Privacy policy

Last updated: 7 September 2026

This policy explains what personal information Boujee Luxury collects when you visit boujeeluxury.com or place an order, what we do with it, and what rights you have. We are the data controller for that information.

Boujee Luxury, an online shop trading in the United Kingdom.
Contact for any privacy question or request: boujeeluxury@yahoo.com

1. Information we collect

When you place an order: your name, billing and delivery address, email address, order details, and delivery information. Payment is handled by our payment providers — we receive confirmation that a payment succeeded and the last four digits and card type, but we never see or store your full card number.

When you create an account: your name, email address, order history and any addresses you save.

When you email us: the content of your message and anything you include in it.

When you browse the site: device and browser type, IP address, pages viewed, referring site, and similar technical information collected through cookies and comparable technologies. See section 5.

We do not ask for and do not want special category data (such as health information). Please do not send it to us.

2. Why we use it, and our lawful basis

  • Taking, processing and delivering your order; handling returns and refunds — performance of our contract with you.
  • Answering your emails and providing customer service — performance of our contract, or our legitimate interest in responding to enquiries.
  • Keeping accounting and tax records — legal obligation.
  • Preventing and investigating fraud — our legitimate interest in protecting the business and our customers.
  • Keeping the site working, secure and improving it — our legitimate interest in running a functioning shop.
  • Non-essential cookies and analytics — your consent.

We do not run a marketing mailing list and we do not send marketing emails. Emails we send relate to your order, your account, or a message you sent us.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

3. Who we share it with

We share personal information only with the suppliers who help us run the shop, and only as far as they need it:

  • Shopify Inc. — hosts our online store, processes orders and provides the checkout.
  • Payment providers — Shopify Payments, PayPal and any other provider shown at checkout, to take payment and manage refunds and chargebacks.
  • Delivery carriers — your name, delivery address and contact details, so they can deliver your parcel.
  • Our accountant and, where required, HMRC — for tax and accounting records.

We may also disclose information where the law requires it, or to establish or defend legal claims.

4. Where your information is held

Our suppliers, including Shopify, may store or process personal data outside the UK. Where that happens we rely on the safeguards recognised under UK data protection law — a UK adequacy decision for the country concerned, or the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

5. Cookies

Cookies are small files placed on your device. We use:

  • Strictly necessary cookies — set by Shopify to keep your basket, sign you in, and secure the checkout. The site cannot work without these, and they do not need your consent.
  • Analytics and performance cookies — to understand how the site is used so we can improve it. These are only set with your consent.

You can accept or refuse non-essential cookies through the banner shown on your first visit, and you can change your mind at any time through your browser settings. Blocking strictly necessary cookies will stop the checkout working.

6. How long we keep it

  • Order and transaction records: six years after the end of the tax year they relate to, to meet HMRC requirements.
  • Account information: for as long as your account is open. Close it, or ask us to, and we delete it, apart from records we must keep under the point above.
  • Email correspondence: normally up to two years, unless it relates to an ongoing matter.
  • Cookie data: for the lifetime set out in the cookie, which varies.

7. Your rights

Under the UK GDPR you have the right to:

  • be told what we hold about you and get a copy of it;
  • have it corrected if it is wrong or incomplete;
  • have it erased, where we no longer need it and no legal obligation requires us to keep it;
  • restrict or object to our use of it, including any use based on legitimate interests;
  • portability — receive the data you gave us in a common machine-readable format;
  • withdraw consent at any time, where we relied on consent. This does not affect anything done before you withdrew it.

To exercise any of these, email boujeeluxury@yahoo.com. We respond within one month. There is no charge. We may ask you to confirm your identity before releasing information, so that we do not disclose your data to someone else.

8. Automated decision-making

We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you. Payment providers may run automated fraud checks as part of authorising a payment; if a payment is declined on that basis, contact your bank or card issuer.

9. Children

This shop is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us their information, email us and we will delete it.

10. Security

We use Shopify's hosted, encrypted platform, and access to customer information is limited to those who need it to run the shop. No system is completely secure, but we take reasonable steps to protect your information and will tell you and the Information Commissioner's Office if a breach requires it.

11. Changes to this policy

We may update this policy. The date at the top shows when it was last changed, and the current version always applies.

12. Complaints

If you are unhappy with how we have handled your personal information, please email us first at boujeeluxury@yahoo.com so we can put it right.

You also have the right to complain to the UK's data protection regulator: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk