Privacy
This policy covers this website, badbundle.com. Each app has its own policy; see Vault, GPS and Limits.
Last updated: 14 September 2026.
Who is responsible for your data
The data controller is Bad Bundle Limited, a company registered in England and Wales, company number 16035056, whose registered office is Silverstream House, 4th Floor, 45 Fitzroy Street, Fitzrovia, London W1T 6EB, United Kingdom.
For anything to do with this policy or your data, email hello@badbundle.com.
What this website collects
Bad Bundle Limited does not run analytics on this website. There are no analytics scripts, no cookies set by us, and no tracking pixels.
The only routine data collected is the standard internet request data needed to send the site to your browser — your IP address, the page requested, your browser's user agent, and the time of the request. This is handled by our hosting providers rather than by us, and we do not combine it with anything else or use it to identify you.
Who processes it
This site is served by Google Firebase Hosting, which delivers it through the Fastly content delivery network. Both act as processors on our behalf and handle the request data described above.
Email sent to our published addresses is routed by Cloudflare Email Routing. Cloudflare handles our email only; it is not our website host or CDN.
These providers operate globally, so request data may be processed on servers outside the United Kingdom. Where that happens, the transfer is covered by the providers' own safeguards, such as the UK International Data Transfer Addendum or equivalent standard contractual clauses.
Email you send us
If you email us, we keep the message so we can reply and keep a record of the conversation. That means your email address, your name if you give it, and whatever you choose to put in the message.
We keep support and enquiry email for two years from the last message in the thread, then delete it, unless we need to keep it longer for a legal reason such as a dispute or a tax record.
The lawful basis is legitimate interests — we cannot answer a question without reading it and replying to it.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct it if it is wrong
- ask us to delete it
- ask us to restrict how we use it, or object to us using it
- ask for it in a portable format
Email hello@badbundle.com to exercise any of these. Data protection requests are answered within one month, as the law requires. That is a statutory duty and is separate from general support, which carries no such commitment.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk/make-a-complaint, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Other websites
Bad Bundle Limited does not control, and is not responsible for, the content of externally linked websites. That includes any link from this site to another site. Other websites may track you, store cookies, and collect other kinds of data.
Changes to this policy
Changes to this policy are reflected on this page, with the date at the top. No notice is given by any other means.
- 14 September 2026: Named the correct hosting providers, and added controller details, retention periods, your rights, and the ICO complaint route.
- First published 2024.