Política de privacidad
Last updated: 5 October 2026
This policy explains what personal data Bootsplug collects, why, who we share it with, and your rights. It applies when you visit bootsplug.com, buy from us, sign up for emails, or contact us (including by email, chat, Instagram or WhatsApp).
1. Who we are
B Plug Ltd, trading as Bootsplug ("Boots Plug", "we", "us"), is the data controller for your personal data.
- Company number: 14564988, registered in England and Wales
- Email: support@bootsplug.com
We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). If you are in the EU, the EU GDPR may also apply.
2. What we collect
When you browse the site
- Device and browser details, IP address, rough location (country/region), time zone.
- Pages and products you view, searches, how you arrived at the site, and how you use it (clicks, scrolls).
- Cookie and similar identifiers (see section 7).
When you buy
- Name, email, phone number, billing and delivery address.
- Order details: what you bought, price, payment method, delivery choice.
- Payment details are handled by our payment providers. We don't see or store your full card number.
When you contact us
- Your messages and contact details, whether by email, website chat, Instagram, WhatsApp or phone.
- Order or return details you share with us.
When you sign up for marketing
- Email address (and phone number if you sign up for texts), your sign-up choices, and whether you open or click our emails.
We don't knowingly collect special category data (such as health data), and we ask you not to send it.
3. Why we use it, and our legal basis
| --- | --- |
|---|---|
| Take payment, deliver your order, handle returns, refunds and repairs | Contract with you |
| Answer your questions and give customer support | Contract, or our legitimate interests in helping customers |
| Run the site and essential cookies (cart, checkout) | Legitimate interests (these cookies don't need consent) |
| Analytics, heatmaps and session recordings to improve the site | Consent (via the cookie banner) |
| Advertising and retargeting (for example Meta and Google ads) | Consent (via the cookie banner) |
| Marketing emails and texts | Consent, or for existing customers, "soft opt-in" for similar products. You can unsubscribe at any time |
Legitimate interests means we have a fair business reason, and it does not override your rights. You can ask us how we balanced this.
4. Who we share it with
We only share what each provider needs. They act on our instructions unless stated.
- Shopify – runs our online store, checkout and Shop Pay. Shopify privacy
- Payment providers – Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay. PayPal and Klarna are also controllers of your data under their own policies. Klarna may run credit or identity checks if you choose to pay later.
- Couriers – Royal Mail (UK), DHL Express and FedEx Express (international). We share your name, address, phone number and email for delivery. For international orders, couriers and customs also receive order details for customs declarations.
- Klaviyo – sends our emails and texts, and stores sign-up and email activity.
- Tidio – website chat.
- Lucky Orange – heatmaps and session recordings of how visitors use the site (only with your consent). Payment card details are entered on Shopify's secure checkout and are not captured by these tools.
- Google – Google Analytics (site statistics) and Google Ads (measuring and showing ads). Only with your consent.
- Meta (Facebook/Instagram) – Meta pixel for measuring and showing ads (only with your consent). If you message us on Instagram or WhatsApp, Meta also processes those messages under its own policies.
- Shipping and marketplace tools – Royal Mail Click & Drop (labels), and Nembol, LitCommerce and Marketplace Connect (keeping our stock and orders in sync with marketplaces such as eBay).
- GoAffPro – tracks sales from our affiliate links.
- Professional advisers – our accountant, lawyers and insurers, where needed.
- Authorities – police, HMRC, courts or regulators, where the law requires it, or to protect our rights, property or safety, or to prevent fraud.
- Buyers of our business – if we sell or restructure the business, data may pass to the new owner under this policy.
We don't sell your personal data.
5. International transfers
Some providers store or process data outside the UK (for example Shopify in Ireland, Canada and the US, and other providers in the US). When this happens we rely on UK adequacy regulations, or on safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for more detail.
6. How long we keep it
- Order, invoice and payment records: 6 years after the end of the financial year they relate to, for tax and accounting law.
- Customer support messages: 2 years after the last contact.
- Marketing lists: until you unsubscribe. We then keep a minimal record so we don't contact you again.
- Analytics and recordings: up to 14 months.
- Cookies: see section 7.
After this we delete or anonymise the data.
7. Cookies and similar technologies
Cookies are small files stored on your device. We use:
- Essential cookies – make the cart, checkout, login, currency and security work. Set by Shopify. These don't need consent.
- Analytics cookies – Shopify analytics, Google Analytics and Lucky Orange, to understand how the site is used.
- Advertising cookies – Meta pixel and Google Ads, to measure and show ads.
Where the law requires it, we only use analytics and advertising cookies if you accept them. You can also block or delete cookies at any time in your browser settings.
We use your IP address to work out your country, so we can show prices in your local currency. The chosen currency is stored in a cookie.
A full list of Shopify's cookies is at shopify.com/legal/cookies. You can also block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site working.
Ad settings: Meta · Google · Google Analytics opt-out
8. Your rights
Under UK data protection law you have the right to:
- Access – get a copy of the data we hold about you.
- Rectification – have wrong or incomplete data corrected.
- Erasure – ask us to delete your data (we may need to keep some, for example tax records).
- Restriction – ask us to limit how we use your data.
- Portability – get your data in a usable format, or have it sent to another company.
- Object – object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent – at any time, where we rely on consent. This doesn't affect what we did before.
- Automated decisions – not to be subject to decisions made only by automated means that have a legal or similarly significant effect on you.
To use any of these rights, email support@bootsplug.com. We may ask you to confirm your identity. We reply within one month. It is usually free.
9. Automated decisions
We don't make decisions about you based only on automated processing that have a legal or similarly significant effect.
Shopify uses limited automated checks to prevent fraud, such as temporarily blocking IP addresses or cards linked to repeated failed payments. If you choose Klarna, Klarna may make automated credit decisions under its own policy.
10. Marketing
- We only send marketing emails or texts if you have agreed, or if you are an existing customer and didn't opt out (soft opt-in).
- Every email has an unsubscribe link. For texts, reply STOP.
- You don't need to sign up for marketing to buy from us.
11. Security
We use trusted providers and secure, encrypted connections (HTTPS). Access to customer data is limited to people who need it. No system is completely secure, but we take reasonable steps to protect your data.
12. Children
Our site is not aimed at children under 13, and we don't knowingly collect their data. If you think a child has given us personal data, email us and we will delete it.
13. Complaints
If you are unhappy with how we use your data, please email support@bootsplug.com first.
You can also complain to the UK data protection regulator, the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
If you live in the EU, you can also contact your local data protection authority.
14. Changes to this policy
We may update this policy. The latest version and date are always on this page. If changes are significant, we will tell you by email or on the site.
15. Contact us
Bootsplug (B Plug Ltd, company number 14564988)
Email: support@bootsplug.com