Privacy policy

 

This Privacy Policy explains how babyboofashionx.shop collects, uses, stores, shares, and protects personal information when you visit our website, create an account, place an order, contact us, subscribe to marketing communications, or otherwise interact with our services.

For the purposes of applicable United Kingdom data protection law, babyboofashionx.shop is the data controller responsible for the personal information described in this Privacy Policy.

This Privacy Policy applies to personal information processed through babyboofashionx.shop and related customer service, order fulfilment, marketing, payment, fraud prevention, and business operations.

1. Contact Information

For questions, requests, or complaints concerning this Privacy Policy or the way we process personal information, contact us at:

Website: babyboofashionx.shop
Email: info@babyboofashionx.shop

Please use the subject line “Data Protection Request” or “Data Protection Complaint” where appropriate.

2. Personal Information We Collect

The personal information we collect depends on how you interact with our website and services.

Identity and Contact Information

We may collect:

• Your first and last name

• Billing address

• Delivery address

• Email address

• Telephone number

• Account username or other account identifiers

• Details of authorised recipients or persons collecting an order

Order and Transaction Information

We may collect:

• Products purchased or considered

• Order numbers

• Order value

• Discount and promotional information

• Delivery method

• Shipping and tracking information

• Purchase history

• Return, exchange, cancellation, and refund information

• Customer service records

• Details relating to damaged, defective, missing, or incorrect products

Payment Information

Payments are generally processed by Shopify and authorised third-party payment providers.

Depending on the payment method selected, we may receive limited payment-related information, including:

• Payment status

• Payment method type

• Billing details

• Transaction identifiers

• Limited card information, such as the card brand and final digits

• Fraud screening and risk assessment results

We do not normally receive or store complete payment card numbers or card security codes.

Account Information

If you create a customer account, we may collect:

• Login credentials

• Account preferences

• Saved addresses

• Order history

• Wishlist or saved-product information

• Communication preferences

Passwords are stored and managed through the relevant ecommerce and authentication systems and are not visible to us in readable form.

Device and Technical Information

When you visit or use our website, we or our service providers may automatically collect:

• Internet Protocol address

• Browser type and version

• Device type and operating system

• Device identifiers

• Cookie identifiers

• Approximate location based on an IP address

• Time zone

• Website pages viewed

• Links and buttons selected

• Referring website or advertising source

• Session duration

• Shopping cart activity

• Checkout activity

• Error logs and security information

Communications Information

When you contact us, we may collect:

• The contents of your messages

• Email correspondence

• Customer service enquiries

• Complaints

• Product reviews

• Survey responses

• Photographs or documents submitted in support of a return, refund, delivery, or product claim

Marketing and Preference Information

We may collect:

• Marketing subscription status

• Cookie preferences

• Preferred communication channels

• Products or categories that may interest you

• Responses to promotional campaigns

• Advertising interactions

• Information used to measure campaign performance

Information From Third Parties

We may receive personal information from:

• Shopify

• Payment providers

• Delivery and logistics providers

• Fraud prevention and identity verification providers

• Analytics providers

• Advertising and social media platforms

• Customer support providers

• Applications installed on our Shopify store

• Business and professional service providers

We may combine information obtained from third parties with information collected directly from you where permitted by law.

3. How We Use Personal Information

We may process personal information for the following purposes.

Processing and Fulfilling Orders

We use personal information to:

• Confirm and process purchases

• Take and verify payments

• Prepare and dispatch orders

• Provide order confirmations

• Provide shipping and tracking updates

• Deliver products

• Process returns, cancellations, exchanges, and refunds

• Resolve order and delivery problems

Providing Customer Service

We use personal information to:

• Respond to enquiries

• Provide product and sizing information

• Investigate complaints

• Resolve payment or delivery issues

• Process warranty, damaged-item, or incorrect-item claims

• Maintain records of customer communications

Managing Customer Accounts

We use personal information to:

• Create and administer customer accounts

• Authenticate users

• Save customer preferences

• Display order history

• Maintain account security

• Process account changes or closure requests

Preventing Fraud and Protecting Our Services

We may use personal information to:

• Detect and prevent fraudulent transactions

• Verify orders and payment activity

• Protect customers and our business from misuse

• Prevent account takeovers

• Identify suspicious activity

• Enforce our terms and policies

• Protect our legal rights

• Maintain website and payment security

Operating and Improving Our Website

We may use personal information to:

• Operate and maintain our website

• Diagnose technical problems

• Understand website performance

• Analyse how customers use our services

• Improve navigation, content, products, and checkout processes

• Test new functions and services

• Measure customer satisfaction

• Develop business statistics and reports

Where cookies or similar tracking technologies require consent, we will rely on your consent before using them.

