Privacy policy

 

This Privacy Policy explains how babyboofashionz.shop collects, uses, stores, shares and protects personal information when you visit our website, create a customer account, place an order, contact us or otherwise interact with our products and services.

For the purposes of applicable United Kingdom data protection law, babyboofashionz.shop acts as the data controller for personal information collected through this website, except where another organisation processes personal information as an independent controller.

This Privacy Policy is intended to reflect applicable United Kingdom privacy and electronic communications requirements, including the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and any amendments or replacement legislation in force.

By using our website, you acknowledge the practices described in this Privacy Policy. Where consent is required by law, we will request it separately.

1. Contact Information

For questions about this Privacy Policy, the use of your personal information or your data protection rights, contact:

Website: babyboofashionz.shop
Email: info@babyboofashionz.shop

Please provide sufficient information for us to understand and respond to your request.

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

• Visit or browse babyboofashionz.shop

• Purchase or attempt to purchase a product

• Create or use a customer account

• Subscribe to marketing communications

• Contact customer service

• Request a cancellation, return, exchange or refund

• Submit a product review or other content

• Participate in a promotion or survey

• Interact with our advertisements

• Communicate with us through email or another available channel

This Privacy Policy does not govern independent websites or services operated by third parties, even where they are linked from our website.

3. Personal Information We Collect

The information we collect depends on how you interact with our website and services.

Identity and Contact Information

We may collect:

• Full name

• Email address

• Telephone number

• Billing address

• Delivery address

• Country or region

• Customer account details

• Communication preferences

Order and Transaction Information

We may collect:

• Order number

• Products ordered

• Product size, colour and quantity

• Purchase value

• Discounts and promotional codes

• Payment status

• Billing information

• Delivery method

• Shipping and tracking information

• Return, cancellation and refund records

• Customer purchase history

• Gift recipient information where applicable

Payment Information

Payments are processed through Shopify and authorised third-party payment providers.

Depending on the payment method selected, the payment provider may collect:

• Cardholder name

• Payment card information

• Billing address

• Bank or payment account information

• Authentication information

• Fraud-prevention information

• Transaction identifiers

babyboofashionz.shop does not normally receive or store complete payment-card numbers or card security codes.

We may receive limited transaction information, including:

• Payment method

• Payment status

• Transaction reference

• Billing details

• The final digits of a payment card

• Refund or chargeback information

Payment providers process personal information according to their own privacy notices and legal responsibilities.

Customer Service Information

When you contact us, we may collect:

• Your name and contact details

• Order number

• The content of your communication

• Previous correspondence

• Complaint information

• Product photographs or videos

• Delivery evidence

• Return and refund information

• The outcome of your enquiry

Please do not send complete card details, passwords, card security codes or unnecessary sensitive information by email.

Customer Account Information

Where customer accounts are available, we may collect:

• Account name

• Email address

• Login and authentication information

• Saved addresses

• Order history

• Account preferences

• Account activity

• Password-reset and security information

Passwords are managed through the relevant Shopify account and authentication systems. We do not ask customers to disclose their passwords by email.

Product Reviews and Submitted Content

If you submit a review, photograph, comment, testimonial or other content, we may collect:

• Your display name

• Review content

• Product rating

• Photographs or videos

• Submission date

• Order-verification information

• Technical information associated with the submission

Information included in a published review may be visible to other website visitors.

Marketing Information

We may collect:

• Email-marketing subscription status

• Marketing consent records

• Communication preferences

• Email opening and interaction information

• Products viewed or purchased

• Advertising interaction information

• Unsubscribe and objection records

Device and Usage Information

When you use our website, we and our service providers may automatically collect:

• Internet Protocol address

• Browser type and version

• Device type

• Operating system

• Device identifiers

• Approximate location derived from an IP address

• Language and regional settings

• Referring website or advertising source

• Pages and products viewed

• Search terms

• Links and buttons selected

• Shopping-basket activity

• Checkout activity

• Session dates and times

• Session duration

• Website interaction information

• Error and diagnostic information

• Security and fraud-prevention signals

• Cookie and similar technology identifiers

4. How We Collect Personal Information

We may collect personal information from the following sources.

