Developer: Bau Honi | Company: Bau Honi, Chaap Lao Inc.
559 Grand Valley Dr, Cambridge - N3H 2S2, Canada (CA)
Email: assist@bauhoni.buzz | Phone: +1 (443) 978-4577
Website: https://www.bauhoni.buzz
Bau Honi, Chaap Lao Inc. (hereinafter referred to as Bau Honi, we, us, or our) is committed to protecting the privacy of individuals who visit our website and use our services. This Privacy Policy explains in detail how we collect, use, disclose, and safeguard your information when you visit https://www.bauhoni.buzz or interact with our digital products, tools, and communications. Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our services immediately.
We operate under the applicable privacy laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA), as well as international frameworks such as the General Data Protection Regulation (GDPR) where applicable. Bau Honi acts as a data controller for the information you provide to us. Our registered address is 559 Grand Valley Dr, Cambridge - N3H 2S2, Canada. As a company built on trust and transparency, we have designed our data practices to give you meaningful control over your personal information. This document covers all aspects of data processing, from collection to deletion, and explains the legal grounds we rely on.
We understand that privacy policies are often dense and legalistic. Therefore we have structured this document into 15 distinct sections, each addressing a core aspect of our data handling. Whether you are a casual visitor, a registered user, or a business partner, this policy applies to you. We encourage you to print or save a copy for your records. Our goal is to be as clear as possible: we do not sell your personal data, we do not use dark patterns, and we respect your choices. If you have any questions after reading this policy, please contact our privacy team at assist@bauhoni.buzz.
This policy may be updated from time to time. We will notify you of material changes by posting the updated version on this page with a revised date. Your continued use of the website after any changes indicates your acceptance of the new terms. We recommend that you review this Privacy Policy periodically. The current version was last updated in April 2025. Throughout this document, the terms personal information and personal data refer to any information relating to an identified or identifiable natural person.
We collect several types of information from and about users of our website and services. This includes information by which you may be personally identified, such as your name, postal address, email address, telephone number, and any other identifier that can be used to contact you online or offline (personal information). We also collect information that is about you but does not identify you individually, such as demographic data, usage patterns, and aggregated statistics. Additionally, we collect technical data such as IP addresses, browser types, operating systems, and browsing behavior.
The categories of information we collect can be summarized as follows: (a) Identity Data: first name, last name, username or similar identifier, title, date of birth (if provided). (b) Contact Data: billing address, delivery address, email address, telephone numbers. (c) Financial Data: payment card details, bank account information, but only through secure third-party payment processors; we do not store full payment credentials on our servers. (d) Transaction Data: details about payments to and from you, and details of products or services you have purchased from us. (e) Technical Data: internet protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use.
We also collect Profile Data: your username and password, purchases or orders made by you, preferences, feedback, and survey responses. Usage Data includes information about how you use our website, products, and services. Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences. We do not intentionally collect sensitive categories of personal data (such as race, religion, health information) unless you voluntarily provide it in a message or form. If you provide such data, you explicitly consent to its processing for the purpose of responding to your inquiry.
We also collect information that you provide when you fill in forms, correspond with us by phone, email, or otherwise, subscribe to newsletters, search for a product, participate in discussion boards or social media functions, enter a competition or survey, and when you report a problem with our site. The provision of certain personal data is mandatory if you wish to receive specific services: for example, we need your email address to send you account confirmation. Without that data, we may be unable to fulfill your request.
We use different methods to collect data from and about you. The primary method is direct interactions: you give us your identity, contact, and financial data by filling in forms, creating an account, subscribing to our service, posting comments, or corresponding with us by phone, email, or live chat. This includes personal data you provide when you apply for our products, subscribe to our newsletter, request marketing to be sent to you, enter a competition or survey, or give us feedback. Every form on our website clearly indicates which fields are required and which are optional.
Automated technologies or interactions: as you interact with our website, we automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our Cookie Policy for more details. We use analytics services such as Google Analytics to help us understand how users engage with the site. These tools use cookies to collect standard internet log information and visitor behavior data.
Third-party sources: we may receive personal data about you from various third parties and public sources. For example, we may receive analytics data from providers like Google, social media platforms (if you interact with our social media pages), and payment processors who provide us with transaction confirmations but not full card details. We also obtain data from publicly available sources such as corporate registries and business directories, but only to the extent permitted by law. If we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data.
