Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how Amina Boutique collects, uses and protects your personal information when you visit aminaboutique.shop, place an order, or contact us. We are committed to handling your information lawfully and transparently under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

1. Who we are

Amina Boutique is the controller of your personal information for the purposes described in this policy.

Address: 173 Beeston Rd, Leeds LS11 7AN, United Kingdom
Privacy contact: info@aminaboutique.shop
Phone: +44 7466 381570

2. Information we collect

Contact and order details: your name, email address, phone number, billing and delivery addresses, the items you order, order history and any returns or exchanges.
Account details: if you create an account, the details you use to sign in, your saved addresses and your order history.
Payment information: payments are handled by our checkout and payment providers. We receive confirmation of payment and limited details such as the payment method type, but we do not see or store your full card number.
Communications: messages you send through our contact form, by email or by phone, including any order number you give us.
Technical and usage information: your IP address, browser and device type, pages viewed, items added to your basket and similar information collected through cookies and similar technologies.
Marketing preferences: whether you have agreed to receive marketing emails from us.

3. How we use your information and our legal bases

To process and deliver your order, take payment, send order and dispatch emails, and handle returns, refunds and exchanges. Legal basis: performance of our contract with you.
To respond to your enquiries and provide customer service. Legal basis: our legitimate interests in helping customers, or performance of a contract where your enquiry relates to an order.
To run, secure and improve our website, including preventing fraud and keeping our systems secure. Legal basis: our legitimate interests in operating a safe, working online store.
To send marketing emails, only where you have opted in, or where the law otherwise allows us to contact existing customers about similar products and you have not opted out. You can unsubscribe at any time using the link in each email. Legal basis: consent, or our legitimate interests where the law permits.
To use non-essential cookies, such as analytics or advertising cookies. Legal basis: your consent.
To keep records and meet legal obligations, such as tax and accounting requirements and responding to lawful requests. Legal basis: legal obligation.

4. Who we share your information with

We share personal information only where needed for the purposes above:

Shopify, which hosts our online store, provides our checkout and supports our order management and customer emails. Shopify processes information on our behalf. Some Shopify features may also involve Shopify processing information for its own purposes; you can read more in the Shopify Consumer Privacy Policy.
Payment providers that process the payment method you choose at checkout. They use your information to process payments and prevent fraud.
Delivery services that deliver your order. We share your name, delivery address and, where needed for delivery updates, your email address or phone number.
Professional advisers and authorities, such as accountants, legal advisers, HM Revenue & Customs or law enforcement, where required by law or to protect our legal rights.

We do not sell your personal information.

5. Cookies

Our website uses cookies and similar technologies. Some are strictly necessary for the store to work, for example to keep items in your basket and to process checkout securely; these do not require consent. We ask for your consent before using cookies that are not strictly necessary, such as those used for analytics or marketing, and you can change your choice at any time. You can also control cookies through your browser settings.

6. International transfers

Some of our service providers, including Shopify, may process your information outside the United Kingdom, for example in Canada, the United States or the European Economic Area. Where this happens, we rely on the safeguards provided by UK law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum, to protect your information.

7. How long we keep your information

We keep order and transaction records for as long as needed to fulfil your order, handle returns and meet legal and tax requirements, which is generally six years after the end of the financial year in which the order was placed. We keep customer service messages for as long as needed to deal with your enquiry and any follow-up. If you have an account, we keep your account details until you ask us to close it. We keep marketing preferences until you unsubscribe, after which we keep a record of your opt-out so that we respect it.

8. Keeping your information secure

We use the security features of our platform and providers, and we limit access to personal information to what is needed. No online service is completely secure, so please avoid sending sensitive information such as card details by email.

9. Your rights

Under UK data protection law, you have the right to:

request access to the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your information in certain circumstances;
ask us to restrict how we use your information in certain circumstances;
object to our use of your information where we rely on legitimate interests, and object at any time to direct marketing;
receive your information in a portable format in certain circumstances; and
withdraw your consent at any time where we rely on consent. This does not affect processing that took place before you withdrew it.

To make a request, email info@aminaboutique.shop. We may need to verify your identity before we respond. We will respond within one month, unless the law allows us more time.

10. Complaints

If you have a concern about how we handle your information, please contact us first so that we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113.