Directly from You

We collect information when you:

• Complete checkout

• Create an account

• Contact us

• Subscribe to marketing

• Submit a return or refund request

• Submit a review

• Enter a promotion

• Complete a survey

• Update your preferences

Automatically Through the Website

We may collect technical and usage information through:

• Cookies

• Pixels

• Tags

• Local storage

• Software development kits

• Server logs

• Shopify analytics

• Similar website technologies

From Shopify

Shopify may provide us with information necessary to:

• Operate our online store

• Process orders

• Support checkout

• Maintain customer accounts

• Detect fraud

• Analyse store performance

• Manage customer privacy choices

From Service Providers

We may receive information from:

• Payment providers

• Shipping and fulfilment providers

• Fraud-prevention providers

• Customer-support systems

• Email and communication providers

• Analytics providers

• Advertising platforms

• Product-review services

• Website-security providers

From Other People

Another person may provide your information when:

• Purchasing a product for you

• Providing your delivery details

• Contacting us on your behalf

• Naming you as the recipient of an order

Anyone providing another person’s information should have permission to do so.

5. How We Use Personal Information

We may use personal information for the purposes described below.

Processing and Fulfilling Orders

We use information to:

• Receive and review orders

• Process payments

• Verify transactions

• Confirm product availability

• Prepare and fulfil orders

• Arrange shipping and delivery

• Send order and tracking communications

• Process cancellations, returns and refunds

• Maintain transaction records

Providing Customer Service

We use information to:

• Respond to product enquiries

• Provide sizing information

• Investigate delivery issues

• Review damaged or incorrect-item claims

• Process complaints

• Provide return instructions

• Resolve account or payment issues

• Maintain a record of customer communications

Managing Customer Accounts

We may use information to:

• Create and maintain accounts

• Authenticate access

• Display order history

• Save delivery details

• Manage account preferences

• Support password recovery

• Prevent unauthorised access

Operating and Improving Our Website

We may use information to:

• Provide website functions

• Maintain shopping-basket and checkout sessions

• Remember user preferences

• Improve website navigation

• Diagnose technical errors

• Analyse website performance

• Develop new functions

• Improve products and services

• Understand customer interests and shopping behaviour

Security and Fraud Prevention

We may use information to:

• Authenticate transactions

• Detect suspicious orders

• Prevent payment fraud

• Protect customer accounts

• Prevent misuse of promotions

• Investigate return fraud

• Protect our website and systems

• Enforce our Terms of Service

• Establish, exercise or defend legal claims

Marketing and Advertising

Where permitted by law, we may use information to:

• Send promotional communications

• Inform customers about products and offers

• Personalise marketing content

• Measure advertising performance

• Understand whether an advertisement led to a visit or purchase

• Create or refine advertising audiences

• Avoid repeatedly displaying the same advertisement

Where consent is legally required, we will request consent before using personal information or non-essential technologies for these purposes.

Legal and Regulatory Compliance

We may use personal information to:

• Comply with tax and accounting obligations

• Maintain legally required business records

• Comply with consumer-protection requirements

• Respond to lawful regulatory or government requests

• Comply with court orders

• Investigate unlawful activity

• Protect our legal rights

• Resolve disputes

6. Lawful Bases for Processing

We process personal information only where an appropriate lawful basis applies.

Performance of a Contract

We rely on contractual necessity where processing is required to:

• Process and fulfil an order

• Receive payment

• Deliver products

• Manage customer accounts

• Provide requested customer service

• Process cancellations, returns and refunds

• Take requested steps before entering into a contract

Without this information, we may be unable to process or fulfil an order.

Legitimate Interests

We may rely on legitimate interests where processing is necessary for our business operations and those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• Operating and improving our website

• Providing customer support

• Protecting our systems

• Preventing fraud

• Understanding website performance

• Maintaining business records

• Managing complaints

• Defending legal claims

• Promoting similar products to existing customers where legally permitted

We consider the purpose, necessity and possible effect on individuals before relying on legitimate interests.

Consent

We rely on consent where required, including for certain:

• Marketing communications

• Analytics cookies

• Advertising cookies

• Personalised advertising activities

• Optional website technologies

You may withdraw your consent at any time. Withdrawal does not affect processing carried out lawfully before consent was withdrawn.

Legal Obligation

We may process information where necessary to comply with:

• Tax requirements

• Accounting requirements

• Consumer-protection law

• Fraud-prevention obligations

• Regulatory requirements

• Court orders

• Other legal obligations

Legal Claims and Other Permitted Grounds

We may process information where necessary to establish, exercise or defend legal claims or where another lawful ground applies.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, scripts, local storage and similar technologies.

