Privacy Policy

Legal

Boutique Kaotique Limited · Last updated January 2026

In this Privacy Policy
  • Who is the data controller?
  • What personal data do we collect?
  • How do we use your personal data?
  • Legal basis for processing
  • Who will process your data?
  • Data transfers outside the EU
  • How long do we keep your data?
  • Your rights
  • Security measures
  • Complaints
  • Changes to this notice
  • Legislative references
Intro

Welcome

At Boutique Kaotique we are committed to protecting and respecting your privacy. This notice describes what personal data we collect, how we will use that data and how we keep your data safe.

If you have a question not answered here, or would like more information about how we collect, use and store your personal data, please contact us at any time by emailing info@boutiquekaotique.com.

01

Who is the data controller?

The Boutique Kaotique website is owned and run by Boutique Kaotique Limited. For the purpose of the UK Data Protection Act 2018 and the General Data Protection Regulation 2016, the data controller for any personal data we hold about you is Boutique Kaotique Limited.

Should you have any queries about our use of your personal data, please email info@boutiquekaotique.com.

02

What personal data do we collect?

We collect and process only the data required to allow us to provide our services to you. This includes:

  • Purchase data — name, billing and delivery address, payment details, mobile number and email address to process and despatch your order.
  • Newsletter signup — your email address when you subscribe to BoKa news.
  • Account registration — name, email, password, country, date of birth and marketing preferences.
  • Customer care enquiries — additional data to help us resolve queries relating to your order, delivery or payment.
  • Browsing data — pages you visit and how you interact with them, including when you are logged into a registered account.
  • Marketing data — if you are a customer or have given consent, we collect data for direct marketing purposes.
  • Gift purchases — name, delivery address and contact details of the recipient.
  • Mobile usage — with your consent, IP address and mobile browsing data to improve our mobile service.
Customer care calls are recorded for training and fraud prevention purposes. Credit card details are not recorded as part of any call.
03

How do we use your personal data?

We collect and process your personal data for the following purposes:

  • To fulfil our contract with you — taking payment, shipping and delivery.
  • To provide relevant information about our products and services via marketing communications.
  • To help you use our website, including your shopping bag, wish lists and account features.
  • To improve the performance and promotion of our website.
  • To allow our Customer Care team to help you with queries and requests.
  • To send you important updates such as changes to our Terms & Conditions.
04

Legal basis for processing

Under data protection law we must have a valid reason for using your personal data. There are four valid reasons:

  • Contract — most data we collect is necessary to fulfil our contract with you, such as your billing address and email at the point of purchase.
  • Consent — in certain circumstances we will ask for your permission, such as for marketing emails. You may withdraw consent at any time.
  • Legitimate interest — for example, ensuring our website content is presented effectively to you and your device. We must ensure our interests do not override yours and you are entitled to object.
  • Legal obligation — we may be required to use your data to meet a legal obligation, such as fraud detection or retaining financial data for statutory purposes.
05

Who will process your data?

Your personal data will be processed by trained and authorised internal staff of Boutique Kaotique Limited, and by rigorously assessed third parties who provide our services, including:

  • Banking operators and payment providers
  • IT and telematics service companies
  • Courier and delivery partners, including DHL International (UK) Limited
  • Marketing and social media organisations
  • Market research and data processing companies
  • Contact centre service providers

When we share your data with DHL for shipment purposes, both DHL and Boutique Kaotique Limited act as joint data controllers. Under some circumstances we may also be required to disclose data without your consent, for example to the police or courts for legal reasons.

06

Data transfers outside the EU

Some of our third-party processors may be located outside the European Union. Any transfer of your personal data to countries outside the EU that have not been assessed as offering adequate protection will only be performed:

  • Under specific agreements containing safeguard clauses approved by the European Commission (standard contractual clauses).
  • Where the transfer is necessary for the completion of a contract between you and Boutique Kaotique Limited.
  • For the management of your requests.
07

How long do we keep your data?

  • Purchase data — billing data retained until the end of the relevant accounting period, normally seven years from the billing date.
  • Payment details — retained until certification of payment and completion of related administrative formalities.
  • Marketing subscription — kept until you cancel your subscription or the service is terminated.
  • Marketing consent — considered current for five years from your last interaction. We will reduce contact frequency after six months of inactivity.
  • Browsing and analytics data — kept until you ask us to delete it.
  • Customer care data — kept for as long as you remain an active customer. Call recordings are kept for 6 months.
08

Your rights

Under UK and EU data protection law you have the following rights:

Access

Request a copy of the data we hold about you, free of charge once your identity is confirmed.

Correction

Ask us to correct any inaccuracies in your personal data. You can also update your details via My Account.

Withdrawal of consent

Withdraw your consent to marketing at any time by clicking "unsubscribe" on any email or contacting our team.

Objection

Object to our processing of your data on the basis of legitimate interest, with reasons for your request.

Deletion

Request the deletion of your personal data. We will cease processing promptly if the request is legitimate.

Portability

Receive a copy of your data in a standard format and, where technically possible, transfer it to a third party.

To exercise any of these rights, sign in to your account or contact our team at info@boutiquekaotique.com. We will ask you to confirm your identity before carrying out your request.

09

Security

We protect your personal data with technical and organisational security measures designed to prevent illegitimate or fraudulent use. These include pseudonymisation and encryption of your data, measures to ensure confidentiality and integrity, and the ability to restore data in the event of a breach.

When you place an order or access your account, we use SSL encryption to protect your information during transmission.

10

Complaints

If you believe that Boutique Kaotique Limited is processing your personal data in contravention of the law, you can file a complaint with the Information Commissioner's Office (ICO). More information is available at ico.org.uk.

11

Changes to this notice

We keep our Privacy Policy under regular review to reflect changes in our services and in privacy regulation. This Privacy Policy was last updated on January 23rd, 2026.

12

Legislative references

The processing of your personal data is carried out in compliance with Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018. Further information is available at ico.org.uk.

Get in touch

Questions about your data or this policy?

Contact our privacy team and we'll be happy to help.

info@boutiquekaotique.com