This policy explains how the women's clothing store at 513 London Road, Cheam, Sutton, England, SM3 8JR collects, uses, and protects your personal data.
This Privacy Policy describes how the women's clothing store located at 513 London Road, Cheam, Sutton, England, SM3 8JR (referred to throughout this document as "we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website, make purchases, contact us, or interact with our services in any way. We are committed to safeguarding your privacy and ensuring that your personal information is handled responsibly, transparently, and in full compliance with the General Data Protection Regulation (GDPR), the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
If you have any questions about this policy or wish to exercise your data rights, you may contact us at [email protected] or by telephone on +44 20 8643 2109. Our registered address for data protection correspondence is 513 London Road, Cheam, Sutton, England, SM3 8JR. Company Registration Number: 09876543. VAT Number: GB 821 4567 32.
We divide cookies used on this website into three distinct categories. Each category serves a different purpose, and your consent requirements vary accordingly.
Purpose: These cookies are strictly necessary for the core functionality of our website. They enable basic features such as page navigation, secure access to protected areas, session management, and remembering your cookie consent preferences. Without these cookies, the website cannot function properly.
Examples: session_id, csrf_token, cookie_consent_status
Consent required: No. Essential cookies are activated automatically when you visit our website because they are necessary for the site to operate.
Retention: Session duration or up to 12 months for preference storage.
Purpose: Analytics cookies help us understand how visitors interact with our website by collecting and reporting information about traffic patterns, user behaviour, and site performance. We use Google Analytics 4 to gather these insights, which allow us to improve the website experience for all visitors.
Examples: _ga, _ga_XXXXXXX, _gid, _gat
Consent required: Yes. Analytics cookies are activated only after you provide explicit consent through our cookie consent banner.
Retention: Up to 14 months.
Purpose: Marketing cookies are used for remarketing, personalised advertisement delivery, and conversion tracking. These cookies enable us to measure the effectiveness of our advertising campaigns and deliver advertisements that may be more relevant to your interests.
Consent required: Yes. Marketing and advertising cookies are activated only after you provide explicit consent.
Retention: Up to 540 days (Google Ads default).
Third-party ad serving: Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.
Advertising partners: We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.
Remarketing: We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.
YouTube and Display Network: Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.
Tracking technologies used on this website:
Advertising measurement: We use conversion tracking to understand which advertisements lead to actions on our website, such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.
Advertising and analytics technologies active on this site:
Opt out of personalised advertising:
You may opt out of personalised advertising at any time by visiting the following resources:
Opting out does not remove ads entirely. You will continue to see non-personalised advertisements.
Cookie preference management: You can manage your cookie preferences at any time by clicking the "Manage cookie preferences" link in our website footer, which will open our cookie consent panel where you can accept or reject each cookie category independently.
Our cookie consent banner presents three clear options when you first visit our website: "Accept All", "Reject Non-Essential", and "Manage Preferences". The banner does not activate analytics or marketing cookies until you expressly accept them. Your choice is stored in your browser's localStorage for 12 months. The banner is dismissible without accepting, in which case only essential cookies remain active. A direct link to this Privacy Policy is provided within the consent banner.
Consent statement:
By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.
Notice for EEA and UK users:
Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.
Withdrawal of consent: You may withdraw consent at any time by clicking "Manage cookie preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.
We share certain data with advertising partners for campaign delivery and measurement. The recipients and the categories of data shared are detailed below:
Data shared: cookie identifiers, conversion events, anonymised behavioural data, remarketing lists.
Governed by Google's Privacy Policy: https://policies.google.com/privacy
Data shared: pixel events, conversion data, custom audiences.
Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy
We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only and is not resold to unaffiliated third parties.
Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.
When you submit a contact form, request a styling consultation, subscribe to our newsletter, or register interest in our products or services, we collect the information you provide. This typically includes your full name, email address, phone number, fashion preferences, and the content of your message or enquiry.
Legal basis: Consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).
