Privacy policy

 

This Privacy Policy describes how babyboofashionl.shop collects, uses, stores, shares and protects personal information when you visit our website, purchase our products, create an account, contact us or otherwise interact with our services.

For the purposes of applicable data protection law, babyboofashionl.shop is the data controller responsible for personal information collected through this website, except where another organisation acts as an independent controller.

This Privacy Policy applies to customers and visitors in the United Kingdom and is intended to reflect the requirements of applicable UK data protection and electronic communications laws, including the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and any applicable amendments or replacement legislation.

1. Contact Information

For questions about this Privacy Policy, our use of personal information or your data protection rights, contact us at:

Website: babyboofashionl.shop
Email: info@babyboofashionl.shop

Please include sufficient information for us to understand and respond to your request.

2. Personal Information We Collect

The personal information we collect depends on how you use our website and services.

Information You Provide Directly

We may collect information that you provide when you:

• Place or attempt to place an order

• Create or manage a customer account

• Subscribe to marketing communications

• Contact customer service

• Request a return, refund, cancellation or exchange

• Submit a review, survey response or other content

• Participate in a promotion

• Report a problem with an order or product

This information may include:

• Full name

• Billing address

• Delivery address

• Email address

• Telephone number

• Account login information

• Order number

• Products ordered

• Size, colour and product preferences

• Payment method and payment status

• Delivery and tracking information

• Return and refund information

• Communications with customer service

• Photographs or videos submitted in connection with a product complaint

• Marketing preferences

• Reviews and feedback

• Any other information you choose to provide

Payment Information

Payments are processed through Shopify and authorised third-party payment providers.

Depending on the payment method selected, payment providers may collect information such as:

• Payment card details

• Cardholder name

• Billing address

• Bank or payment account information

• Transaction authentication information

• Fraud-prevention information

babyboofashionl.shop does not normally receive or store complete payment card numbers or card security codes. We may receive limited payment information, such as the payment method, transaction status, billing details and the final digits of a payment card.

Payment providers process personal information in accordance with their own privacy notices and legal obligations.

Information Collected Automatically

When you browse or use our website, we and our technology providers may automatically collect information including:

• Internet Protocol address

• Device type

• Browser type and version

• Operating system

• Device identifiers

• Approximate location derived from an IP address

• Language and regional settings

• Referring website or advertising source

• Pages viewed

• Products viewed

• Search terms

• Links clicked

• Items added to or removed from a shopping basket

• Checkout activity

• Date and time of visits

• Session duration

• Website interaction information

• Cookie and similar technology identifiers

• Error logs and security information

We use this information to operate the website, maintain security, understand how visitors use our services, improve performance and, where permitted, measure advertising effectiveness.

Information Obtained from Other Sources

We may receive personal information from organisations that assist us with providing our services, including:

• Shopify

• Payment providers

• Delivery and logistics companies

• Fraud-prevention providers

• Website hosting and technology providers

• Analytics providers

• Advertising and social media platforms

• Customer service providers

• Email and communications providers

• Business and professional advisers

We may also receive information when a person purchases a product for you, provides your delivery details or contacts us on your behalf.

3. How We Use Personal Information

We may use personal information for the following purposes.

Processing and Fulfilling Orders

We use personal information to:

• Confirm and process orders

• Process payments

• Verify transaction information

• Arrange packing, fulfilment and delivery

• Provide order confirmations and tracking updates

• Manage cancellations, returns, exchanges and refunds

• Contact customers about order-related matters

• Resolve delivery or payment issues

• Maintain transaction and accounting records

Providing Customer Service

We use personal information to:

• Respond to enquiries

• Investigate complaints

• Provide information about products, sizing and availability

• Review damaged, defective or incorrect-item claims

• Resolve account, delivery, return and refund issues

• Maintain records of customer communications

Managing Customer Accounts

Where customer accounts are available, we use personal information to:

• Create and maintain accounts

• Authenticate account access

• Display order history

• Save customer preferences

• Prevent unauthorised access

• Support password-reset and account-recovery requests

Operating and Improving Our Website

We use personal information to:

• Provide website functions

• Remember shopping-basket contents

• Maintain checkout sessions

• Improve website navigation and performance

• Understand how customers use our website

• Diagnose technical problems

• Test website features

• Develop and improve products and services

Security and Fraud Prevention

We may use personal information to:

• Verify identities and transactions

• Detect and prevent fraud

• Identify suspicious activity

• Protect customer accounts

• Prevent misuse of promotions or returns

• Protect our website and systems

• Enforce our terms and policies

• Establish, exercise or defend legal claims

Fraud-prevention checks may involve automated tools that assess transaction, device, payment and order information.

