PRIVACY POLICY & PAYMENT POLICY
1. Payment Policy
Quirky Boutique Ltd. accepts all major credit/debit cards, as well as PayPal, Google Pay, and Apple Pay. Express checkout options redirect you to a secure connection provided by the respective payment gateway. All online transactions are encrypted via SSL/TLS protocol. We do not store or process raw payment card details on our servers.
2. Data Controller Information
Quirky Boutique Ltd. ("We", "Us", or "Our") is the Data Controller responsible for your Personal Data.
Website: www.quirkyboutique.uk
Company Registration / Address: Quirky Boutique Ltd., United Kingdom
Data Contact: privacy@quirkyboutique.uk
3. Types of Data We Collect
Identity & Contact Data: Name, billing address, delivery address, email address, and telephone number.
Transaction Data: Details about payments, orders, products purchased, and fulfilment tracking.
Technical & Usage Data: IP address, browser type/version, device identifier, time zone, page interaction, and diagnostic logs.
4. Legal Bases for Processing Data
We process your Personal Data under the following UK GDPR legal frameworks:
Performance of Contract: To process orders, manage payments, deliver goods via courier partners, and provide account functionality.
Legal Obligation: To retain transaction records for tax compliance and statutory accounting (e.g., HMRC audit rules).
Legitimate Interests: To analyse website traffic, maintain site security, detect fraud, and optimise customer support.
Consent: To send direct marketing communications where explicit opt-in has been granted. You may withdraw consent at any time.
5. Sharing Your Personal Data
We share relevant Personal Data only with essential third-party Data Processors under strict confidentiality terms:
Payment Gateways: PayPal, Apple Pay, Google Pay, and merchant processors.
Order Fulfilment: Postal services and courier networks (e.g., Royal Mail, DHL).
Technical Providers: Website hosting platforms, analytics vendors, and IT service providers.
6. International Data Transfers
If Personal Data is transferred outside the UK, we ensure adequate protection through approved transfer mechanisms, such as standard contractual clauses or UK Adequacy Regulations.
7. Data Retention
We retain Personal Data only as long as necessary to fulfil the purposes collected for:
Order & Financial Records: Retained for 6 years from the transaction date to satisfy UK legal and tax requirements.
Marketing Preferences: Retained until you opt out or withdraw consent.
8. Your Statutory Rights Under UK GDPR
You possess the following rights regarding your Personal Data:
Access: Request a copy of the data we hold about you.
Rectification: Correct inaccurate or incomplete information.
Erasure: Request deletion of data where legal retention grounds no longer apply.
Restriction & Objection: Object to or restrict specific processing operations.
Portability: Request transfer of your data to another organisation.
To exercise any right, contact us at hello@quirkyboutique.uk.
9. Regulatory Authority Complaints
You have the right to lodge a complaint at any time with the UK Information Commissioner's Office (ICO):
Website:
ico.org.uk Helpline: 0303 123 1113
10. Contact Us
For privacy inquiries or data requests, contact us via email at hello@quirkyboutique.uk or through our contact page at www.quirkyboutique.uk.