Privacy Policy

Last updated: 4 February 2026

1. Introduction

Welcome to HayleyHays Luxe Boutique (“we”, “our”, “us”).

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or make a purchase from us.

2. Information We Collect

We may collect and process the following data:

Personal information: name, billing address, shipping address, email address, phone number
Payment information: payments are processed securely by third-party providers (we do not store card details)
Order details: products purchased and order history
Technical data: IP address, browser type, device information, cookies
Marketing preferences: if you choose to receive emails or promotions

3. How We Use Your Information

We use your information to:

Process and deliver your orders
Communicate with you about purchases or enquiries
Improve our website and customer experience
Send marketing communications (only if you have opted in)
Meet legal and accounting requirements

4. Legal Basis for Processing

Under UK GDPR, we process your personal data where:

It is necessary to fulfil a contract (for example, completing your order)
You have given consent (such as subscribing to marketing emails)
We have a legal obligation
It is within our legitimate business interests

5. Sharing Your Information

We only share your data with trusted third parties when necessary, including:

Payment processors
Delivery and courier services
Website and e-commerce platforms (such as Shopify)
Accounting or legal service providers

All third parties are required to keep your information secure and confidential.

6. Cookies

Our website uses cookies to enhance functionality and improve user experience.

You can control or disable cookies at any time through your browser settings.

7. Data Security

HayleyHays Luxe Boutique takes appropriate measures to protect your personal data against loss, misuse, unauthorised access, or disclosure. Secure technologies are used for all transactions.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy and to comply with legal, accounting, or reporting obligations.

9. Your Rights

You have the right to:

Access the personal data we hold about you
Request corrections to inaccurate information
Request deletion of your data
Object to or restrict processing
Withdraw consent at any time

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us via the Contact Us page on our website.