We also collect information through our customer support interactions. When you contact us via email at assist@bauhoni.buzz or call +1 (443) 978-4577, we may keep a record of that correspondence. We may also record calls for quality and training purposes, with your consent where required by law. In addition, we may collect information from third-party partners who refer you to our services, but we ensure that such partners have obtained your consent to share your data with us. Every collection point is designed to be transparent and to minimize data collection to what is necessary.
We distinguish between personal information and non-personal information. Personal information is any data that can be used to identify you as an individual. This includes your full name, email address, phone number, billing address, IP address (in some jurisdictions), and payment data. Non-personal information includes aggregated data, anonymized statistics, and browsing patterns that cannot be linked back to you. We treat pseudonymized data as personal information if it can reasonably be used to identify you.
Within personal information, we further categorize data as mandatory or voluntary. Mandatory data is necessary for us to provide our core services: for example, to process an order we need your name, shipping address, and payment confirmation. Voluntary data includes preferences, demographic information, and survey responses. You are never obliged to provide voluntary data, but it helps us improve our offerings. We also collect special categories of data only with your explicit consent, such as dietary restrictions if you attend an event we host.
Technical data such as browser type, device type, and operating system are considered personal information when combined with an identifier like an IP address. We use this data to ensure our website functions correctly and to detect fraud. Log data includes pages visited, time spent, and referral URLs. This data is kept in a form that does not directly identify you for analytics purposes, but we retain the ability to link it to a user account if you are logged in. We do not engage in profiling that produces legal effects without your consent.
We also collect communication data: the content of messages you send us, including any attachments. We store this data to respond to your inquiries and to improve our service. If you participate in community forums or comment sections, your username and the content of your posts are visible to other users. You should be aware that any information you disclose in these areas becomes public. We recommend that you do not share sensitive personal data in public forums. Our website may contain links to third-party sites; we are not responsible for their privacy practices.
We use the information we collect for the following purposes: to present our website and its contents to you, to provide you with information, products, or services that you request from us, to fulfill any other purpose for which you provide it, to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection, to notify you about changes to our website or any products or services we offer or supply, to allow you to participate in interactive features of our website when you choose to do so, and in any other way we may describe when you provide the information.
We also use your data to improve our website and services: we analyze usage patterns to understand which features are most popular, to detect and fix technical issues, and to develop new offerings. Marketing and advertising: with your consent, we may use your email address to send you newsletters, special offers, and information about our products. You can opt out at any time by clicking the unsubscribe link in any email or by contacting us. We do not sell your personal data to third parties for their own marketing purposes. We may use aggregated data to show general trends, such as the number of visitors from a certain region.
Legal and compliance: we may use your information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests. This includes responding to subpoenas, court orders, or other legal demands. We also use your data to protect our rights, property, or safety, and that of our users or others. This includes fraud detection and prevention, and enforcing our Terms of Service. We may also use your data to manage risk, resolve disputes, and troubleshoot problems. Where we process data based on your consent, you have the right to withdraw that consent at any time.
We also use information for internal business purposes such as data analysis, audits, developing new products, enhancing our website, improving our services, identifying usage trends, and determining the effectiveness of our promotional campaigns. We may combine information we collect from you with information obtained from other sources to help us improve the accuracy of our records and to provide you with a more seamless experience. For example, we may update your address using data from shipping carriers. All processing is carried out in accordance with applicable law and our internal data protection policies.
Under the General Data Protection Regulation (GDPR) and similar laws, we must have a lawful basis to process your personal data. The legal bases we rely on include: (a) Consent: you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing emails. You can withdraw your consent at any time. (b) Contract: the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract, such as creating an account or purchasing a service. (c) Legal obligation: the processing is necessary for us to comply with the law, such as retaining records for tax purposes.
We also rely on legitimate interests as a legal basis, provided that our interests do not override your rights and freedoms. Our legitimate interests include: running our business, providing and improving our services, communicating with you, ensuring network and information security, preventing fraud, and marketing our products. When we rely on legitimate interests, we conduct a balancing test to ensure that your privacy rights are respected. You have the right to object to processing based on legitimate interests. We also process data for the performance of a task carried out in the public interest, but this is rare for our commercial activities.
