Privacy policy
Trinity Boutique ("we", "us", or "our") operates the website www.TrinityBoutiqueUk.com. This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from our store.
For the purpose of applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Trinity Boutique is the data controller of your personal information.
1. Personal Information We Collect
When you visit or make a purchase from Trinity Boutique, we collect certain information about you, including:
 Order Information: When you make a purchase or attempt to make a purchase, we collect details such as your name, billing address, shipping address, payment information (including credit/debit card numbers or PayPal details), email address, and phone number.
 Device & Usage Information: When you browse our store, we automatically collect information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device. We also collect information about the individual web pages or products you view, search terms, and how you interact with the site.
 Customer Support Data: Any additional information you choose to provide when contacting us via email for support or inquiry purposes.
2. How We Use Your Personal Information
We use the personal information we collect to operate our business and provide you with services, including:
 Fulfilling Orders: Processing payments, arranging for shipping, providing invoices/order confirmations, and handling returns or refunds.
 Customer Communication: Communicating with you regarding your orders, answering inquiries, or providing customer support.
 Fraud Prevention: Screening orders for potential risk or fraud.
 Marketing (Where Consented): Sending you promotional communications or newsletters if you have opted in. You can opt out at any time using the unsubscribe link in our emails.
 Legal Compliance: Complying with applicable laws, regulations, or court orders.
3. Legal Basis for Processing (UK/EEA Users)
If you reside in the UK or European Economic Area (EEA), we process your personal data under the following legal bases:
 Contractual Necessity: To perform a contract with you (e.g., fulfilling and shipping your order).
 Legitimate Interests: To protect our business against fraud, improve our services, and maintain store security.
 Consent: Where you have explicitly agreed to receive direct marketing communications or cookie tracking.
 Legal Obligation: To comply with tax, accounting, and legal requirements.
4. Sharing Your Personal Information
We share your personal information with trusted third-party service providers to help us operate our business:
 Shopify: Our store is hosted on Shopify, which provides the e-commerce platform that allows us to sell our products to you. You can learn more about how Shopify uses your personal information at privacy.shopify.com.
 Payment Processors: Payment details are processed securely by payment gateways (e.g., Shopify Payments, PayPal). We do not store full payment card details on our servers.
 Delivery & Logistics Services: We share your name, shipping address, and phone number with delivery carriers (e.g., Royal Mail, Evri, or other couriers) solely to deliver your package.
5. International Data Transfers
Please note that your personal information may be transferred, stored, and processed outside the country you live in, including in Canada and the United States, where Shopify operates.
If we transfer your personal information out of the UK or European Economic Area (EEA), we rely on recognized legal transfer mechanisms, such as the European Commission’s Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), unless the country has been granted an adequacy decision.
6. Data Retention
When you place an order through Trinity Boutique, we will maintain your Order Information for our records unless and until you ask us to delete this information, subject to our legal and accounting record-keeping obligations.
7. Your Rights
If you are a resident of the UK or EEA, you have the following rights regarding your personal information:
 Right of Access: Request a copy of the personal information we hold about you.
 Right to Rectification: Request that we correct or update incomplete or inaccurate information.
 Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data under certain conditions.
 Right to Restrict or Object to Processing: Request that we stop or limit how we process your personal data.
 Right to Data Portability: Request a structured, machine-readable copy of your data to transfer to another provider.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request. You may also designate an authorized agent to make requests on your behalf; we will require proof of authorization before fulfilling an agent request.
8. Complaints
If you have any questions or complaints about how we process your personal data, please contact us first using the details below. If you reside in the UK and are unsatisfied with our response, you have the right to lodge a complaint with the UK data protection supervisory authority:
 Information Commissioner's Office (ICO): www.ico.org.uk
If you reside in the EEA, you can find a list of responsible supervisory authorities at edpb.europa.eu.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this page and update the "Last updated" date above.
10. Contact Us
For more information about our privacy practices, if you have questions, or if you would like to exercise your rights, please contact us:
 Email: trinityboutiqueuk@gmail.com
 Postal Address: N Jarrett Limited 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom
