Privacy policy

 

This Privacy Policy explains how babyboofashionc.shop collects, uses, stores, discloses, and protects personal information when you visit our website, create a customer account, place an order, contact us, subscribe to marketing communications, or otherwise interact with our products and services.

For the purposes of applicable United Kingdom data protection law, babyboofashionc.shop is the data controller responsible for the personal information described in this Privacy Policy.

By using our website or services, you acknowledge that your personal information will be handled as described in this Privacy Policy.

1. Contact Information

For questions, requests, objections, or complaints concerning personal information, contact:

Website: babyboofashionc.shop
Email: info@babyboofashionc.shop

For privacy-related requests, please use the subject line “Data Protection Request.”

For complaints about how personal information has been handled, please use the subject line “Data Protection Complaint.”

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through:

• babyboofashionc.shop

• Our online checkout

• Customer accounts

• Order and delivery services

• Customer support communications

• Returns and refunds

• Marketing communications

• Cookies and similar technologies

• Social media and advertising interactions

• Fraud prevention and website security activities

This Privacy Policy does not apply to independent third-party websites or services that operate under their own privacy policies.

3. Personal Information We Collect

The information we collect depends on how you interact with our website and services.

Identity and Contact Information

We may collect:

• First and last name

• Email address

• Telephone number

• Billing address

• Delivery address

• Postcode

• Country or region

• Customer account identifiers

• Details of another person authorised to receive an order

Order and Transaction Information

We may collect:

• Products viewed, selected, or purchased

• Order numbers

• Shopping cart information

• Order value

• Discounts and promotional codes

• Purchase history

• Payment status

• Shipping method

• Tracking information

• Delivery status

• Returns, cancellations, exchanges, and refunds

• Customer complaints and dispute records

Payment Information

Payments are processed through Shopify and the payment providers made available during checkout.

Depending on the payment method used, we may receive:

• Payment status

• Transaction reference

• Payment method type

• Billing information

• Card brand

• Limited card information, such as the final digits

• Fraud screening results

We do not normally receive or store complete payment card numbers, card security codes, or online banking passwords.

Payment providers process payment information according to their own privacy policies and legal obligations.

Customer Account Information

If you create an account, we may collect:

• Login identifiers

• Account preferences

• Saved addresses

• Order history

• Marketing preferences

• Wishlist or saved-product information

• Account activity and security information

You are responsible for protecting your account credentials and informing us promptly if you suspect unauthorised account activity.

Device and Technical Information

When you use our website, we or our service providers may automatically collect:

• Internet Protocol address

• Browser type and version

• Device type

• Operating system

• Device identifiers

• Cookie identifiers

• Approximate location based on your IP address

• Time zone

• Referring website or advertisement

• Pages viewed

• Products viewed

• Links and buttons selected

• Session duration

• Shopping cart and checkout activity

• Error reports

• Website security information

Customer Service and Communication Information

When you contact us, we may collect:

• The contents of your message

• Your contact details

• Order information

• Email correspondence

• Complaint details

• Return and refund requests

• Product reviews

• Survey responses

• Photographs or videos submitted as evidence

• Delivery or payment dispute information

Please do not send complete payment card details, account passwords, card security codes, or online banking credentials by email.

Marketing and Preference Information

We may collect:

• Marketing subscription status

• Communication preferences

• Cookie preferences

• Products or categories that interest you

• Responses to promotions

• Advertising interactions

• Email opening and link-selection information

• Campaign and conversion information

Information From Third Parties

We may receive information from:

• Shopify

• Payment providers

• Delivery carriers

• Fulfilment providers

• Fraud prevention services

• Analytics providers

• Advertising platforms

• Social media platforms

• Customer support services

• Applications installed on our Shopify store

We may combine third-party information with information collected directly from you where lawful and reasonably necessary.

4. How We Collect Personal Information

We collect personal information:

• Directly from you when you place an order, create an account, contact us, or submit a form

• Automatically through cookies, pixels, logs, and similar technologies

• From Shopify and applications used to operate the store

• From payment providers when a transaction is processed

• From delivery providers when an order is shipped or delivered

• From advertising and analytics providers

• From publicly available sources where lawful

• From another person who purchases or arranges delivery for you

Where another person provides your information, they should have permission to do so.