For sensitive data (such as health information), we rely on your explicit consent or another specific legal basis such as the establishment, exercise, or defense of legal claims. We do not process sensitive data without a clear legal justification. If you provide us with information about third parties (such as emergency contacts), you must ensure that you have the right to do so and that they are aware of how their data will be used. We will process that data in accordance with this policy and applicable law.
We document our processing activities and maintain records of consent where required. If the legal basis for processing changes, we will notify you and update this policy accordingly. For example, if we initially process your data based on consent and later rely on a contract, we will inform you. We do not use your data in ways that are incompatible with the purposes for which it was collected. If we need to use your data for an unrelated purpose, we will seek your consent or ensure another lawful basis exists. You can contact us at any time to learn more about the legal basis for a specific processing activity.
We may share your personal data with third parties only in the circumstances described in this policy. We share data with service providers who perform functions on our behalf, such as payment processing, hosting, email delivery, customer support, analytics, and marketing assistance. These providers are contractually bound to protect your data and may only use it for the specific purposes we instruct. We require them to implement appropriate security measures and to not use your data for their own purposes. Examples include Stripe for payments, Google Cloud for hosting, and SendGrid for transactional emails.
We may disclose your personal data to professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services to us. We may also share data with regulators and other authorities if required by law or to protect our rights. In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal data, as well as any choices you may have.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share aggregated or anonymized data that cannot reasonably identify you for research, marketing, or other purposes. For example, we may share statistics about the number of visitors to our site with potential partners. We may also share your data with your consent or at your direction, such as when you choose to link your account with a social media service. We are not responsible for the privacy practices of those third-party services.
We may also share data to enforce our Terms of Service, to protect the security and integrity of our services, to protect our rights or property, or to protect the safety of others. This includes sharing with law enforcement if we believe in good faith that disclosure is necessary to prevent physical harm or financial loss, or to report suspected illegal activity. We will attempt to notify you before disclosing your data unless doing so would be prohibited by law or would compromise an investigation. We maintain a list of third parties with whom we share data; you can request a copy by contacting us.
Bau Honi is based in Canada, and your personal data may be transferred to, stored, and processed in countries outside your own, including Canada, the United States, and other jurisdictions where our service providers operate. These countries may have data protection laws that are different from those in your country of residence. For example, if you are located in the European Economic Area (EEA), your data may be transferred to Canada, which has been deemed adequate by the European Commission under the adequacy decision. For transfers to other countries, we implement appropriate safeguards.
We use Standard Contractual Clauses (SCCs) approved by the European Commission for transfers of personal data from the EEA to third countries that do not have an adequacy decision. We also rely on other transfer mechanisms such as Binding Corporate Rules (BCRs) where applicable. For transfers from the UK, we use the International Data Transfer Agreement (IDTA) or SCCs as appropriate. We ensure that any third-party service provider that processes data on our behalf outside your jurisdiction is contractually bound to provide a level of protection equivalent to that in your home country.
We also transfer data to the United States for certain services, such as cloud hosting and analytics. The US does not currently have an adequacy decision from the European Commission, but we rely on SCCs and the Data Privacy Framework (where applicable) to ensure adequate protection. We regularly review our transfer mechanisms and update them as required by law. If you are in a jurisdiction where transfer of your data requires your consent, we will obtain your explicit consent before transferring your data internationally.
You have the right to ask for a copy of the safeguards we use to protect your data when it is transferred internationally. To exercise this right, please contact us at assist@bauhoni.buzz. We will provide you with information about the transfer mechanism and the countries involved. We do not transfer your data to countries that do not provide adequate protection unless we have implemented appropriate safeguards. Our goal is to ensure that your data receives a high standard of protection wherever it is processed.
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data, and whether we can achieve those purposes through other means, as well as applicable legal requirements.
For example, we retain account information (such as name, email, and address) for as long as your account is active and for a reasonable period thereafter to allow you to reactivate your account. Transaction data is retained for seven years to comply with tax and accounting laws. Usage data and analytics are retained for a shorter period, typically 26 months, unless aggregated. Marketing preferences are retained until you opt out or delete your account. We may retain anonymized data indefinitely for research and statistical purposes.