Marketing and Advertising

Subject to applicable law and your choices, we may use personal information to:

• Send promotional emails or messages

• Inform you about products, offers and promotions

• Personalise marketing content

• Measure the performance of advertising campaigns

• Understand whether advertisements lead to website visits or purchases

• Create audiences for advertising platforms

• Limit repetitive or irrelevant advertising

You may unsubscribe from email marketing at any time by using the unsubscribe link in the message or contacting info@babyboofashionl.shop.

Unsubscribing from marketing will not prevent us from sending essential service communications concerning your account, order, payment, delivery, return or refund.

Legal and Regulatory Compliance

We may process personal information to:

• Comply with tax, accounting and consumer-protection requirements

• Respond to lawful requests from public authorities

• Comply with court orders and legal proceedings

• Maintain required business records

• Investigate suspected unlawful activity

• Protect our legal rights and the rights of customers and third parties

4. Lawful Bases for Processing

We rely on one or more lawful bases when processing personal information.

Performance of a Contract

We process personal information where necessary to:

• Accept and fulfil orders

• Process payments

• Deliver products

• Manage customer accounts

• Provide customer support

• Process returns, cancellations and refunds

• Take requested steps before entering into a contract

Without this information, we may be unable to process or fulfil an order.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests may include:

• Operating and improving our website

• Providing customer service

• Maintaining security

• Preventing fraud and misuse

• Understanding website performance

• Protecting legal rights

• Keeping appropriate business records

• Promoting products to existing customers where permitted

• Managing and developing our business

We consider the nature of the information, the purpose of processing and the potential effect on individuals before relying on legitimate interests.

Consent

We rely on consent where required, including for certain:

• Marketing communications

• Advertising technologies

• Analytics technologies

• Non-essential cookies and similar technologies

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Legal Obligation

We process personal information where necessary to comply with legal obligations, including accounting, taxation, consumer-protection, fraud-prevention and regulatory requirements.

Legal Claims and Other Permitted Grounds

Where applicable, we may process personal information to establish, exercise or defend legal claims or for another purpose authorised by law.

5. Cookies and Similar Technologies

Our website and service providers may use cookies, pixels, tags, local storage, scripts and similar technologies.

Cookies are small data files stored on a browser or device. Similar technologies may store or access information on a device or collect information about website interactions.

Essential Cookies

Essential cookies are necessary for the website to function and may be used to:

• Maintain secure sessions

• Operate the shopping basket

• Process checkout

• Remember privacy choices

• Prevent fraud

• Maintain website security

• Balance website traffic

• Provide requested website functions

Because these technologies are necessary to provide services requested by users, they may not require consent where permitted by law.

Functional Cookies

Functional cookies may remember preferences such as language, region, login details or website settings.

Analytics Cookies

Analytics cookies help us understand:

• How visitors find our website

• Which pages and products are viewed

• How visitors navigate the website

• Whether technical errors occur

• How website functions perform

Where required by law, analytics cookies are activated only after consent has been provided.

Advertising Cookies

Advertising technologies may be used to:

• Measure advertising performance

• Understand whether an advertisement resulted in a visit or purchase

• Personalise advertisements

• Create advertising audiences

• Limit how frequently advertisements are displayed

Where required by law, advertising cookies and similar technologies are activated only after valid consent has been provided.

Managing Cookie Preferences

You may accept, reject or manage non-essential cookies through the cookie banner or privacy preference controls available on our website.

You may also manage cookies through your browser settings. Blocking certain cookies may affect website functionality, shopping-basket operation, account access or checkout.

Withdrawing consent does not affect processing carried out before consent was withdrawn.

6. Direct Marketing

We may send marketing communications where:

• You have provided consent

• The communication is otherwise permitted under applicable electronic marketing rules

• You purchased or expressed an interest in similar products and were given an opportunity to opt out, where legally permitted

Every marketing email will include a method of unsubscribing.

You may also opt out by contacting:

info@babyboofashionl.shop

We may retain limited information on a suppression list after you unsubscribe so that we can respect your preference and avoid sending further marketing communications.