Marketing and Advertising

Where permitted by law, we may use personal information to:

• Send promotional emails

• Inform you about new products, discounts, or special offers

• Personalise marketing content

• Measure the effectiveness of advertising

• Create advertising audiences

• Display relevant advertisements

• Avoid repeatedly displaying the same advertisements

You may withdraw consent or object to direct marketing at any time.

Meeting Legal and Regulatory Obligations

We may process personal information to:

• Maintain tax and accounting records

• Respond to lawful requests from authorities

• Comply with court orders or regulatory requirements

• Meet consumer protection obligations

• Handle data protection requests and complaints

• Establish, exercise, or defend legal claims

• Detect and report unlawful conduct

4. Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the activity, we rely on one or more of the following lawful bases.

Performance of a Contract

We process personal information when necessary to enter into or perform a contract with you, including to:

• Process an order

• Take payment

• Deliver products

• Manage returns and refunds

• Respond to order-related enquiries

If you do not provide information necessary for these purposes, we may be unable to accept or fulfil your order.

Legal Obligation

We process information where necessary to comply with legal obligations, including obligations relating to:

• Taxation

• Accounting

• Consumer protection

• Product safety

• Fraud prevention

• Regulatory requests

• Data protection rights and complaints

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• Operating and improving our business

• Providing customer support

• Protecting our website and customers

• Detecting fraud and misuse

• Maintaining business records

• Understanding service performance

• Managing legal claims

• Sending permitted marketing to existing customers

• Preventing unlawful or abusive activity

Where required, we assess the nature of the processing, its necessity, and its potential effect on individuals before relying on legitimate interests.

You have the right to object to processing based on legitimate interests in certain circumstances.

Consent

We rely on consent where required, including for:

• Certain marketing communications

• Non-essential cookies

• Certain analytics technologies

• Certain advertising and tracking technologies

You may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing that occurred before consent was withdrawn.

5. Shopify

Our store is hosted through Shopify, which provides the ecommerce platform that enables us to offer products and services online.

Shopify may process personal information on our behalf to provide:

• Website hosting

• Shopping cart functionality

• Checkout services

• Order management

• Customer account services

• Store analytics

• Fraud analysis

• Payment-related services

• Privacy and security functions

Depending on the Shopify features used, Shopify may also process certain information for its own purposes under its applicable privacy terms.

Shopify may process personal information in countries outside the United Kingdom. Where required, appropriate safeguards are used for international transfers.

6. Payment Providers

Payment transactions may be processed by Shopify Payments, PayPal, card networks, banks, digital wallet providers, or other payment service providers made available during checkout.

These providers may process information including:

• Name

• Billing address

• Payment details

• Transaction information

• Device and fraud prevention information

Payment providers process information under their own privacy policies and legal obligations.

We recommend reviewing the privacy information provided by the payment method selected during checkout.

7. How We Share Personal Information

We may share personal information with trusted third parties where reasonably necessary for the purposes described in this Privacy Policy.

Ecommerce and Technology Providers

We may share information with Shopify and other providers that supply:

• Website hosting

• Cloud storage

• Ecommerce functions

• Customer accounts

• Website security

• Technical support

• Email delivery

• Database and infrastructure services

Payment and Fraud Prevention Providers

We may share information with:

• Payment processors

• Banks

• Card networks

• Fraud screening services

• Identity and transaction verification providers

Fulfilment and Delivery Providers

We may share information with:

• Warehouses

• Order fulfilment providers

• Postal operators

• Couriers

• Logistics companies

• Customs authorities

These parties require delivery information to prepare, dispatch, transport, and deliver orders.

Customer Service Providers

We may use service providers to help us respond to customer enquiries, process returns, manage communications, or investigate complaints.

Analytics and Advertising Providers

Subject to applicable consent requirements, we may disclose device, browser, website activity, purchase, or advertising information to providers that help us:

• Analyse website traffic

• Measure advertising performance

• Understand customer interactions

• Personalise advertisements

• Prevent advertising fraud

You can manage applicable tracking preferences through the cookie banner or privacy controls available on our website.

Professional Advisers

We may share information with accountants, auditors, insurers, legal advisers, consultants, and other professional advisers where necessary to operate our business or protect our legal rights.

Government and Regulatory Authorities

We may disclose information where reasonably necessary to:

• Comply with applicable law

• Respond to a court order

• Cooperate with regulators

• Respond to lawful law-enforcement requests

• Prevent or investigate fraud

• Protect the rights, safety, or property of customers, third parties, or our business

Business Transfers

If all or part of our business is sold, reorganised, merged, financed, or transferred, personal information may be disclosed to potential or actual purchasers, investors, lenders, or professional advisers.