5. How We Use Personal Information

Processing and Fulfilling Orders

We use personal information to:

• Receive and process orders

• Confirm purchases

• Verify and collect payments

• Prepare and package products

• Arrange shipping and delivery

• Provide tracking information

• Communicate about an order

• Process cancellations, returns, and refunds

• Investigate missing, damaged, or incorrect products

Providing Customer Service

We use personal information to:

• Respond to enquiries

• Provide product and sizing assistance

• Resolve delivery or payment issues

• Investigate complaints

• Process damaged-item claims

• Manage returns and refunds

• Maintain records of customer communications

Managing Customer Accounts

We may use personal information to:

• Create and administer accounts

• Authenticate account access

• Save addresses and preferences

• Display order history

• Protect account security

• Process account correction or closure requests

Preventing Fraud and Protecting Our Services

We may process personal information to:

• Verify orders and payments

• Detect suspicious transactions

• Prevent account takeover

• Prevent payment, delivery, return, or refund fraud

• Protect customers and our business

• Investigate misuse

• Enforce our Terms of Service

• Maintain website and checkout security

Operating and Improving the Website

We may use information to:

• Operate and maintain the website

• Diagnose technical problems

• Understand website performance

• Improve navigation and checkout

• Analyse customer interactions

• Test new features

• Improve product selection

• Measure customer satisfaction

• Produce aggregated business statistics

Where consent is required for analytics or tracking technologies, we will request it before using those technologies.

Marketing and Advertising

Where permitted by law, we may use personal information to:

• Send promotional emails

• Inform you about products, discounts, or offers

• Personalise marketing content

• Measure campaign performance

• Create advertising audiences

• Display relevant advertisements

• Limit repeated advertisements

You may opt out of direct marketing at any time.

Complying With Legal Obligations

We may process personal information to:

• Maintain tax and accounting records

• Comply with consumer protection requirements

• Respond to lawful requests

• Cooperate with regulators and courts

• Handle data protection requests

• Investigate unlawful conduct

• Establish, exercise, or defend legal claims

6. Lawful Bases for Processing

We process personal information only where an appropriate lawful basis applies.

Performance of a Contract

We rely on this basis where processing is necessary to:

• Accept and fulfil an order

• Take payment

• Deliver products

• Manage cancellations

• Process returns and refunds

• Respond to order-related enquiries

If required information is not provided, we may be unable to accept or fulfil an order.

Legal Obligation

We rely on this basis where processing is necessary to comply with legal requirements relating to:

• Tax and accounting

• Consumer protection

• Product safety

• Fraud prevention

• Court or regulatory requests

• Data protection rights

• Complaint handling

Legitimate Interests

We may process personal information for legitimate business interests, including:

• Operating and improving our store

• Providing customer service

• Protecting website security

• Detecting fraud and misuse

• Maintaining appropriate business records

• Understanding store performance

• Managing legal claims

• Sending legally permitted marketing to existing customers

We consider whether the processing is necessary, proportionate, and compatible with your rights before relying on legitimate interests.

You may have the right to object to processing based on legitimate interests.

Consent

We rely on consent where required for:

• Promotional communications

• Non-essential cookies

• Certain analytics technologies

• Advertising and tracking technologies

• Other optional processing activities

You may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

7. Shopify

Our store is hosted on Shopify, which provides the ecommerce platform used to display products, manage checkout, process orders, operate customer accounts, and support other store functions.

Shopify may process personal information to provide:

• Website hosting

• Shopping cart functions

• Checkout services

• Order management

• Customer account features

• Store security

• Fraud analysis

• Payment-related services

• Analytics

• Privacy management tools

Depending on the Shopify services and features enabled, Shopify may also process certain information for purposes described in its own privacy documentation.

Shopify and its service providers may process information outside the United Kingdom using legally recognised transfer safeguards where required.

8. Payment Providers

Payment transactions may be processed by Shopify Payments, PayPal, banks, card networks, digital wallet providers, or other payment services displayed during checkout.

These providers may collect and process:

• Identity information

• Billing details

• Payment credentials

• Transaction details

• Device information

• Fraud prevention information

Payment providers act according to their own privacy policies, contractual obligations, and legal requirements.

We recommend reviewing the privacy information provided by your selected payment provider.

9. Sharing Personal Information

We may share personal information only where reasonably necessary for the purposes described in this policy.

Shopify and Technology Providers

Information may be shared with providers of:

• Ecommerce hosting

• Cloud storage

• Website infrastructure

• Customer accounts

• Website security

• Email delivery

• Technical support

• Database services

Payment and Fraud Prevention Providers

Information may be shared with:

• Payment processors

• Banks

• Card networks

• Digital wallet providers

• Fraud screening providers

• Identity and transaction verification services

Fulfilment and Delivery Providers

Information may be shared with:

• Warehouses

• Fulfilment partners

• Postal operators

• Couriers

• Logistics companies

• Customs authorities

These organisations require relevant information to prepare, transport, track, and deliver orders.

Customer Support Providers

We may use service providers to manage enquiries, communications, returns, refunds, or complaints.

