees) |
Your username, email, and password. You may add a profile picture. When using the platform, a user’s history on registrations, courses taken, scores, and product certifications, survey responses and lead status as well as unique identifier are captured. |
To facilitate joining and administration of training |
• Legitimate interest in providing the training to customers and users • Consent |
|
• Customers, if a natural person • Users (who may be customer employees) |
Your account credentials, your Bambu account ID, email address and partner ID. Your account will also show classifications based on your involvement in the Community and badges based on your involvement/accomplishment (both of which can be managed in the profile settings to be visible or not visible to other users of the Community) as well as all content you share via the Community function. Moreover, you may add your name, username, job title, city, country, profile picture, social media (Instagram and Twitter), and bio/signature details that may be visible to the other users of the Community. |
Bambu Community – to facilitate participation in the Bambu network with other account holders and as required to administer the Bambu community. |
• Legitimate interest in providing the Bambu Community to customers and users • Consent |
|
• Customers, if a natural person • Users (who may be customer employees) |
Personal information that you provide when you sign up (where available). This information includes your name, email, title, business phone number, company name, company URL and office address. |
• Participation in the Bambu Partner program. • To process your application to become a Bambu Partner and to administer the Bambu Partner program. |
• Legitimate interest in providing the Bambu Partner program to customers and users • Consent |
|
• Customers, if a natural person • Users (who may be customer employees) |
Name, email, and phone number), your company, your job title, the office address and any other information you provide to us. |
Events, Surveys, Feedback and Promotions (including Contests, Sweepstakes, Webinars, and Training Sessions). |
• Legitimate interest in communicating with customers and users and administering promotions to customers and users • Consent |
|
• Customers, if a natural person • Users (who may be customer employees) |
Log Data: your internet protocol (IP) address, operating system, browser details such as type, ID, and configuration, unique identifiers, local and language settings; session logging, heatmaps and scrolls; screen resolution, ISP, device type and version, the referring URL, date/time of your visit, the time you spent on our services and any errors that may occur during your visit to our Services. |
• Administer, improve and personalize our Services, including by recognizing an individual and remembering their information when they return to our Services and analyzing our Customer base • Test, enhance, update and monitor the Services, or diagnose or fix technology problems Help maintain the safety, security and integrity of our property and Services, technology assets and business • Enforce our Terms of Service, resolve disputes, carry out our obligations and enforce our rights, and protect our business interests and the interests and rights of third parties • Prevent, investigate or provide notice of fraud or unlawful or criminal activity • Review our business performance |
• Legitimate interest in enhancing and improving the Bambu Services • Consent • Performance of a Contract • Comply with Legal Obligations |
B. HOW LONG WILL WE STORE YOUR PERSONAL DATA
We will usually store the personal data we collect about you for no longer than necessary for the purposes as set above, and in accordance with our legal obligations and legitimate business interests.
The criteria used to determine the period for which personal data about you will be retained varies depending on the legal basis under which we process the personal data:
In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data, as well as the potential risk of harm from unauthorized use or disclosure of your personal data.
C. MARKETING AND ADVERTISING
From time to time we may contact you with information about our services, including sending you marketing messages and asking for your feedback on our Services. Most marketing messages we send will be by email or via messaging platform. For some marketing messages, we may use personal data we collect about you to help us determine the most relevant marketing information to share with you.
We may send you marketing messages if you have given us your consent to do so or where we have relied on the soft opt-in rule (where applicable). If you wish to unsubscribe from such communication, please see the details set out above under “Control over Your Information”.
D. STORING AND TRANSFERRING YOUR PERSONAL DATA
Security. We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, change or damage. All personal data we collect will be stored by our cloud hosting provider on secure servers. We will never send you unsolicited emails or contact you by phone requesting credit or debit card information.
International Transfers of your Personal data. The personal data we collect may be transferred to and stored in countries outside the EEA, UK and Switzerland in countries where we and our third-party service providers have operations, including in the United States, where Bambu, Inc. is located.
In the event of a transfer by Bambu, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as standard contractual clauses adopted by the European Commission.
If you wish to enquire further about these safeguards used, please contact us using the details set out under the “Contact Us” section of the Privacy Notice.
E. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL DATA
In accordance with applicable privacy law, you may have the following rights in respect of your personal data that we hold:
You also have the right to lodge a complaint to your local data protection authority. If you are based in the EU, information about how to contact your local data protection authority is available here. If you are based in:
If you wish to exercise one of these rights, please submit a request by filling out our request form.
Due to the confidential nature of data processing, we may ask you to provide proof of identity when exercising the above rights to verify your identity.
