Privacy Policy

Last updated: 3 September 2026

Booswear Limited operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Our store is powered by Shopify. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in respect of the collection, processing and disclosure of your personal information.

For the purposes of UK data protection law, the data controller is Booswear Limited, 29 Bridge Street, Morpeth, NE61 1PE, registered in England and Wales, company number 17356605.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read it and understand how your information is collected, used and disclosed.

Personal information we collect or process

When we use the term "personal information" we mean information that identifies, or can reasonably be linked to, you or another person. It does not include information collected anonymously or which has been de-identified so that it cannot identify or be reasonably linked to you. Depending on how you interact with the Services, we may collect or process:

Contact details including your name, business name, billing address, delivery address, phone number and email address.
Financial information including payment card details, transaction details, form of payment and payment confirmation. We do not see or store full card numbers — payments are processed by our payment providers.
Account information including your username, password, preferences and settings.
Transaction information including items you view, add to your basket or purchase, return, exchange or cancel, and your order history.
Artwork and personalisation details including logo and image files you upload or email to us, and any names, initials, job titles, numbers or other text you ask us to put on a garment. See "Artwork and names" below.
Communications with us including the content of emails, contact form submissions, phone calls and WhatsApp messages.
Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
Usage information including how and when you interact with or navigate the Services.

Where we get personal information from

Directly from you — when you create an account, place an order, upload artwork, or communicate with us.
Automatically through the Services — from your device when you visit our website, and through cookies and similar technologies.
From our service providers — where they collect or process personal information on our behalf.
From our partners or other third parties — for example payment and delivery providers confirming a transaction or a delivery.

How we use your personal information, and our lawful basis

Under UK data protection law we must have a lawful basis for each way we use your personal information. Our purposes and bases are:

Providing the Services and fulfilling your order — processing payment, preparing artwork, producing your goods, arranging delivery, handling returns and exchanges, managing your account and responding to your enquiries. Lawful basis: performance of our contract with you, or, where you are enquiring before ordering, our legitimate interests in responding to potential customers.
Improving the Services — understanding how our website and customiser are used so we can make them work better. Lawful basis: our legitimate interests in operating and improving our business.
Marketing and advertising — sending you marketing by email and, where relevant, showing you online advertising. Lawful basis: your consent, or our legitimate interests where we are contacting an existing customer about similar products and you have not opted out. You can withdraw consent or opt out at any time, and every marketing email contains an unsubscribe link.
Security and fraud prevention — authenticating accounts, providing secure payment, and detecting, investigating or acting on suspected fraudulent, unlawful or malicious activity. Lawful basis: our legitimate interests in protecting our business and customers, and compliance with our legal obligations.
Keeping business and accounting records — retaining records of orders, invoices and payments. Lawful basis: compliance with our legal obligations, including tax and company law.
Legal reasons — complying with applicable law, responding to valid legal process or requests from authorities, and establishing, exercising or defending legal claims. Lawful basis: compliance with our legal obligations and our legitimate interests in protecting our legal position.

Where we rely on legitimate interests, you have the right to object — see "Your rights and choices" below.

Artwork and names

Because we decorate garments to order, we handle two kinds of information that a typical shop does not.

Artwork you send us. Logo and image files you upload through our customiser or email to us are stored securely so that we can produce your order and so that you can reorder without sending them again. We keep them until you ask us to delete them, or until three years after your last order, whichever comes first.

Names and personalisation. If you ask us to put names, initials, job titles or numbers on garments — for staff uniforms, a team kit or an event — that text may be the personal information of people other than you. We process it only to produce your order, and we do not use it for marketing or share it with anyone other than the service providers who help us fulfil the order. If you supply other people's details, you are responsible for having a lawful basis to share them with us, and for telling those people that you have done so. We delete personalisation lists three years after the order, or sooner on request.

How long we keep your personal information

We keep personal information only as long as we need it. In practice:

Order, invoice and payment records — six years after the end of the financial year in which the order was placed, to meet UK tax and accounting requirements.
Account information — for as long as your account is open. If you close your account or ask us to delete it, we remove it, apart from what we must keep in our accounting records.
Artwork and personalisation details — as set out in "Artwork and names" above.
Marketing contact details — until you unsubscribe or withdraw consent, and then only a minimal record so that we know not to contact you again.
Enquiries that do not lead to an order — two years, so that we can pick up a conversation where it left off.
Website usage and analytics data — as set by the retention settings of the analytics tools we use, generally no more than 26 months.

How we disclose personal information

We may disclose your personal information in the following circumstances:

With service providers who act on our behalf, including: Shopify (our store and checkout platform), Vercel (website hosting and secure storage of artwork files), our payment providers, our delivery carriers, our email and customer support tools, our garment and transfer suppliers where a product is shipped directly, and our website analytics providers.
With business and marketing partners who provide marketing and advertising services. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. These partners use your information in accordance with their own privacy notices. You may direct us not to share information about you for targeted advertising — see "Cookies and similar technologies" below.
When you ask or consent, such as when we pass your address to a carrier to deliver your order, or when you use a social media or messaging integration such as WhatsApp.
With our affiliates or within our corporate group.
In connection with a business transaction such as a merger or insolvency, to comply with legal obligations, to enforce our terms or policies, or to protect or defend our rights or those of our users.

