Last Updated: 29 January 2026
At Sandy’s Boutique (sandysboutique.co.uk), we are committed to protecting the privacy and security of our customers and site visitors. This policy explains how we collect, use, and protect your personal data.
1. Who We Are
Sandy’s Boutique is the “Data Controller” of the personal information you provide.
• Website: sandysboutique.co.uk
• Email: support@sandyboutique.co.uk
• Address: Our physical and registered office address is available on our Contact Page.
2. Information We Collect
We collect personal information when you interact with us, including:
• Identity Data: Name, title, and date of birth.
• Contact Data: Billing address, delivery address, email address, and phone number.
• Financial Data: Payment card details (processed securely via our payment providers; we do not store full card numbers).
• Technical Data: IP address, login data, browser type, and location (collected via cookies).
• Marketing Data: Your preferences in receiving marketing from us.
3. How We Use Your Information
We use your data under the following legal bases:
• Contractual Necessity: To process your order, deliver goods, and handle returns.
• Consent: To send you newsletters and promotional offers (which you can withdraw at any time).
• Legal Obligation: To comply with UK tax laws and financial reporting.
4. Data Sharing
We do not sell your data. However, we share your information with trusted third parties to run our store:
• Delivery Partners: (e.g., Royal Mail, DPD) to ship your clothing.
• Payment Processors: (e.g., Stripe, PayPal) to securely process payments.
• Professional Services: Website hosts and marketing platforms (e.g., Brevo) that help us run our site.
5. Cookies
Our website uses cookies to distinguish you from other users.
• Essential Cookies: Necessary for the cart and checkout to function.
• Analytics Cookies: Help us understand how you use the site so we can improve it.
• Marketing Cookies: Used to show you relevant ads on social media.
You can manage your cookie settings through your browser or our on-site cookie banner.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and partners who have a business need to know.
7. Your Legal Rights
Under UK GDPR, you have the right to:
• Access: Request a copy of the data we hold about you.
• Correction: Request that we correct any inaccurate information.
• Erasure: Request that we delete your data (the “right to be forgotten”).
• Withdraw Consent: Opt-out of marketing emails at any time by clicking “Unsubscribe.”
To exercise any of these rights, please contact us at support@sandyboutique.co.uk.
8. Third-Party Links
Our website may include links to third-party websites (like Instagram or Facebook). Clicking on those links may allow third parties to collect data about you. We do not control these websites and are not responsible for their privacy statements.
9. Changes to This Policy
We may update this policy from time to time to reflect changes in the law or our business practices. Any updates will be posted on this page.