Any receiving organisation must use the information in accordance with applicable data protection law.

8. Cookies and Similar Technologies

Our website uses cookies, pixels, local storage, software development kits, and similar technologies.

These technologies may be used to:

• Keep the website functioning

• Remember shopping cart contents

• Maintain secure checkout sessions

• Save language or regional settings

• Detect fraud and security threats

• Understand website performance

• Analyse visitor behaviour

• Measure marketing campaigns

• Personalise content and advertising

Strictly Necessary Cookies

These cookies are required for essential website functions, including security, shopping cart functions, account login, checkout, and payment processing.

They may be used without consent where permitted by law.

Functional Cookies

Functional cookies remember preferences and provide enhanced website functions.

Some limited functional technologies may be used without consent where permitted by law. Consent will be requested where legally required.

Analytics Cookies

Analytics cookies help us understand website usage and performance.

Where required by law, these cookies will not be activated until you have provided consent.

Advertising Cookies

Advertising cookies may be used to measure advertisements, understand campaign performance, or display more relevant advertising.

Where required, advertising cookies will only be used after you provide consent.

Managing Cookie Preferences

You can manage available cookie preferences through the cookie banner or privacy settings displayed on our website.

You may also configure your browser to block or delete cookies. Blocking strictly necessary cookies may prevent parts of the website, shopping cart, account, or checkout from functioning correctly.

Withdrawing cookie consent will not affect processing that occurred before consent was withdrawn.

9. Direct Marketing

We may send marketing communications where:

• You have provided consent;

• Applicable law permits us to contact an existing customer about similar products or services; or

• Another lawful basis is available.

Every promotional email will provide a method to unsubscribe.

You may also withdraw from marketing by contacting:

info@babyboofashionx.shop

We may retain limited information on a suppression list to ensure that we continue to respect your decision not to receive marketing.

Opting out of marketing will not prevent us from sending non-promotional communications concerning an order, refund, account, security issue, policy update, or customer service enquiry.

You have an absolute right to object to the use of your personal information for direct marketing.

10. Advertising and Social Media

We may use advertising services provided by search engines, social networks, and other advertising platforms.

Where permitted and subject to required consent, these providers may receive:

• Cookie identifiers

• Device information

• IP address

• Website activity

• Product interaction information

• Purchase or conversion information

• Hashed or protected contact information

Advertising providers may use this information to measure campaigns, create audiences, limit repeated advertisements, or display relevant advertising.

These providers may process information under their own privacy policies.

11. Sale or Sharing of Personal Information

We do not sell personal information in exchange for money.

However, the use of certain advertising, analytics, or audience-matching technologies may be treated as a sale, sharing, or targeted advertising activity under the laws of certain jurisdictions outside the United Kingdom.

Where applicable, we provide required consent or opt-out controls through our website’s privacy settings.

12. International Transfers

Some service providers may process personal information outside the United Kingdom.

Countries outside the United Kingdom may have different data protection laws. Where a transfer requires safeguards, we may use:

• United Kingdom adequacy regulations

• The UK International Data Transfer Agreement

• The UK Addendum to approved contractual clauses

• Binding corporate rules

• Contractual and organisational safeguards

• Another legally recognised transfer mechanism

We may also implement technical and security measures designed to protect information during international processing.

Contact info@babyboofashionx.shop for further information about the safeguards relevant to a particular transfer.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods depend on:

• The nature and sensitivity of the information

• The purpose of processing

• The length of the customer relationship

• Applicable tax and accounting obligations

• Consumer protection requirements

• Fraud prevention needs

• Limitation periods for legal claims

• Regulatory and law-enforcement requirements

• Whether an unresolved complaint, dispute, return, or payment issue exists

Order and transaction information may be retained for the period required to satisfy accounting, tax, legal, consumer protection, and dispute-resolution obligations.

Customer service and complaint records may be retained for as long as necessary to resolve the matter and protect legal rights.

Marketing information is retained until you withdraw consent or object to marketing, subject to maintaining a limited suppression record.

Cookie retention periods vary depending on the relevant technology and are reflected, where available, in our cookie controls.

When personal information is no longer required, it may be securely deleted, anonymised, or isolated from further routine use.

14. Data Security

We use reasonable technical and organisational measures designed to protect personal information from:

• Unauthorised access

• Accidental loss

• Improper use

• Unlawful disclosure

• Alteration

• Destruction

These measures may include access controls, encryption, secure hosting, fraud monitoring, system updates, password protection, and restrictions on staff or provider access.

No internet transmission or storage system can be guaranteed to be completely secure. Customers should use unique passwords, protect their account credentials, and contact us if they suspect unauthorised account activity.