We do not sell your personal information.

Cookies and similar technologies

We use cookies and similar technologies to operate our website, remember your basket and preferences, understand how the site is used, and — where you agree — to measure and personalise advertising.

Cookies that are strictly necessary for the website to work, such as those that keep your basket and your session, are set without asking, because the site cannot function without them. Analytics and advertising cookies are only set where you have consented, and you can change or withdraw your choice at any time using the cookie settings on our website or your browser settings. Withdrawing consent will not affect cookies already set before you withdrew it, but you can clear those through your browser.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify, and with third parties who may be located in countries other than the one you live in, in order to provide and improve the Services.

To help protect, grow and improve our business, we use certain Shopify enhanced features which incorporate data obtained from your interactions with our store, other merchants and Shopify. In these circumstances Shopify is responsible for the processing of your personal information, including for responding to requests to exercise your rights in respect of that processing. To learn more, see the Shopify Consumer Privacy Policy, and you may exercise certain rights through the Shopify Privacy Portal.

Third-party websites and links

The Services may link to websites or platforms operated by third parties. If you follow a link to a site we do not control, you should review its privacy and security policies and terms. We are not responsible for the privacy or security of such sites, or for the accuracy or reliability of information on them. Information you provide in public or semi-public venues, including on third-party social platforms, may be viewable by others. Including a link does not by itself imply endorsement.

Children's data

The Services are intended for adults and are not directed at children. We do not knowingly collect personal information from anyone under 18 for the purpose of creating an account or placing an order. In the UK, a child must be at least 13 to consent to their information being processed on the basis of consent; where a child is younger, we require the consent of a parent or guardian.

We recognise that a customer may order garments personalised with the names of children, for example a school, club or youth team kit. In that case we process those names only to produce the order, as described in "Artwork and names", and the customer is responsible for having the appropriate permission to give them to us.

If you are the parent or guardian of a child who has provided us with personal information, please contact us using the details below and we will delete it.

Security and storage of your information

We take appropriate technical and organisational measures to protect your personal information, including encrypted connections to our website, access controls on the systems we use, and restricting access to order and artwork data to those who need it to fulfil your order.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Information you send us may not be secure while in transit, so we recommend you do not use unsecured channels to send us sensitive or confidential information.

International transfers

We may transfer, store and process your personal information outside the United Kingdom, including where our service providers such as Shopify and Vercel operate infrastructure in other countries.

Where we transfer personal information out of the United Kingdom, we rely on a recognised transfer mechanism, such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or a transfer to a country the UK Government has determined provides an adequate level of protection.

Your rights and choices

Subject to the exceptions and limitations in law, you have the following rights in relation to your personal information:

Access. To ask for a copy of the personal information we hold about you.
Rectification. To ask us to correct information that is inaccurate or incomplete.
Erasure. To ask us to delete personal information we hold about you, where we have no continuing lawful reason to keep it.
Portability. To receive a copy of certain personal information in a portable format, or ask us to transfer it to another organisation.
Objection. To object to our processing of your personal information where we rely on legitimate interests, and to object at any time to processing for direct marketing.
Restriction. To ask us to restrict our processing in certain circumstances, for example while we check the accuracy of information you have challenged.
Withdrawal of consent. Where we rely on consent, to withdraw it at any time. This will not affect the lawfulness of processing carried out before you withdrew it.
Marketing preferences. To opt out of promotional email at any time using the unsubscribe link in any marketing message. If you opt out we may still send non-promotional messages about your account or your orders.

To exercise any of these rights, contact us using the details below. We will respond within one month, as required by law, though we may extend this by up to two further months for complex requests and will tell you if we do. There is normally no charge. We may need to verify your identity before we act on a request. You may appoint someone to make a request on your behalf, in which case we will ask for proof that you have authorised them.

We will not treat you any differently for exercising your rights. To learn more about rights relating to data processed by Shopify, see privacy.shopify.com.

Complaints

If you have a complaint about how we handle your personal information, please contact us first using the details below and we will try to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at any time. You can reach the ICO at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the European Economic Area, you may instead complain to your local supervisory authority; a list is available from the European Data Protection Board.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date, and give notice where the law requires it.

Contact

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any of your rights, please contact us:

Booswear Limited
29 Bridge Street, Morpeth, NE61 1PE, United Kingdom
Email: hello@booswear.co.uk
Telephone: +44 (0) 7415 108665
Registered in England and Wales, company number 17356605

Booswear Limited is the data controller of your personal information for the purposes of UK data protection law.