7. How We Share Personal Information

We may share personal information with service providers and other organisations where necessary to operate our business, fulfil orders, comply with law or protect legitimate interests.

Shopify

Our online store is hosted and supported by Shopify.

Shopify may process information concerning:

• Website visitors

• Customer accounts

• Orders

• Payments

• Checkout activity

• Device and browser activity

• Security and fraud-prevention signals

Shopify processes information to provide its commerce platform, infrastructure, security, analytics and related services. Shopify may also act as an independent controller for certain processing activities described in its own privacy documentation.

Payment Providers

We share transaction and identity information with payment providers to:

• Authorise payments

• Process transactions

• Prevent fraud

• Process refunds

• Manage payment disputes and chargebacks

• Comply with financial regulations

Fulfilment, Delivery and Logistics Providers

We may share names, addresses, telephone numbers, email addresses, order details and delivery instructions with:

• Warehouses

• Fulfilment providers

• Postal operators

• Couriers

• Shipping agents

• Customs and import authorities

These organisations use information to prepare, transport, track and deliver orders.

Technology and Service Providers

We may share information with providers that assist with:

• Website hosting

• Cloud storage

• Cybersecurity

• Fraud detection

• Customer service

• Email delivery

• SMS communications

• Analytics

• Advertising

• Product reviews

• Website optimisation

• Account authentication

• Returns management

• Business administration

Providers are permitted to process personal information only for authorised purposes and subject to appropriate contractual and security requirements, where applicable.

Advertising and Social Media Platforms

Where you have provided any required consent, we may disclose online identifiers, device information, website activity or transaction-related information to advertising and social media platforms.

These platforms may use information according to their own privacy notices and may act as independent data controllers.

You can manage applicable tracking through our privacy preference tools and your settings with the relevant platform.

Professional Advisers

We may share information with accountants, auditors, insurers, legal advisers and other professional advisers where reasonably necessary.

Public Authorities and Legal Recipients

We may disclose personal information where required or permitted by law, including to:

• Courts

• Regulators

• Law-enforcement agencies

• Tax authorities

• Customs authorities

• Government bodies

• Parties involved in legal proceedings

Business Transfers

If babyboofashionl.shop is involved in a merger, acquisition, restructuring, financing, sale of assets or transfer of business, personal information may be disclosed to relevant advisers, prospective purchasers and successor organisations.

Any recipient will be required to handle personal information in accordance with applicable law.

8. Selling Personal Information

babyboofashionl.shop does not sell personal information in exchange for monetary payment.

However, analytics or advertising technologies may involve the disclosure of identifiers or website activity to third-party platforms. Where such activity requires consent or an opt-out mechanism under applicable law, we will provide the relevant privacy controls.

9. International Data Transfers

Shopify and some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps intended to ensure an appropriate level of protection. Depending on the destination and circumstances, safeguards may include:

• A UK adequacy regulation

• The United Kingdom International Data Transfer Agreement

• The UK Addendum to approved contractual clauses

• Binding corporate rules

• Another legally recognised transfer mechanism

We may also rely on a permitted legal exception where appropriate.

You may contact us for further information about safeguards relevant to your personal information.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods depend on factors including:

• The nature and sensitivity of the information

• The reason it was collected

• The duration of the customer relationship

• Legal and accounting requirements

• Fraud-prevention needs

• Limitation periods for legal claims

• Whether a dispute or investigation is ongoing

• Technical backup and security requirements

Order, payment, transaction and accounting records may be retained for the period necessary to comply with tax, accounting, consumer-protection and legal obligations.

Customer service, complaint, return and refund records may be retained for as long as necessary to resolve the matter and establish or defend legal claims.

Marketing information is retained until you unsubscribe, withdraw consent, object to processing or the information is no longer required. Limited suppression information may be retained to record an opt-out request.

Cookie and similar technology information is retained according to the duration described in the relevant cookie or privacy preference tool.

When personal information is no longer required, we will delete, anonymise or securely isolate it, unless continued retention is required by law.

11. Data Security

We use reasonable administrative, technical and organisational measures designed to protect personal information against:

• Unauthorised access

• Unlawful use

• Accidental loss

• Destruction

• Alteration

• Disclosure

• Fraud and misuse

These measures may include access controls, secure payment processing, encryption, authentication, monitoring, backups and service-provider assessments.