When we no longer need your personal data, we will securely delete or anonymize it. If deletion is not immediately possible (for example, because the data is stored in backup archives), we will securely isolate it and prevent further processing until deletion is possible. We have a data retention policy that is reviewed annually. We also ensure that our service providers adhere to similar retention standards. You can request deletion of your data at any time, subject to certain exceptions such as legal obligations.
We also retain data as necessary to protect our legal interests, such as for the establishment, exercise, or defense of legal claims. This may include retaining data beyond the general retention period if we are involved in a dispute or regulatory investigation. We will inform you if we need to retain your data for such purposes. If you have any questions about our retention periods, please contact us. We are committed to not keeping your data longer than necessary.
We have implemented appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security measures include encryption of data in transit using TLS 1.3, encryption of data at rest using AES-256, firewalls, intrusion detection systems, and regular security audits. We also enforce strict access controls: only employees and contractors who need access to your data to perform their duties are granted access, and they are bound by confidentiality agreements.
We conduct regular vulnerability assessments and penetration testing on our systems. We have a dedicated security team that monitors for potential threats and responds to incidents. We also require our third-party service providers to maintain high security standards. For example, our payment processor is PCI DSS compliant. We use tokenization for payment data, meaning we never store full credit card numbers on our servers. We also use multi-factor authentication for administrative access to our systems.
Despite our efforts, no security measure is 100% effective. We cannot guarantee the absolute security of your data. However, we will notify you and the relevant supervisory authority of any data breach that is likely to result in a risk to your rights and freedoms within 72 hours of becoming aware of it, as required by law. We will also provide you with information about the breach and the steps we are taking to address it. You should also take steps to protect your data, such as using strong passwords and not sharing your login credentials.
We have procedures in place to deal with any suspected personal data breach. Our incident response plan includes containment, investigation, notification, and remediation. We regularly train our staff on data protection and security best practices. If you have any concerns about the security of your data, please contact us immediately at assist@bauhoni.buzz. We take your privacy and security seriously and are committed to protecting your information.
Under applicable data protection laws, you have the following rights regarding your personal data: the right to access, rectify, erase, restrict processing, data portability, object to processing, and the right not to be subject to automated decision-making. You also have the right to withdraw consent at any time where we rely on consent as a legal basis. To exercise any of these rights, please contact us at assist@bauhoni.buzz. We will respond to your request within 30 days, or as required by law.
Right of access: you have the right to obtain confirmation as to whether we process your personal data and, if so, to request a copy of that data. We will provide the information in a commonly used electronic format. Right to rectification: you can ask us to correct any inaccurate or incomplete data. Right to erasure (right to be forgotten): you can request that we delete your personal data, subject to certain exceptions such as legal obligations or legitimate interests. We will assess your request and inform you of the outcome.
Right to restrict processing: you can ask us to suspend the processing of your data in certain circumstances, such as if you contest its accuracy or object to processing. Right to data portability: you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible. Right to object: you can object to processing based on legitimate interests, including profiling, and to direct marketing. We will comply unless we have compelling legitimate grounds.
You also have the right to lodge a complaint with a supervisory authority. In Canada, you can contact the Office of the Privacy Commissioner of Canada. In the EEA, you can contact your local data protection authority. We encourage you to contact us first so that we can resolve any issues. We do not discriminate against you for exercising your rights. We may need to verify your identity before processing your request. We will only use the information you provide to verify your identity and to process your request.
Our website and services are not intended for children under the age of 16 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you are a parent or guardian and you believe that your child has provided us with personal data without your consent, please contact us immediately at assist@bauhoni.buzz. We will take steps to delete that information as soon as possible. If we become aware that we have collected personal data from a child without verification of parental consent, we will delete it.
We do not market our products or services to children. We do not use any features that are specifically directed to children, such as games or activities that collect personal data. In the event that we need to collect personal data from a child for a specific purpose (such as a contest), we will obtain verifiable parental consent before doing so. We will also provide parents with the ability to review, update, or delete their child's data. We comply with the Children's Online Privacy Protection Act (COPPA) in the United States and similar laws in Canada.
