📄 GDPR Privacy Policy – Mariposa Children’s Boutique

1. Introduction

At Mariposa Children’s Boutique, we respect your privacy and are committed to protecting your personal data. This privacy statement explains how we collect, use, and safeguard your information when you shop with us or use our website www.mariposachildrensboutique.com in compliance with the UK GDPR and EU GDPR.

2. Data We Collect

We may collect and process the following personal data:

  • Identity & Contact Data: name, email address, billing/delivery address, phone number.

  • Transaction Data: payment details (processed securely by third-party providers such as Shopify Payments, PayPal, or Klarna – we do not store card details).

  • Technical Data: IP address, browser type, device, cookies.

  • Marketing & Communication Data: your preferences in receiving newsletters, offers, and updates.

3. How We Use Your Data

We process your data only when necessary and in line with GDPR lawful bases:

  • To fulfil your order (contract).

  • To manage your account and customer service requests (legitimate interest).

  • To send you marketing communications, if you’ve consented (consent).

  • To comply with legal obligations (legal requirement).

4. Sharing Your Data

We only share data with trusted third-party service providers who support our business, including:

  • Shopify (website & e-commerce platform).

  • Payment processors (Shopify Payments, PayPal, Klarna).

  • Delivery companies (e.g., Royal Mail, DPD, DHL).

  • Analytics & Marketing tools (Google Analytics, Meta/Facebook Ads, Mailchimp/Klaviyo).

Your data is never sold to third parties.

5. Data Retention

We retain your data only as long as necessary:

  • Order and payment records: up to 6 years (legal/tax purposes).

  • Marketing data: until you withdraw consent or unsubscribe.

6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Object to processing (including marketing).

  • Request data portability.

  • Withdraw consent at any time.

To exercise your rights, email us at mariposachildrensboutique@hotmail.co.uk 

7. Security

We use secure server technology (SSL), encrypted payment systems, and restrict access to personal data to authorised staff only.

8. Contact

For any questions regarding your privacy, contact:
Data Controller: Mariposa Children’s Boutique
Email: mariposachildrensboutique@hotmail.co.uk 

If you are not satisfied with how your data is handled, you have the right to lodge a complaint with the ICO (Information Commissioner’s Office) in the UK.


🍪 Cookies Policy – Mariposa Children’s Boutique

Our website uses cookies to improve your browsing experience, analyse site traffic, and personalise content/ads.

What are cookies?

Cookies are small text files stored on your device when you visit our site. They help us remember your preferences and improve website performance.

Types of cookies we use:

  • Essential cookies – required for checkout, shopping cart, and secure login.

  • Performance cookies – Google Analytics to understand how visitors use our site.

  • Functional cookies – remember preferences such as location or currency.

  • Marketing cookies – used by third-party platforms (e.g., Meta/Facebook Ads, Google Ads) to show you relevant adverts.

Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect site functionality, including checkout.

When you first visit our site, you’ll see a cookie banner giving you the option to accept or adjust cookie settings in line with GDPR consent requirements.

Links to other websites
 
Mariposa Children’s Boutique may provide links to third party sites. Please be advised we do not control those websites, we ask you to review the privacy policies of these third party sites. Any information that is supplied on these sites will not be within our control and we cannot be responsible for the privacy policies and practices of these.
Our third party processors
We use a number of third parties to process personal data on our behalf.
Data Breaches & Retention
We will report any unlawful data breach of this website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities,  if it is apparent that personal data stored in an identifiable manner has been stolen.  Mariposa Children's Boutique will retain personal data we process on behalf of our customers for as long as needed to provide our services. We will retain this personal information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. The Data will be reviewed at least annually.  We will ensure we have your permission to use the data necessary for the fulfilment of services provided or in order to take steps to procuring further orders.
Contact Us
mariposachildrensboutique@hotmail.co.uk
Mariposa Children's Boutique 
Tel:  0776796618

Your Privacy Rights – California & US Customers

If you are a resident of California, you have additional privacy rights under the California Consumer Privacy Act (CCPA/CPRA):

  • Right to Know: You may request details about the personal information we collect, use, and disclose.

  • Right to Delete: You may request the deletion of personal information we hold about you, subject to certain exceptions (such as order records required by law).

  • Right to Opt-Out: You may opt out of the sale or sharing of your personal information. Note: Mariposa Children’s Boutique does not sell personal data.

  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, please email us at mariposachildrensboutique@hotmail.co.uk with the subject line Privacy Request – US.

If you are a US resident outside of California, we will still handle your request in line with best practices for transparency and fairness.

Shopify's Privacy Policy  https://www.shopify.com/es-es/legal/privacy/consumers