No website, transmission method or storage system can be guaranteed to be completely secure. Customers are responsible for keeping account credentials confidential and should contact us if they believe an account or transaction has been compromised.

Please do not send passwords, full payment card numbers or card security codes by email.

12. Personal Data Breaches

If a personal data breach occurs, we will investigate and take appropriate steps to contain and address it.

Where required by law, we will notify the Information Commissioner’s Office and affected individuals.

13. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and request a copy of that information.

Right to Rectification

You may request correction of inaccurate personal information or completion of incomplete information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

This right is not absolute. We may retain information where necessary to comply with law, complete a transaction, resolve a dispute, prevent fraud or establish, exercise or defend legal claims.

Right to Restrict Processing

You may request restriction of processing in certain circumstances, including while the accuracy or lawfulness of processing is being reviewed.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request certain information in a structured, commonly used and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have the right to object at any time to the use of personal information for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

Rights Concerning Automated Decision-Making

You may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

We do not ordinarily make solely automated decisions that have legal or similarly significant effects on customers. Automated fraud or security tools may flag an order for review, request additional verification or prevent a transaction where necessary to protect customers and our services.

Right to Complain

You have the right to raise a concern with us and to lodge a complaint with the United Kingdom Information Commissioner’s Office.

We encourage you to contact us first so that we have an opportunity to investigate and respond.

14. Exercising Your Rights

To exercise a data protection right, email:

info@babyboofashionl.shop

Please describe the information or processing activity concerned and the right you wish to exercise.

We may request reasonable information to verify your identity and protect personal information from unauthorised disclosure. We may also ask for clarification where necessary to locate the relevant information or understand your request.

We will respond within the period required by applicable law. Where a request is particularly complex or involves multiple requests, the response period may be extended where legally permitted, and we will inform you where this applies.

Data protection requests are generally handled without charge. A reasonable fee may be charged, or a request may be refused, where permitted by law because it is manifestly unfounded or excessive.

15. Complaints Handling

If you are dissatisfied with how we have handled your personal information, contact info@babyboofashionl.shop.

Please provide:

• Your name

• Your contact email address

• A description of your concern

• Relevant order or account information

• Details of any previous communications

• The outcome you are seeking

We will acknowledge and investigate privacy complaints and provide a response in accordance with applicable legal requirements.

You may complain to the Information Commissioner’s Office at any time. Contacting us first does not affect your right to approach the regulator.

16. Keeping Information Accurate

Customers are responsible for providing accurate and current information.

You may update certain account information through your customer account where this function is available. You may also request a correction by contacting info@babyboofashionl.shop.

Please contact us promptly if your delivery address or contact details need to be corrected. Changes cannot always be made after an order has entered processing or shipment.

17. Children’s Privacy

Our website and products are not directed specifically at children, and we do not knowingly collect personal information from children who are unable to provide valid consent or enter into a purchase under applicable law.

Orders placed for a child should be completed by a parent, guardian or other responsible adult.

If you believe a child has provided personal information without appropriate authorisation, contact info@babyboofashionl.shop. We will review the matter and delete the information where required.

18. Third-Party Websites and Services

Our website may contain links to websites, payment services, social media platforms or services operated by third parties.

We do not control the privacy practices, security or content of independent third parties. Their collection and use of personal information are governed by their own privacy notices.

We recommend reviewing the privacy information of a third-party service before providing personal information.

19. Customer Reviews and Public Content

If you submit a product review, testimonial, comment, photograph or other public content, information included in that submission may be displayed publicly.

Do not include sensitive information, payment details, private contact information or information about another person without permission.

We may moderate or remove content where permitted by our terms or required by law.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services

• Changes to the technologies or providers we use

• Changes to our data practices

• Legal or regulatory developments

• Security or operational requirements

The updated version will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal information is used, we will provide additional notice or request consent where required by law.

21. Contact Us

For privacy questions, requests, objections, consent withdrawals or complaints, contact:

babyboofashionl.shop
Email: info@babyboofashionl.shop

We will use the information submitted with your request only to verify your identity, investigate the matter, respond to you and maintain an appropriate record of the request.

22. Applicable Rights

Nothing in this Privacy Policy is intended to limit or exclude any mandatory data protection rights available under United Kingdom law.