Last updated: 10 October 2025
1. Who We Are
This privacy policy explains how we collect, use, and protect your personal data when you use our website and services.
Data Controller:
Company Name: Boop Beauty Limited
Company Registration Number: 14767299
Registered Address: Cumberland Court, 80 Mount Street, Nottingham, NG1 6HH
ICO Registration Number: ZB896757
Contact Email: [email protected]
Contact Phone: 03331215200
2. What Personal Data We Collect
We may collect and process the following categories of personal data about you:
Personal Information
Name
Email address
Postal address
Telephone number
Technical Data
IP address
Browser type and version
Device information
Time zone setting and location
Operating system and platform
Usage Data
Information about how you use our website and services
Pages you visit and links you click
Time spent on pages
Search terms you use
Marketing and Communications Data
Your preferences in receiving marketing from us
Your communication preferences
Responses to surveys and feedback requests
Transaction Data
Details of products and services you have purchased
Payment information (processed by our payment provider)
3. How We Collect Your Personal Data
We collect personal data through:
Direct interactions: When you fill in forms, create an account, subscribe to newsletters, request information, or contact us
Automated technologies: Cookies and similar technologies as you interact with our website (see our Cookie Policy below)
Third parties: From analytics providers, advertising networks, and payment processors
4. Legal Basis for Processing Your Personal Data
We only process your personal data when we have a legal basis to do so. The legal bases we rely on include:
|
Purpose |
Legal Basis |
|
Processing orders and providing services |
Contract performance - necessary to fulfil our contract with you |
|
Customer service and support |
Contract performance and legitimate interests (providing quality service) |
|
Sending marketing communications |
Consent - you have given clear consent for us to process your data for marketing purposes |
|
Improving our website and services |
Legitimate interests - to keep our website updated and relevant |
|
Market research |
Consent or legitimate interests (understanding customer needs) |
|
Security and fraud prevention |
Legitimate interests (protecting our business and customers) |
|
Legal compliance |
Legal obligation - to comply with applicable laws |
Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms and are satisfied they are not overridden.
Where we rely on consent, you have the right to withdraw it at any time by contacting us.
5. How We Use Your Personal Data
We use your personal data for the following purposes:
Essential Purposes
To process and fulfil your orders
To manage your account
To provide customer service and support
To respond to your enquiries
To notify you about changes to our services
To maintain internal records
Marketing and Communications
To send you promotional emails about new products, special offers, and information we think may interest you (only with your consent)
To personalise our marketing communications based on your preferences
Improvement and Analysis
To improve our products, services, and website
To analyse website traffic and user behaviour
To customise the website according to your interests
To conduct market research
Legal and Security
To comply with legal obligations
To protect against fraud and unauthorised access
To enforce our terms and conditions
You can opt out of marketing communications at any time by:
Clicking the "unsubscribe" link in any marketing email
Contacting us at [email protected]
Updating your preferences in your account settings
6. Who We Share Your Personal Data With
We may share your personal data with the following categories of recipients:
Service Providers
We work with trusted third-party service providers who process data on our behalf, including:
Hosting providers: Shopify (including Shopify App Store apps)
Email service providers: Klaviyo, OptinMonster
Payment processors: Shopify, PayPal, Klarna, Clearpay
Analytics providers: Google Analytics, HotJar, TripleWhale
Customer service: THG Ingenuity
These providers are contractually bound to process data only in accordance with our instructions and UK GDPR requirements.
Legal Requirements
We may disclose your personal data if required by law, court order, or governmental authority, or to protect our rights, property, or safety.
Business Transfers
If we sell or reorganise our business, your personal data may be transferred to the new owner.
We will never sell or rent your personal data to third parties for their marketing purposes without your explicit consent.
7. International Data Transfers
Some service providers process data outside the UK/EEA. We ensure appropriate safeguards including UK adequacy regulations, Standard Contractual Clauses (SCCs), or other approved mechanisms.
8. How Long We Keep Your Personal Data
We retain personal data only as long as necessary to fulfil the purposes for which it was collected, typically no longer than 7 years. Specific retention periods depend on:
Legal and regulatory requirements (e.g. 6 years for tax records)
The nature of our relationship with you
Potential legal claims (6-year limitation period)
9. Your Data Protection Rights
Under UK GDPR, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you. This is free of charge in most circumstances.
Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed.
Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data in certain circumstances, such as:
The data is no longer necessary for the purpose it was collected
You withdraw consent (where consent was the legal basis)
You object to processing and there are no overriding legitimate grounds
The data was unlawfully processed
Right to Restrict Processing
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest its accuracy.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to:
Processing based on legitimate interests
Direct marketing (including profiling)
Processing for research or statistical purposes
Rights Related to Automated Decision-Making
We use automated systems to detect and prevent fraud. Orders may be automatically cancelled if our system identifies high-risk indicators such as unusual purchasing patterns, mismatched information, or other fraud signals.
If your order is automatically cancelled, you have the right to:
Request human review of the decision
Express your view and provide additional information
Contest the cancellation
To appeal an automated cancellation, email support@boopbeauty.co.uk with your order number and explanation. We will conduct a human review and respond within 72 hours.
If you choose Klarna or Clearpay as payment methods, these services conduct automated credit checks to approve or decline your application. These automated decisions are made by Klarna/Clearpay (not by us) and may affect your ability to complete your purchase.
For information about their automated decision-making and your rights:
Klarna Privacy Policy: https://www.klarna.com/uk/privacy/
Clearpay Privacy Policy: https://www.clearpay.co.uk/en-GB/privacy-policy
You should contact Klarna or Clearpay directly to exercise your rights regarding their automated decisions.
Right to Withdraw Consent
Where we rely on consent, you can withdraw it at any time by contacting us. This will not affect the lawfulness of processing before withdrawal.
10. How to Exercise Your Rights
To exercise any of your rights, please:
Email us: support@boopbeauty.co.uk
Write to us: Cumberland Court, 80 Mount Street, Nottingham, NG1 6HH
Call us: 03331215200
We will respond to your request within one month. In complex cases, we may extend this by up to two months and will notify you of the extension.
We may need to verify your identity before processing your request to protect your personal data.
11. Cookies and Similar Technologies
What Are Cookies?
Cookies are small text files placed on your device when you visit our website. They help us provide a better user experience.
Types of Cookies We Use
Necessary Cookies
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
Legal basis: These are necessary for the website to function (legitimate interest).
Preference Cookies
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
Legal basis: Your consent (you can opt out).
Statistics Cookies
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Legal basis: Your consent or legitimate interest.
Marketing Cookies
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
Legal basis: Your consent (you can opt out).
Managing Cookies
You can control cookies through:
Our cookie consent tool: You will be asked for your consent when you first visit the website and you can change your preferences at any time by clicking on ‘Cookies Settings’ at the bottom of the homepage.
Browser settings: Most browsers allow you to refuse or delete cookies. Instructions vary by browser:
Chrome: Settings > Privacy and Security > Cookies
Firefox: Preferences > Privacy & Security
Safari: Preferences > Privacy
Edge: Settings > Privacy, Search, and Services
Note: Blocking cookies may affect website functionality and your user experience.
Third-Party Cookies
A list of third-party cookies and links to their privacy policies can be found in ‘Cookies Settings’ at the bottom of the homepage.
12. Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:
Encryption: Data transmitted to and from our website is encrypted using SSL/TLS
Access controls: Restricted access to personal data on a need-to-know basis
Regular security assessments: To identify and address vulnerabilities
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will:
Notify the ICO within 72 hours of becoming aware
Notify you without undue delay if the breach poses a high risk to you
Provide information about the nature of the breach and steps being taken
13. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16.
If you are under 16, please do not provide any personal data through our website. If we become aware that we have collected data from a child under 16 without parental consent, we will delete it promptly.
If you believe we have inadvertently collected data from a child under 16, please contact us immediately.
14. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites.
When you click on a link to leave our website, we encourage you to read the privacy policy of every website you visit. This privacy policy applies only to our website.
15. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
Any changes will be posted on this page with an updated "Last updated" date at the top. If we make significant changes, we may notify you by:
Email (if we have your email address)
A prominent notice on our website
We encourage you to review this policy periodically.
16. How to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the supervisory authority.
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to resolve your concerns before you contact the ICO, so please contact us first at support@boopbeauty.co.uk.
17. Contact Us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Email: support@boopbeauty.co.uk
Postal Address: Cumberland Court, 80 Mount Street, Nottingham, NG1 6HH
Call us: 03331215200
Your trust is important to us. We are committed to protecting your privacy and handling your personal data responsibly and transparently in accordance with UK data protection laws.