Cookies are small data files stored on a browser or device. Similar technologies may store information on a device, access stored information or record website interactions.

Strictly Necessary Technologies

Strictly necessary technologies support essential functions such as:

• Shopping-basket operation

• Checkout

• Payment security

• Account authentication

• Fraud prevention

• Website security

• Traffic management

• Remembering privacy preferences

• Providing functions specifically requested by the user

These technologies may be used without consent where permitted by law because the website or requested service cannot operate properly without them.

Functional Technologies

Functional technologies may remember:

• Language

• Region

• Login status

• Display preferences

• Previous selections

• Other website settings

Analytics Technologies

Analytics technologies may help us understand:

• How visitors find our website

• Which pages and products are viewed

• How visitors navigate the website

• Whether errors occur

• How website functions perform

• Which marketing sources generate visits

Where required by law, these technologies will not be activated until valid consent has been provided.

Advertising Technologies

Advertising technologies may be used to:

• Measure advertising performance

• Understand whether an advertisement generated a purchase

• Personalise advertisements

• Create advertising audiences

• Limit repetitive advertising

• Measure interactions across websites or services

Where required by law, advertising technologies will be activated only after valid consent has been provided.

Managing Cookie Preferences

You may accept, reject or manage non-essential technologies through the cookie banner or privacy controls displayed on our website.

You may also manage cookies through your browser settings. Blocking certain cookies may affect:

• Shopping-basket functions

• Account access

• Checkout

• Saved preferences

• Website performance

You may withdraw consent through the available privacy controls. Withdrawal does not affect processing carried out before the withdrawal.

8. Direct Marketing

We may send marketing communications where:

• You have provided consent

• The communication is otherwise permitted by applicable electronic-marketing law

• You purchased or expressed an interest in similar products and were given an opportunity to opt out, where legally permitted

Marketing communications may include:

• Product announcements

• Promotional offers

• Discount information

• Seasonal collections

• Shopping-basket reminders

• Customer surveys

You may unsubscribe at any time by:

• Selecting the unsubscribe link in a marketing email

• Adjusting available communication preferences

• Contacting info@babyboofashionz.shop

Unsubscribing from marketing will not prevent us from sending essential communications concerning:

• Orders

• Payments

• Delivery

• Returns

• Refunds

• Account security

• Policy or service information

We may retain limited suppression information after an unsubscribe request so that we can respect the request and avoid sending further marketing messages.

9. Automated Processing and Fraud Checks

We and our service providers may use automated systems to assess:

• Payment information

• Billing and delivery addresses

• Device and network information

• Transaction patterns

• Order history

• Fraud indicators

• Account activity

These systems may:

• Flag an order for manual review

• Request additional verification

• Delay payment authorisation

• Prevent a suspicious transaction

• Restrict access where security risks are detected

We do not ordinarily make solely automated decisions that produce legal or similarly significant effects without appropriate safeguards.

Where applicable, you may contact us to request information about a decision, express your point of view or request human review.

10. How We Share Personal Information

We may share personal information only where reasonably necessary for the purposes described in this Privacy Policy.

Shopify

Our online store is hosted and supported by Shopify.

Shopify may process personal information concerning:

• Website visitors

• Customers

• Orders

• Checkout activity

• Payments

• Customer accounts

• Devices and browsers

• Security and fraud-prevention signals

Shopify processes information to provide its commerce platform, hosting, security, analytics, checkout and related services.

For certain processing activities, Shopify may act as an independent data controller and process information according to its own privacy documentation.

Payment Providers

We may share information with payment providers to:

• Authorise transactions

• Process payments

• Prevent fraud

• Process refunds

• Manage disputes and chargebacks

• Comply with financial regulations

Fulfilment and Delivery Providers

We may share necessary order information with:

• Warehouses

• Fulfilment providers

• Postal operators

• Couriers

• Freight providers

• Customs authorities

• Import and export service providers

This information may include:

• Recipient name

• Delivery address

• Telephone number

• Email address

• Product and order details

• Delivery instructions

• Customs information

Technology and Business Service Providers

We may share information with providers that support:

• Website hosting

• Cloud storage

• Cybersecurity

• Customer service

• Email delivery

• Account authentication

• Fraud prevention

• Website analytics

• Product reviews

• Returns management

• Business administration

• Data storage and backup

These providers are authorised to process information only for appropriate purposes and subject to contractual and security requirements where applicable.

