Our Privacy Promise
Your privacy is paramount to us. We promise to do everything that is within our power to ensure that your personal data is stored securely. We further promise that we will never sell your data, nor allow it to be used, by any third party other than those set out below which are necessary for the proper completion of your business with us, or as required by law enforcement agencies. Any data given to us will only be used for the purpose for which it is intended. We will never subscribe you to a mailing list without your consent, nor contact you again unless you have signed up to our Mailing List.
What personal data we collect
Orders
When you place an order on our Website we will collect your full name, address, email address, telephone number, and IP address of the device used.
Credit/Debit Card Details
Your credit or debit card details will be collected and passed on to our payment provider for processing who will then pass back to our server whether the payment attempt was successful or declined. Your card details will not be stored on our server or accessible by our site admins.
At checkout you will have the option to store your card details for future purchases. Again, this will not be stored on our server, only a “hash” which will connect your account to the details stored on Stripe’s servers.
Comments / Reviews
When visitors leave comments or reviews on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: automattic.com/privacy. If you have previously set up a Gravatar account, your profile picture may be visible to the public in the context of your comment.
Contact forms
If you use a form on this Website to contact us, your name, email address and any other information you may include will be stored securely on our web server and will be viewable by our site admins.
Cookies
If you leave a comment or review on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We use Google Analytics to study and understand what visitors are looking at on our site. This data is entirely anonymous and we are unable to identify you through this.
Who we share your data with
We will never share your data with any third party, except where required by law or for the proper processing of your business with us.
When placing an order with us, your credit or debit card details are passed to our payment processor, Stripe, and held securely there. You may find their Privacy Policy here: stripe.com/en-gb/privacy
When signing up to our Mailing List, your details are held securely with Mailchimp. Their Privacy Policy is here: mailchimp.com/legal/privacy
Visitor comments may be checked through an automated spam detection service.
How long we retain your data
If you leave a comment or review, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For customers that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
For customers who make a purchase through our Website, your personal information will be stored alongside your order details indefinitely for future reference.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Please contact us on enquiries@bona-boutique.shop in the first instance if you wish to request a report on what data we may hold.