Privacy Policy
Last updated: 14 September 2026
This Privacy Policy explains how Varando LTD (“Fancy Bonnet”, “we”, “us”, or “our”), a company registered in the Republic of Cyprus, collects, uses, and protects your personal data when you visit fancybonnet.com (the “Site”) or place an order with us. We act as the data controller for the personal data described in this policy.
1. Information we collect
- Account and order information: name, billing and delivery address, email address, phone number, and order history.
- Payment information: processed directly by our payment provider(s). We do not store full card numbers on our own servers.
- Browsing information: IP address, browser type, device information, and pages viewed, collected automatically and via cookies (see our Cookie section below).
- Communications: any information you provide when you contact us, e.g. via email or a contact form, including details relevant to arranging a vehicle viewing or inspection.
2. How we use your information
- To process and fulfil your orders, including shipping or vehicle collection arrangements, invoicing, and customer service.
- To communicate with you about your order, including shipping confirmations and updates.
- To improve our Site, our range, and your shopping experience.
- To send you marketing communications, but only where you have opted in — you can withdraw this consent at any time.
- To detect and prevent fraud and to comply with our legal obligations.
3. Legal basis for processing
Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases: performance of a contract (processing your order), legitimate interest (fraud prevention, Site improvement), consent (marketing communications, non-essential cookies), and legal obligation (accounting and tax records).
4. Who we share your data with
We share personal data only with third parties who need it to help us run our business, including: payment processors, delivery and vehicle transport companies, IT and email service providers, and analytics providers. Each of these providers is only permitted to use your data for the specific service they provide to us. We do not sell your personal data to third parties.
5. Data retention
We keep order and account data for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Marketing data is kept until you withdraw your consent.
6. Your rights
Under the GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to certain processing; and request a portable copy of your data. To exercise any of these rights, contact us at support@fancybonnet.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, or with the data protection authority in your own country of residence.
7. Cookies
We use cookies and similar technologies to operate the Site, remember your basket, and — with your consent — measure traffic and personalise marketing. You can control or withdraw cookie consent at any time via your browser settings or the cookie banner on our Site.
8. International transfers
Where any of our service providers are located outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data.
9. Children’s privacy
Our Site is not directed at children, and we do not knowingly collect personal data from anyone under 16.
10. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your data, contact us at support@fancybonnet.com.