Our Privacy Policy

Privacy Policy

This Privacy Policy explains how I collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services through my website https://www.minigeekboutique.com, which is hosted on Shopify.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other applicable UK data protection laws.

Cookies and Tracking Technologies

What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit websites. They help the website recognize your device and remember your preferences or actions, improving your browsing experience.

Which Cookies Do We Use?
At Mini Geek Boutique, we use the following types of cookies:

  • Essential Cookies: Necessary for the website to function properly, such as keeping your shopping cart saved.
  • Performance and Analytics Cookies: Help us understand how visitors use our site, allowing us to improve it (e.g., Google Analytics).
  • Marketing Cookies: Used to deliver relevant advertising and track ad effectiveness.

How We Use Cookies
We use cookies to:

  • Remember your preferences and settings
  • Analyze website traffic and usage patterns
  • Provide personalized content and advertisements
  • Enhance your overall experience on our site

Managing Cookies
You can control or disable cookies through your browser settings. Most browsers allow you to block or delete cookies, but some parts of our website may not function properly if cookies are disabled. You may also see cookie consent banners allowing you to accept or decline certain cookies.

For more information on managing cookies, please visit www.aboutcookies.org or consult your browser’s help documentation.

1. Information I Collect

To fulfil your order, I need to collect certain information from you. This includes:

  • Your name
  • Email address
  • Postal address
  • Payment information (processed securely via Shopify’s payment providers)
  • Order details (e.g., items purchased, any personalization or preferences)

You may also provide additional information for custom orders if you contact me directly.

2. Legal Bases for Collecting and Using Personal Information

Under UK GDPR, I rely on several legal bases to collect, use, and share your personal information, including:

  • Contractual necessity: to provide my services and fulfil your order.
  • Legal obligation: to retain records for tax, accounting, or legal purposes.
  • Legitimate interests: to improve my services, prevent fraud, and handle customer support — provided these interests are not overridden by your rights.
  • Consent: for marketing or newsletters, which you can withdraw at any time.

3. Information Sharing and Disclosure

I respect your privacy. I only share your information for very limited reasons, including:

  • Service providers: such as delivery companies (e.g., Royal Mail) or Shopify-integrated tools, to fulfil and ship your order.
  • Payment processors: your payment details are handled securely by Shopify and its payment providers. I do not see or store your full card details.
  • Compliance with laws: I may retain or share your information if legally required (e.g., by HMRC or a court).
  • Business transfers: in the unlikely event I sell or restructure my business, your data may be transferred as part of that transaction, in compliance with data protection law.

4. Data Retention

I retain your personal data only for as long as necessary:

  • To fulfil your order and provide customer support
  • To comply with legal and tax obligations (typically 4–6 years for accounting purposes)

Once your data is no longer required, it will be securely deleted.

5. International Data Transfers

My website is hosted by Shopify, which may store and process your data outside the UK. Where data is transferred internationally, Shopify and its service providers are required to implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to protect your personal information.

6. Your Rights

You have rights under UK data protection law, including:

  • Access: You can request a copy of the personal information I hold about you.
  • Rectification: You can ask me to correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): You can request deletion of your personal data in some circumstances.
  • Restriction: You may request limits on how I use your data.
  • Objection: You can object to certain types of processing, including direct marketing.
  • Data portability: You can request your data in a structured, machine-readable format in some cases.

To exercise any of these rights, please contact me using the details below. If you're unhappy with how I’ve handled your data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk.

7. Contact

For data protection purposes, I, Tracy Clarke, am the data controller.

If you have any questions or concerns, you can contact me at:
📧 Email: hello@minigeekboutique.com
📮 Post: Tracy Clarke, C/O 42 Victoria Road, Netherfield, Nottingham, NG4 2BF, UK