Advertising and Social Media Platforms

Where any required consent has been obtained, we may share or permit the collection of:

• Online identifiers

• Device information

• Website activity

• Product-viewing information

• Advertising interaction information

• Limited transaction information

Advertising and social media platforms may process information under their own privacy notices and may act as independent data controllers.

Professional Advisers

We may share information with:

• Accountants

• Auditors

• Insurers

• Legal advisers

• Tax advisers

• Other professional consultants

Information will be shared only where reasonably necessary for professional services or legal compliance.

Government and Legal Recipients

We may disclose information where required or permitted by law, including to:

• Courts

• Regulators

• Law-enforcement agencies

• Tax authorities

• Customs authorities

• Government bodies

• Parties to legal proceedings

Business Transfers

If babyboofashionz.shop is involved in a sale, merger, acquisition, restructuring, financing or transfer of assets, personal information may be disclosed to:

• Professional advisers

• Prospective purchasers

• Investors

• Lenders

• Successor operators

Any recipient will be required to handle personal information in accordance with applicable law.

11. Sale and Sharing of Personal Information

babyboofashionz.shop does not sell personal information in exchange for money.

Certain advertising or analytics activities may involve sharing online identifiers or website activity with third-party platforms.

Where applicable law requires consent, disclosure or an opt-out mechanism for such activity, we will provide the appropriate privacy controls.

12. International Data Transfers

Shopify and some service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate measures will be used where required by law.

Depending on the destination and circumstances, these measures may include:

• United Kingdom adequacy regulations

• The United Kingdom International Data Transfer Agreement

• The UK Addendum to approved contractual clauses

• Binding corporate rules

• Contractual and organisational safeguards

• Another legally recognised transfer mechanism

We may also rely on a legally permitted exception where appropriate.

You may contact us for further information about safeguards relevant to your personal information.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

• The type of information

• The purpose of processing

• The duration of the customer relationship

• Tax and accounting requirements

• Consumer-protection obligations

• Fraud-prevention requirements

• Legal limitation periods

• Ongoing disputes

• Security and backup requirements

Order and Transaction Records

Order, payment, refund and accounting records may be retained for the period necessary to comply with tax, accounting, consumer-protection and legal requirements.

Customer Service Records

Customer-service, complaint, delivery, return and refund records may be retained for as long as necessary to:

• Resolve the matter

• Maintain an appropriate service history

• Prevent fraud

• Establish, exercise or defend legal claims

Customer Accounts

Account information may be retained while the account remains active and for an appropriate period after closure where necessary for:

• Order records

• Fraud prevention

• Security

• Legal compliance

• Dispute resolution

Marketing Information

Marketing information may be retained until you:

• Unsubscribe

• Withdraw consent

• Object to marketing

• Request deletion where applicable

Limited suppression information may be retained after an opt-out request to ensure that further marketing is not sent.

Technical Information

Cookie, analytics and technical information is retained according to the duration and purpose of the relevant technology or service.

When information is no longer required, we will delete, anonymise or securely isolate it unless continued retention is legally required.

14. Data Security

We use reasonable technical, administrative and organisational measures designed to protect personal information against:

• Unauthorised access

• Unlawful use

• Accidental loss

• Alteration

• Disclosure

• Destruction

• Fraud

• Misuse

Security measures may include:

• Access controls

• Authentication

• Encryption

• Secure payment processing

• Security monitoring

• System backups

• Fraud-prevention tools

• Service-provider assessments

• Staff and contractor access restrictions

No website, storage system or internet transmission can be guaranteed to be completely secure.

Customers are responsible for keeping account credentials confidential and should contact us if they suspect unauthorised account access or payment activity.

15. Personal Data Breaches

If a personal data breach occurs, we will investigate and take reasonable steps to:

• Contain the incident

• Reduce possible harm

• Restore security

• Assess the effect on individuals

• Maintain appropriate records

Where required by applicable law, we will notify the Information Commissioner’s Office and affected individuals.

16. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the rights described below.

Right to Be Informed

You have the right to receive clear information about how personal information is collected and used.

Right of Access

You may request confirmation of whether we process your personal information and receive a copy of that information.

