Privacy policy

Overview

Commerce Boutique ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Commerce Boutique, 2 Battle Bridge Lane, London SE1 2HD, UK contact@commerceboutique.co.uk

What Data We Collect

  • Identity Data: Full name
  • Contact Data: Email address, phone number, delivery and billing address
  • Transaction Data: Details of purchases, payments, and returns
  • Technical Data: IP address, browser type, device information, and cookies
  • Marketing Data: Your preferences for receiving marketing from us
  • Communication Data: Emails or messages you send to us

How We Collect Your Data

  • When you place an order on our website
  • When you create an account
  • When you subscribe to our newsletter or marketing emails
  • When you contact us by email or phone
  • Automatically via cookies and tracking technologies when you browse our website

How We Use Your Data

  • Processing and fulfilling your orders, based on the performance of a contract
  • Sending order confirmations and shipping updates — based on the performance of a contract
  • Processing payments and preventing fraud — based on legal obligation and legitimate interests
  • Responding to your enquiries — based on legitimate interests
  • Sending marketing emails — based on your consent only
  • Improving our website and services — based on legitimate interests
  • Complying with legal and tax obligations — based on legal obligation

Sharing Your Data

We do not sell, trade, or rent your personal data to third parties. We may share your data with trusted service providers only where necessary:

  • Payment processors (e.g., Stripe, PayPal) to handle transactions securely
  • Courier and delivery companies to fulfil your order
  • Email marketing platforms only if you have opted in to marketing
  • IT and website hosting providers
  • Legal or regulatory authorities if required by law

All third-party processors are contractually required to handle your data in compliance with UK GDPR.

Cookies

  • Essential cookies: Required for the website to function — cannot be disabled
  • Analytics cookies: Help us understand how visitors use our site (e.g., Google Analytics)
  • Marketing cookies: Used to show relevant advertisements — only with your consent

You can manage your cookie preferences at any time via our cookie banner or your browser settings.

Data Retention

  • Order and transaction data: Kept for 7 years to meet legal and tax obligations
  • Customer account data: Kept until you request deletion
  • Marketing preferences: Kept until you unsubscribe or withdraw consent

Your Rights Under UK GDPR

  • Right of Access — Request a copy of the personal data we hold about you
  • Right to Rectification — Ask us to correct inaccurate or incomplete data
  • Right to Erasure — Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing — Ask us to limit how we use your data
  • Right to Data Portability — Receive your data in a portable, machine-readable format
  • Right to Object — Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent — Withdraw your marketing consent at any time

To exercise any of these rights, contact us at contact@commerceboutique.co.uk. We will respond within 30 days.

Complaints

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

Contact Us

Email: contact@commerceboutique.co.uk
Phone: +44 20 3987 9654
Address: 2 Battle Bridge Lane, London SE1 2HD, United Kingdom
Business Hours: Mon – Fri, 9:00 AM – 6:00 PM (GMT+1)