Privacy policy

Last Updated: May 21, 2026

This Privacy Policy outlines how Botiqx ('the Site', 'we', 'us', or 'our') manages your personal data when you interact with our services, visit botiqx.com, or complete a purchase. We are committed to protecting your privacy, and we process all information in strict compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025

1. How We Collect Your Personal Information

We collect personal information from three main sources:

  • Information You Provide Directly: Contact details (name, email, phone), billing/shipping addresses, payment confirmations, and customer support history.
  • Information Collected Automatically: Usage data collected via cookies and similar technologies, including IP address, device type, browser information, and Site interaction patterns.
  • Information from Third Parties: Data from essential service providers like Shopify (our e-commerce platform), payment processors, and shipping partners to fulfil your orders.

2. Legal Basis for Processing

Under UK law, we rely on the following legal bases:

  • Performance of a Contract: To process, payment, and ship your orders.
  • Legitimate Interests: To improve our services, prevent fraud, and maintain site security.
  • Consent: For marketing communications (which you can withdraw at any time).
  • Legal Obligation: To comply with UK tax, accounting, and consumer protection laws.

3. Cookies

To provide you with a seamless shopping experience, Botiqx uses cookies to manage our website, remember your settings, and understand how our traffic flows. In accordance with ICO regulations, you have full control over non-essential cookies through our consent banner. Please be aware that opting out of certain cookies might impact some of the features and functionality of our store.

4. How We Share Personal Information

We do not sell your personal data. We only share information with trusted partners:

  • Service Providers: Such as Shopify, payment gateways (e.g., Stripe), and UK courier services.
  • Legal Requirements: If required by UK law or to protect our legal rights.

5. International Data Transfers

As a UK-based business, Botiqx primarily processes your information within the United Kingdom. In instances where data must be transferred internationally—for example, to Shopify’s secure servers in Ireland or the United States—we guarantee that all necessary legal protections are active. We utilise approved mechanisms, such as the International Data Transfer Agreement (IDTA) and Standard Contractual Clauses (SCCs), to ensure your data remains protected regardless of its location.

6. Data Security and Retention

We implement industry-standard security measures, including SSL encryption and PCI-DSS compliance. We retain your personal information only as long as necessary to fulfil your orders or comply with HMRC tax regulations (typically 6 years).

7. Your Rights (UK GDPR)

As a UK resident, you have the following rights:

  • Right to Access: Request a copy of the data we hold about you.
  • Right to Rectification: Ask us to correct inaccurate information.
  • Right to Erasure: Request the deletion of your data ("Right to be Forgotten").
  • Right to Restrict/Object: Limit or object to how we use your data.
  • Right to Data Portability: Receive your data in a machine-readable format.

8. Complaints

If you are unhappy with how we process your data, please contact us first at info@botiqx.com. If we cannot resolve your issue, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority (www.ico.org.uk).

Contact information

Any questions or just like to talk to us? Please don't hesitate to contact us via:

    Customer Service (Opening Hours):

    • Monday - Friday:  09:00 - 18:00 (GMT)
    • Saturday and Sunday:  10:00 – 16:00 (GMT)