Analytics and Advertising Providers

Subject to applicable consent requirements, we may share device, website activity, purchase, or campaign information with providers that help us:

• Analyse website traffic

• Measure advertising

• Understand customer interactions

• Personalise advertisements

• Prevent advertising fraud

Professional Advisers

Information may be disclosed to:

• Accountants

• Auditors

• Insurers

• Legal advisers

• Consultants

• Other professional service providers

Public Authorities

We may disclose information where reasonably necessary to:

• Comply with applicable law

• Respond to a court order

• Cooperate with a regulator

• Respond to a lawful law-enforcement request

• Prevent or investigate fraud

• Protect legal rights, safety, or property

Business Transfers

If all or part of our business is sold, merged, reorganised, financed, or transferred, relevant personal information may be disclosed to potential or actual purchasers, investors, lenders, and professional advisers.

Any receiving organisation must handle the information in accordance with applicable data protection law.

10. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, tags, scripts, and similar technologies.

These technologies may be used to:

• Keep the website functioning

• Maintain shopping cart contents

• Operate secure checkout

• Authenticate customer accounts

• Save language and regional preferences

• Detect fraud and security threats

• Analyse website performance

• Measure marketing campaigns

• Personalise content and advertising

Strictly Necessary Technologies

These technologies support essential functions such as:

• Website security

• Shopping carts

• Checkout

• Payments

• Account login

• Privacy preferences

They may be used without consent where permitted by law.

Functional Technologies

Functional technologies remember preferences or provide enhanced website features.

We will request consent where legally required.

Analytics Technologies

Analytics technologies help us understand how visitors use the website and how the website performs.

Where consent is required, these technologies will not be activated until consent has been provided.

Advertising Technologies

Advertising technologies may measure campaigns, personalise advertising, or create advertising audiences.

Where required, these technologies will be used only after you provide consent.

Managing Cookie Preferences

Available cookie choices can be managed through the cookie banner or customer privacy settings on our website.

You may also configure your browser to block or delete cookies. Blocking essential cookies may prevent the shopping cart, checkout, account, or other website functions from operating correctly.

Withdrawing cookie consent does not affect processing that occurred before consent was withdrawn.

11. Direct Marketing

We may send marketing communications where:

• You have provided consent

• Applicable law permits marketing to an existing customer concerning similar products

• Another valid lawful basis applies

Promotional emails will contain an unsubscribe method.

You may also opt out by contacting:

info@babyboofashionc.shop

We may retain limited information on a suppression list to ensure that we continue to respect your marketing preference.

Opting out of marketing will not prevent us from sending necessary communications concerning:

• Orders

• Payments

• Delivery

• Returns

• Refunds

• Account security

• Customer service

• Legal or policy updates

You have the right to object to the use of personal information for direct marketing at any time.

12. Advertising and Social Media

Subject to applicable consent requirements, we may use advertising services provided by search engines, social networks, and advertising platforms.

These providers may receive:

• Cookie identifiers

• Device information

• IP addresses

• Website activity

• Product interactions

• Purchase or conversion information

• Protected or hashed contact information

Advertising providers may use this information to measure campaigns, build audiences, limit repeated advertising, or display relevant advertising.

Independent advertising providers process information according to their own privacy policies.

13. International Data Transfers

Some service providers may process personal information outside the United Kingdom.

Where an international transfer requires safeguards, we may rely on:

• United Kingdom adequacy regulations

• The UK International Data Transfer Agreement

• The UK Addendum to approved contractual clauses

• Binding corporate rules

• Legally recognised contractual safeguards

• Another valid transfer mechanism

We may also use technical and organisational measures designed to protect information during international processing.

For further information about safeguards relevant to a particular transfer, contact info@babyboofashionc.shop.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may depend on:

• The type and sensitivity of information

• The purpose of processing

• The duration of the customer relationship

• Tax and accounting requirements

• Consumer protection requirements

• Fraud prevention needs

• Legal limitation periods

• Regulatory requirements

• Outstanding complaints or disputes

• Returns, refunds, or payment claims

Order and transaction records may be retained for the period necessary to meet tax, accounting, legal, consumer protection, and dispute-resolution obligations.

Customer service records may be retained for as long as necessary to resolve the enquiry and protect legal rights.

Marketing information may be retained until you withdraw consent or object, subject to retaining limited suppression information.

When information is no longer required, it may be securely deleted, anonymised, or restricted from further routine use.

15. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access

• Accidental loss

• Improper use

• Unlawful disclosure

• Alteration

• Destruction

Measures may include:

• Access controls

• Encryption

• Secure hosting

• Fraud monitoring

• Password protections

• Software updates

• Provider access restrictions

• Staff and contractor confidentiality requirements

No internet transmission or storage system can be guaranteed to be completely secure.