Retention: Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law or unless you request earlier deletion.
You may request deletion of your data at any time by contacting us at [email protected] or by writing to us at 513 London Road, Cheam, Sutton, England, SM3 8JR.
A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.
This website uses the following Google services:
Collects anonymised usage data, device information, and behavioural signals. IP anonymisation is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Records when a user completes a defined action (such as a form submission, call, or purchase) after clicking one of our advertisements. This data is used solely for measuring advertising campaign performance.
Allows us to show advertisements to previous visitors across Google's network, including the Google Display Network, YouTube, and Gmail. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
Deploys tracking tags on our behalf. No personal data is collected by Google Tag Manager itself; it acts as a container for the tags listed above.
Google's advertising products are governed by: https://policies.google.com/technologies/ads
This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:
We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.
Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy
To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/
This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full. Our women's clothing store at 513 London Road, Cheam, Sutton, England, SM3 8JR exclusively sells lawful women's fashion apparel and accessories.
The content of this website accurately represents the products and services advertised by our women's clothing store at 513 London Road, Cheam, Sutton, England, SM3 8JR. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at [email protected] or write to 513 London Road, Cheam, Sutton, England, SM3 8JR if you believe we have received data from a minor.
Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.
These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at [email protected] or by writing to our registered address at 513 London Road, Cheam, Sutton, England, SM3 8JR.
If you are located in the European Economic Area or the United Kingdom, you have the following rights under data protection law:
Right of Access (Art. 15)
Request a copy of the personal data we hold about you.
Right to Rectification (Art. 16)
Correct inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of your data ("right to be forgotten").
Right to Restriction (Art. 18)
Limit how we process your personal data.
Right to Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Right to Object (Art. 21)
Object to processing based on legitimate interest.
Right to Withdraw Consent (Art. 7.3)
Revoke your consent at any time without penalty or negative consequence.
To exercise any of these rights, email us at [email protected] or write to us at 513 London Road, Cheam, Sutton, England, SM3 8JR. We will respond within 30 days of receiving your request.
You also have the right to lodge a complaint with your local supervisory authority:
We may collect the following categories of personal data when you use our website or interact with our store at 513 London Road, Cheam, Sutton, England, SM3 8JR:
For each type of data processing, we rely on the following legal bases under the General Data Protection Regulation:
| Data Type | Legal Basis |
|---|---|
| Contact form data | Consent (Art. 6.1.a) and contract performance (Art. 6.1.b) |
| Newsletter subscriptions | Consent (Art. 6.1.a) |
| Analytics data | Consent (Art. 6.1.a) |
| Marketing and remarketing data | Consent (Art. 6.1.a) |
| Purchase and transaction data | Contract performance (Art. 6.1.b) |
| Security and fraud prevention | Legitimate interest (Art. 6.1.f) |
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The specific retention periods for each data category are:
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 2 years from date of submission |
| Newsletter subscription data | Until unsubscription, plus 1 year |
| Analytics data (Google Analytics 4) | 14 months |
| Marketing cookies (Google Ads) | Up to 540 days |
| Email communications | Duration of customer relationship plus 1 year |
| Server logs | 90 days |
| Cookie consent records | 3 years (audit requirement) |
| Purchase and transaction records | 6 years (HMRC legal requirement) |
Last Updated
15 January 2026
Effective Date
15 January 2026
Data Controller
Women's Fashion Boutique
Registered Address
513 London Road, Cheam, Sutton, SM3 8JR
Contact Email
Telephone
+44 20 8643 2109
Company Registration
09876543
VAT Number
GB 821 4567 32
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this policy, we will notify visitors via a prominent banner on our homepage a minimum of 14 days before the changes take effect. We encourage you to review this page periodically for the latest information on our privacy practices.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which your personal data is handled, please do not hesitate to contact us at [email protected], by telephone on +44 20 8643 2109, or in writing at 513 London Road, Cheam, Sutton, England, SM3 8JR.