Right to Rectification

You may request correction of inaccurate personal information or completion of incomplete information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

This right is not absolute. We may retain information where necessary to:

• Comply with law

• Complete a transaction

• Maintain required records

• Prevent fraud

• Resolve a dispute

• Establish, exercise or defend legal claims

Right to Restrict Processing

You may request restriction of processing in certain circumstances, including while a dispute concerning accuracy or lawfulness is being reviewed.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request eligible information in a structured, commonly used and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You may object at any time to the use of personal information for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing carried out lawfully before the consent was withdrawn.

Rights Relating to Automated Decisions

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

Right to Complain

You have the right to raise a concern with us and lodge a complaint with the United Kingdom Information Commissioner’s Office.

We encourage you to contact us first so that we have an opportunity to investigate and respond.

17. Exercising Your Rights

To exercise a data protection right, contact:

info@babyboofashionz.shop

Please include:

• Your full name

• The email address associated with your account or order

• The right you wish to exercise

• A description of the relevant information

• The relevant order number where applicable

We may request reasonable information to verify your identity before processing a request.

This helps prevent personal information from being disclosed, altered or deleted without proper authorisation.

We may ask for clarification where necessary to:

• Understand the request

• Locate the relevant information

• Confirm the scope of the request

We will respond within the time required by applicable law.

Where legally permitted, the response period may be extended for a particularly complex request or multiple requests. We will inform you if an extension applies.

Requests are generally handled without charge. A reasonable fee may be charged, or a request may be refused, where legally permitted because it is manifestly unfounded or excessive.

18. Complaints

If you are dissatisfied with how we use or protect personal information, contact:

info@babyboofashionz.shop

Please provide:

• Your name

• Your contact email address

• A description of the concern

• Relevant order or account information

• Details of previous communications

• The outcome you are requesting

We will review the complaint and respond in accordance with applicable legal requirements.

You may also complain directly to the Information Commissioner’s Office. Contacting us first does not affect your right to approach the regulator.

19. Keeping Information Accurate

Customers are responsible for providing accurate and current information.

Where customer-account functions are available, you may be able to update certain information through your account.

You may also request a correction by contacting:

info@babyboofashionz.shop

Contact us promptly if your delivery address or order details are incorrect. Changes cannot always be completed after an order has entered processing or shipment.

20. Children’s Privacy

Our website and products are intended for a general adult audience and are not specifically directed at children.

We do not knowingly collect personal information directly from a child who is not legally capable of providing valid consent or entering into a purchase.

Orders for a child should be placed by a parent, guardian or other responsible adult.

If you believe that a child has provided personal information without appropriate authorisation, contact:

info@babyboofashionz.shop

We will review the matter and delete or restrict the information where required.

21. Third-Party Websites and Services

Our website may contain links to websites and services operated by third parties.

These may include:

• Payment providers

• Social media platforms

• Delivery providers

• Product-review services

• Other online services

Independent third parties control their own privacy and security practices.

We recommend reviewing the privacy notice of a third-party service before providing personal information or using that service.

22. Customer Reviews and Public Information

If you submit a review, testimonial, photograph, video or comment for publication, some information may be publicly visible.

Do not include:

• Payment information

• Passwords

• Private contact information

• Sensitive personal information

• Information about another person without permission

We may moderate or remove content where permitted by our Terms of Service or required by law.

23. Social Media

If you interact with babyboofashionz.shop through a social media platform, the platform may collect and process information under its own privacy notice.

We may receive information including:

• Public profile information

• Comments

• Direct messages

• Advertising interactions

• Content in which our store is mentioned

Do not provide sensitive payment or account information through public social media comments.

24. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services

• Changes to Shopify functions

• New service providers

• Changes to our data practices

• Legal or regulatory developments

• Security requirements

• Operational changes

The updated policy will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal information is used, we will provide additional notice or request consent where required by law.

25. Contact Us

For privacy questions, access requests, correction requests, deletion requests, objections, consent withdrawals or complaints, contact:

babyboofashionz.shop
Website: babyboofashionz.shop
Email: info@babyboofashionz.shop

We will use information submitted with a privacy request only to verify identity, investigate the request, respond appropriately and maintain necessary records.

26. Final Statement

Nothing in this Privacy Policy is intended to exclude, restrict or replace any mandatory privacy or data protection right available under applicable United Kingdom law.