You should use a strong and unique password and contact us promptly if you suspect unauthorised account activity.

16. Personal Data Breaches

If a personal data breach occurs, we will investigate the incident and take reasonable steps to contain and remedy it.

Where legally required, we will notify the relevant supervisory authority and affected individuals.

A notification may explain:

• The nature of the breach

• The likely consequences

• Measures taken to address it

• Recommended protective actions

• How to contact us for further information

17. Automated Fraud Screening and Decisions

We and our service providers may use automated systems to assess orders, payments, accounts, and website activity for fraud, security risks, or misuse.

These systems may consider:

• Transaction activity

• Payment results

• Device information

• IP address

• Billing and delivery information

• Order value

• Previous transaction patterns

• Fraud indicators supplied by service providers

An order may be delayed, reviewed, declined, cancelled, or referred for additional verification where suspicious activity is identified.

Where applicable law provides rights concerning a decision made solely through automated processing that produces legal or similarly significant effects, you may request:

• Human intervention

• An explanation

• An opportunity to express your position

• A review of the decision

Contact info@babyboofashionc.shop to request a review.

18. Your Data Protection Rights

Subject to applicable conditions and exemptions, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and obtain a copy of that information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

This right is not absolute. Information may be retained where required by law, necessary for legal claims, or supported by another valid lawful basis.

Right to Restrict Processing

You may request that the use of your personal information be restricted in certain circumstances.

Right to Data Portability

Where processing is based on consent or contract and carried out through automated means, you may request eligible information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You may object to direct marketing at any time.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

Rights Concerning Automated Decisions

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

Right to Complain

You may complain directly to us or to the Information Commissioner’s Office, the United Kingdom’s data protection supervisory authority.

We encourage you to contact us first so that we have an opportunity to investigate and address your concern.

19. Exercising Your Rights

To exercise a data protection right, email:

info@babyboofashionc.shop

Use the subject line “Data Protection Request” and explain which right you wish to exercise.

We may request information reasonably necessary to:

• Verify your identity

• Locate relevant records

• Protect information from unauthorised disclosure

• Clarify the scope of your request

We will not request more information than is reasonably necessary.

We will respond within the period required by applicable law. Where a request is complex or multiple requests have been submitted, the response period may be extended where legally permitted. We will inform you where an extension applies.

A reasonable fee may be charged, or a request may be refused, only where permitted by law, including where a request is manifestly unfounded or excessive.

An authorised representative may submit a request on your behalf, but we may require proof of authority and appropriate identity verification.

20. Data Protection Complaints

You may complain about how we collect, use, disclose, retain, or protect personal information by contacting:

info@babyboofashionc.shop

Use the subject line “Data Protection Complaint” and include:

• Your full name

• Your contact details

• A description of the concern

• Relevant order or account information

• Relevant correspondence or supporting evidence

• The outcome you are seeking

We will acknowledge receipt of a data protection complaint within 30 days.

We will take appropriate steps to investigate the complaint without undue delay, keep you informed where appropriate, and notify you of the outcome.

We may request additional information where reasonably necessary to investigate the complaint.

Complaining directly to us does not prevent you from contacting the Information Commissioner’s Office.

21. Children’s Privacy

Our website is not designed primarily for children.

We do not knowingly collect personal information directly from children who are not legally capable of entering into an online transaction.

If you believe that a child has provided personal information without appropriate authorisation, contact info@babyboofashionc.shop so that we can review the matter and take appropriate action.

22. Special Category Information

We do not normally request information concerning:

• Health

• Race or ethnic origin

• Religious or philosophical beliefs

• Political opinions

• Trade union membership

• Genetic information

• Biometric identification

• Sex life or sexual orientation

Please avoid sending this information unless it is genuinely necessary to resolve an accessibility, customer service, or legal matter.

Where special category information is received, it will be processed only where a valid legal condition applies and only to the extent reasonably necessary.

23. Third-Party Websites

Our website may contain links to third-party websites, payment providers, delivery services, applications, or social media platforms.

We do not control the privacy practices of independent third parties.

This Privacy Policy does not apply to information collected directly by those third parties. You should review their privacy policies before providing personal information.

24. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services

• New website functions

• Changes to Shopify services

• Changes to service providers

• Changes to our data practices

• Legal or regulatory developments

• Security or operational requirements

The updated version will be published on babyboofashionc.shop with a revised “Last updated” date.

Where a change materially affects your rights or the way personal information is used, we may provide additional notice where required by law.

25. Contact Us

For privacy questions, data protection requests, marketing objections, withdrawal of consent, or data protection complaints, contact:

babyboofashionc.shop
Email: info@babyboofashionc.shop

Please do not send account passwords, complete payment card details, card security codes, or online banking credentials by email.