Privacy policy

BOOSTEX LTD is the controller responsible for personal information used to operate boostexltd.shop, respond to enquiries and administer direct purchases. This notice explains the purposes, legal bases and choices relevant to those interactions.

Contact and scope

Email support@boostexltd.shop with privacy questions or a request about your information. Identify the interaction or order concerned without sending passwords or complete payment credentials. You do not need to use special legal wording to make a request.

The address identifies our registered office. Please request the correct destination before sending goods back; it is not advertised as a showroom, collection point or walk-in returns counter.

Information associated with enquiries and orders

Information needed for a purchase includes your name, contact details, billing and delivery addresses, selected goods, order references and payment status. An enquiry can include correspondence, return details and photographs you choose to provide. Please limit photographs and attachments to information needed for the issue.

The payment service used at checkout processes the credentials required for that payment. Transaction references and payment status are used to administer orders, resolve payment questions and arrange refunds. Do not send full card numbers, security codes or banking credentials to customer service.

Website operation can involve technical information such as IP address, browser and device details, session information and security logs. Where account functionality is used, the information needed to provide and secure that account is processed. Optional tracking and marketing have separate rules; placing an order is not consent to every additional use.

Purposes and legal bases

Order handling, responding to a pre-purchase request, delivery and contractual customer support rely on performance of a contract or steps requested before entering one. Records needed to satisfy applicable accounting, tax and consumer duties rely on the relevant legal obligations.

Proportionate fraud prevention, service security, investigation of disputes and the establishment or defence of legal claims can rely on legitimate interests in protecting customers and the business, where those interests are not overridden by your rights. We must consider that balance and you may object to processing relying on it.

Where consent is required for marketing or device tracking, it must be obtained for the particular purpose. You may withdraw consent without affecting earlier lawful processing. Essential order messages are distinct from optional promotional communications.

Recipients and service providers

The services involved in a purchase can include the ecommerce platform, the selected payment processor, delivery and fulfilment services, business communications providers and professional advisers. We share information relevant to the task, such as recipient and address information for delivery, rather than treating each provider as entitled to the entire customer record.

For the Shopify store service, Shopify's privacy information describes its platform processing. A payment service may also act as an independent controller for fraud prevention or legal compliance; its own privacy notice applies to that processing. Information may be disclosed to authorities where a lawful duty requires it or to advisers where necessary to deal with a legal matter.

Etsy and information from other sources

If you buy from or message BoostexLtd on Etsy, Etsy supplies order and communication information relevant to the transaction. We use that information for fulfilment, support and related legal obligations. Etsy operates its own service under its privacy notice and controls. Website privacy preferences do not automatically alter settings in your Etsy account.

Delivery services and payment providers can supply delivery events, transaction status and information needed to resolve problems. We use those records for the associated order and dispute, subject to the applicable legal basis.

International processing

Some service providers may process information outside the United Kingdom. The legal requirements for a restricted transfer depend on the recipient and destination. An appropriate adequacy arrangement or other valid safeguard, such as approved contractual terms with the required UK provisions, is necessary where applicable.

You can ask us which destinations and safeguards apply to your information and how to obtain relevant safeguard information. A provider's global presence does not by itself establish which safeguard applies to every transfer.

Retention

Retention depends on why the information is needed. Order and transaction information is retained for order administration and applicable accounting, tax and legal obligations. Support records are assessed against the enquiry, any unresolved complaint and the relevant period for a legal claim. Information subject to a specific preservation duty may need to be kept longer than an ordinary operational record.

Optional marketing data should not remain in active marketing use after an effective withdrawal or objection. A limited suppression record may be needed to respect that choice. Technical records and device storage have purposes and lifetimes separate from order records. You may ask for the retention period or criteria relevant to your information.

Your rights and choices

Depending on the circumstances, you can ask for access, correction, erasure, restriction or portability of personal information. You may object to processing based on legitimate interests and withdraw consent where relied upon. The right to object to direct marketing also covers related profiling.

Rights have conditions: for example, a legal record-keeping duty may prevent immediate deletion of a transaction record. We will explain any applicable limitation. We may request proportionate information to identify you and locate the records, particularly before disclosing personal information.

We handle requests within applicable legal timescales, normally one month, and explain any permitted extension or lawful pause. You can raise a concern with us or complain directly to the Information Commissioner's Office. Our internal process is not a prerequisite for contacting the ICO.

Required information and safe communication

We need sufficient contact, delivery and transaction information to fulfil an order. Without it we may be unable to complete that order. Optional marketing permission is separate. If an automated payment or security check appears to affect you incorrectly, contact us so the circumstances can be investigated with the relevant service.

Please protect your account and email access and avoid including unrelated sensitive information in messages. No online service can guarantee absolute security. Tell us promptly about suspected misuse involving an order or account.

Cookies and notice changes

Read our Cookies Policy for device storage and privacy choices. Any future changes to processing must have a proper legal basis; changing this notice does not supply consent. We update the notice when the relevant processing changes and provide additional information where required.