ADDITIONAL DISCLOSURES FOR SINGAPORE RESIDENTS
These additional disclosures for Singapore residents (“Singapore Disclosures”) supplement the information contained in our Privacy Notice and apply to the processing of individuals’ personal data collected from Singapore by Bambu.
These Singapore Disclosures provide additional information about how we collect, use, disclose and otherwise process personal data of individuals in Singapore in accordance with the Singapore Personal Data Protection Act 2012 (“PDPA”).
Unless otherwise expressly stated, all terms in these Singapore Disclosures have the same meaning as defined in the Privacy Notice or as otherwise defined in the PDPA.
When we use the term “personal data” in this Singapore Disclosures notice, we mean data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which the organization has or is likely to have access.
A. OVERSEAS TRANSFERS OF YOUR PERSONAL DATA
Your personal data may be transferred to, stored and/or processed within and outside Singapore (including but not limited to the United States), consistent with this Privacy Notice.
In the event of a transfer of your personal data by Bambu to a location outside Singapore, we will take appropriate measures, in compliance with the applicable law, to ensure that your transferred personal data is accorded a standard of protection that is comparable to that under the PDPA.
B. RETENTION OF YOUR PERSONAL DATA
We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws.
We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for legal or business purposes.
C. PROTECTION OF YOUR PERSONAL DATA
We will implement reasonable security measures designed to ensure that your personal data is adequately protected and secured. Appropriate security arrangements will be taken to prevent any unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your personal data. However, we cannot assume responsibility for any unauthorized use of your personal data by third parties which are wholly attributable to factors beyond our control.
D. YOUR RIGHTS UNDER THE PDPA
If you are using the Services from Singapore, you have the following rights in accordance with the PDPA, subject to certain limitations/exceptions under the law:
|
The Right to Access |
You have the right to access personal data about you that is in the possession or under the control of Bambu, and information about how the data was used or disclosed by Bambu within a year prior to the date of your request. |
|
The Right to Correction |
You have the right to request for Bambu to correct an error or omission in your personal data that is in the possession or under the control of Bambu. |
|
The Right to Withdraw Consent |
You have the right to withdraw any consent given, or deemed to have been given to Bambu, in respect of the collection, use or disclosure by Bambu of your personal data for any purpose. Whilst we respect your decision to withdraw your consent, please note that if you withdraw your consent to the use of your personal data, you may not be able to use relevant Services. We will, in such circumstances, notify you before completing the processing of your request. Please note that withdrawing consent does not affect our right to continue to collect, use, disclose or process your personal data where such collection, use, disclosure, and processing without consent is permitted or required under applicable laws. |
If you wish to exercise one of these rights, please submit a request by filling out our request form, selecting “other” regarding the rights of law, then place your request with reference to “Singapore”.
E. DATA PROTECTION OFFICER
If you have any complaints, queries, requests or clarifications regarding how we are handling your personal data or about how we are complying with the PDPA, please contact our data protection officer at privacy@bambuwallet.com.
Bambu complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. Bambu has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Bambu has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
The Federal Trade Commission has jurisdiction over Bambu’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).
In the context of an onward transfer, Bambu has responsibility for the processing of personal information it receives under the EU-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf. Bambu shall remain liable under the Principles if its agent processes such personal information in a manner inconsistent with the Principles, unless Bambu proves that it is not responsible for the event giving rise to the damage.
In compliance with the EU-U.S DPF, the UK Extension to the EU-U.S DPF, and the Swiss-U.S DPF Principles, Bambu commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the EU-U.S DPF, the UK extension to the EU-U.S DPF, and the Swiss-U.S Data Privacy Framework Principles. EU, UK, and Swiss individuals with inquiries or complaints should first contact:
Bambu has further committed to refer unresolved privacy complaints under the Data Privacy Framework program to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit here for more information and to file a complaint. This service is provided free of charge to you.
If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration through the Data Privacy Framework Panel. For more information on this option, please see Annex I of the EU-U.S. Data Privacy Framework Principles, here.
If you have any questions or concerns about how Bambu uses your personal data, you can contact us:
Ireland (EU):
EDPO
Ground Floor
71 Lower Baggot Street
Dublin D02 P593
IRELAND
United Kingdom:
EDPO UK
8 Northumberland Avenue
London WC2N 5BY
UNITED KINGDOM
Switzerland:
EDPO Switzerland
Rue de Lausanne 37
1201 Geneva
SWITZERLAND
Discover how Bambu’s innovative solutions can elevate your brand, boost engagement, and drive customer loyalty.
Stay up to date with the latest news, announcements, and articles.
Read about our privacy policy.
Customize your wallet pass from one of our templates and download it instantly.