15. Personal Data Breaches

If a personal data breach occurs, we will investigate it and take reasonable steps to contain and remedy the incident.

Where required by law, we will notify the relevant supervisory authority and affected individuals within the applicable legal periods.

Notifications may include information about the nature of the incident, likely consequences, actions taken, and recommended protective steps.

16. Automated Decision-Making and Fraud Screening

We and our service providers may use automated tools to assess orders for fraud, security, payment risk, or misuse.

These systems may consider information such as:

• Transaction activity

• Payment results

• IP address

• Device information

• Billing and delivery details

• Order value

• Previous transaction patterns

• Fraud indicators supplied by service providers

An order may be reviewed, delayed, declined, cancelled, or referred for additional verification where suspicious activity is identified.

Where an applicable law gives you rights concerning a decision based solely on automated processing that produces legal or similarly significant effects, you may be entitled to:

• Request human intervention

• Express your point of view

• Challenge the decision

• Receive information about the decision-making process

Contact info@babyboofashionx.shop to request a review.

17. Your Data Protection Rights

Subject to applicable conditions and exemptions, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and obtain a copy of that information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

The right to erasure is not absolute. We may retain information where processing is required by law, necessary for legal claims, or supported by another valid legal basis.

Right to Restrict Processing

You may request that we restrict the way personal information is used in certain circumstances.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request certain information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have an absolute right to object to processing for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

Rights Relating to Automated Decisions

Where applicable, you may have rights concerning decisions made solely through automated processing that produce legal or similarly significant effects.

Right to Complain

You may submit a complaint directly to us or complain to the Information Commissioner’s Office, which is the United Kingdom’s data protection supervisory authority.

We encourage you to contact us first so that we have an opportunity to investigate and resolve your concern.

18. Exercising Your Rights

To exercise a data protection right, email:

info@babyboofashionx.shop

Please use the subject line “Data Protection Request” and explain the right you wish to exercise.

We may ask for information reasonably necessary to:

• Confirm your identity

• Locate relevant records

• Protect information from unauthorised disclosure

• Clarify the scope of your request

We will not request more information than is reasonably necessary.

We normally respond within the period required by applicable law. Where a request is complex or multiple requests have been submitted, the response period may be extended where legally permitted. We will inform you if an extension applies.

We may refuse or charge a reasonable fee for a request only where permitted by law, including where a request is manifestly unfounded or excessive.

Authorised representatives may submit requests on behalf of another person, but we may require evidence of authority and verification of the individual’s identity.

19. Data Protection Complaints

You may complain about the way we collect, use, disclose, retain, or protect your personal information by emailing:

info@babyboofashionx.shop

Please use the subject line “Data Protection Complaint” and include:

• Your name

• Your contact details

• A description of the concern

• Relevant order or account information

• Relevant correspondence or supporting evidence

• The outcome you are seeking

We will acknowledge a data protection complaint within 30 days and respond without undue delay.

We may contact you for further information where necessary to investigate the complaint fairly.

Submitting a complaint to us does not prevent you from contacting the Information Commissioner’s Office at any time.

20. Children’s Privacy

Our website is not designed or intended primarily for children.

We do not knowingly collect personal information directly from children who are not legally able to provide valid information or enter into an online transaction.

Where an online service is likely to be accessed by children, we will take their needs and interests into account when determining how personal information is processed.

If you believe a child has provided personal information without appropriate authorisation, contact info@babyboofashionx.shop so that we can review and, where appropriate, delete the information.

21. Special Category Information

We do not normally request information concerning:

• Health

• Race or ethnic origin

• Religious or philosophical beliefs

• Political opinions

• Trade union membership

• Genetic or biometric identification

• Sex life or sexual orientation

Please avoid sending such information unless it is genuinely necessary to resolve a customer service, accessibility, or legal matter.

Where special category information is received, we will process it only where a valid legal condition applies and will limit its use to what is reasonably necessary.

22. Third-Party Websites

Our website may contain links to third-party websites, payment services, social media platforms, or applications.

We do not control the privacy practices of independent third parties. This Privacy Policy does not apply to information collected directly by those third parties.

You should review the privacy policy of any third-party service before providing personal information.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services

• New technologies or service providers

• Changes to Shopify functions

• Changes to our privacy practices

• Legal or regulatory developments

• Security or operational requirements

The updated version will be published on babyboofashionx.shop with a revised “Last updated” date.

Where a change materially affects your rights or the way we use personal information, we may provide additional notice where required by law.

24. Contact Us

For privacy enquiries, data protection requests, withdrawal of consent, objections to marketing, or data protection complaints, contact:

babyboofashionx.shop
Email: info@babyboofashionx.shop

Please do not send account passwords, complete payment card details, card security codes, or online banking credentials by email.