We encourage parents to monitor their children's online activities and to teach them about protecting their privacy. If you are a child, please do not send any personal data to us without your parent's or guardian's permission. We will never ask a child to provide more information than is reasonably necessary to participate in an activity. If we discover that we have inadvertently collected data from a child, we will delete it promptly and may close any associated account. We also recommend that parents review our privacy practices regularly.
We do not use any third-party services that collect data from children without parental consent. Our analytics providers are configured to ignore data from users under 16. We also use age-gating mechanisms where appropriate. If you have any concerns about children's privacy on our site, please contact us. We are committed to protecting the privacy of minors and to complying with all applicable laws. This policy is part of our broader commitment to responsible data stewardship.
Our website may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit. We also use third-party services to provide certain features, such as payment processing, analytics, and email delivery. These providers have their own privacy policies.
We use the following categories of third-party service providers: payment processors (Stripe, PayPal), cloud hosting (AWS, Google Cloud), analytics (Google Analytics, Hotjar), email marketing (SendGrid, Mailchimp), customer support (Zendesk), and content delivery networks (Cloudflare). We have data processing agreements with each of these providers that ensure they comply with applicable privacy laws and only process data for the purposes we specify. We also conduct due diligence before engaging new providers.
Some third-party services may use cookies or other tracking technologies. For example, Google Analytics uses cookies to collect information about your use of our website. We have configured Google Analytics to anonymize IP addresses. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on. We also use social media buttons (e.g., Twitter, LinkedIn) that may set cookies. We do not control these cookies. Please check the privacy policies of these social media platforms for more information.
We may also integrate with third-party services that you choose to use, such as signing in via Google or Facebook. If you use these features, those third parties will share certain information with us (such as your name and email address) in accordance with their privacy policies. We will use that information only for the purposes for which it was provided. You should review the privacy settings of your social media accounts to control what information is shared. We are not responsible for the privacy practices of these third parties.
We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by email (if you have provided your email address) and/or by posting a prominent notice on our website. The date at the top of this policy will be updated to reflect the latest revision. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes constitutes your acceptance of the new policy.
We will not make retroactive changes that reduce your privacy rights without your explicit consent. If we change the purposes for which we use your data, we will seek your consent if required by law. We will also update our internal records and ensure that our staff are trained on any changes. We maintain a version history of this policy; you can request previous versions by contacting us. We are committed to transparency and will clearly communicate any changes.
Minor changes, such as grammatical corrections or updates to contact information, may be made without notice. However, we will always indicate the effective date. If you have any questions about a change, please contact us. We value your trust and will not make changes that undermine the protections described in this policy. If you disagree with any change, you may close your account and stop using our services. We will provide you with a reasonable period to review material changes before they take effect.
We also monitor legal developments to ensure our policy remains compliant. If new laws or regulations require changes, we will implement them promptly. We may also update this policy to reflect new products or features. We will always be transparent about our data practices. This policy is part of our Terms of Service. By using our website, you agree to be bound by this Privacy Policy as updated from time to time. Thank you for trusting Bau Honi, Chaap Lao Inc.
If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We are committed to responding to your inquiries within a reasonable timeframe. You can reach us by email at assist@bauhoni.buzz, by phone at +1 (443) 978-4577, or by mail at 559 Grand Valley Dr, Cambridge - N3H 2S2, Canada. Our data protection officer (DPO) can be contacted at the same email address.
We appreciate your feedback and will do our best to address any concerns. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In Canada, you can contact the Office of the Privacy Commissioner of Canada at 30 Victoria Street, Gatineau, QC K1A 1H3, or via their website. In the European Union, you can contact your local supervisory authority. We will cooperate with any such authority as required by law.
When contacting us, please provide as much detail as possible about your request, including your name, contact information, and the specific data or issue you are concerned about. We may need to verify your identity before processing your request. We will not use the information you provide for any purpose other than responding to your inquiry. We will retain your correspondence as necessary to document our compliance and to improve our processes.
We are dedicated to maintaining the privacy and security of your personal data. If you have any suggestions on how we can improve our privacy practices, we welcome your input. This Privacy Policy was drafted with care and is intended to be clear and comprehensive. Thank you for being a valued user of Bau Honi, Chaap Lao Inc. Your trust is important to us, and we are committed to protecting your privacy.