1. Who we are
Supreme Blessedness Boutique Limited, registered office 30 Malsmesmead, Llanrumney, Cardiff, United Kingdom. Privacy questions: info@sbbutiques.com or 07353 378639.
2. What we collect
- Orders: name, email, phone, delivery and billing addresses, items purchased, order value and history.
- Payments: handled entirely by Stripe. We never see or store full card numbers; we receive a payment confirmation, the last four digits and the card brand.
- Accounts: email, password (hashed by our authentication provider), saved addresses, wishlist and order history.
- Enquiries: the details you submit through the contact and wholesale forms, including business name and registration number for trade applications.
- Newsletter: your email address, the date you consented and the page you subscribed from.
- Boutique visits: appointment notes such as sizes, event dates and preferences, kept so we can serve you on the next visit.
- Technical: IP address, browser type and pages visited, collected through server logs for security and reliability.
3. Why we use it and our lawful basis
- To fulfil orders and appointments — performance of a contract.
- To respond to enquiries and trade applications — legitimate interests in running the business, or steps prior to a contract.
- To send order and dispatch emails — performance of a contract.
- To send marketing emails — your consent, which you can withdraw at any time via the unsubscribe link or by replying STOP.
- To register occasion purchases against an event so we do not sell the same style to another guest — legitimate interests, and it benefits you directly.
- To keep records for tax and hallmarking compliance — legal obligation.
- To prevent fraud and secure the site — legitimate interests.
4. Who we share it with
We share data only with providers that help us run the boutique, each under contract and processing on our instructions:
- Stripe — payment processing (card data is entered on Stripe’s secure pages).
- Supabase — secure hosting of our database and customer accounts.
- Resend — sending transactional and, with consent, marketing emails.
- Vercel — hosting of this website.
- Couriers (Royal Mail, DPD) — your name, address and phone number for delivery.
- Our alterations partner — your name, measurements and collection date when you request alterations.
- Professional advisers and authorities where the law requires.
We do not sell personal data. Some providers process data outside the UK; where they do, transfers are protected by the UK International Data Transfer Agreement or an adequacy decision.
5. How long we keep it
- Order and invoice records: 6 years after the tax year of purchase (HMRC requirement).
- Account data: while your account is open, then deleted within 90 days of closure.
- Enquiries: 24 months from the last contact, or longer if a trade account is opened.
- Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not email you again.
- Appointment notes: 3 years from your last visit.
6. Cookies
The site currently uses only strictly necessary cookies — to keep you signed in — and local browser storage to remember your bag and wishlist on this device. No analytics or advertising cookies are set. If we introduce analytics in future we will add a consent notice before any such cookie is placed. You can clear cookies and site data in your browser settings at any time; the bag and wishlist will reset if you do.
7. Your rights
Under UK GDPR you can ask us to access, correct, delete or restrict your data, object to processing based on legitimate interests, receive a copy in a portable format, and withdraw consent for marketing. Email info@sbbutiques.com and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
8. Children
Our products and website are intended for adults. We do not knowingly collect data from anyone under 16; if you believe a child has provided data, contact us and we will delete it.
9. Changes
We will post any changes to this policy here and update the date at the top. Significant changes will be emailed to account holders. See also our terms & conditions.