DATA PROTECTION

DATA PROTECTION

1. Information on the Collection of Personal Data and Controller Details

1.1 We appreciate your interest in visiting our website https://boutiquemods.com/ (hereinafter “Website”). In this notice, we explain how we handle personal data when you interact with our Website. Personal data refers to all information that can identify you as an individual.

1.2 The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Boutique Mods
Email: support@boutiquemods.com

The controller is the person or legal entity that determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transfer of personal data (such as orders, inquiries, and login details), this Website uses SSL/TLS encryption. You can recognize an encrypted connection by the prefix “https://” and the padlock symbol in your browser.

2. Data Collection When Visiting the Website

When you use our Website for informational purposes only, we collect only the data transmitted by your browser to our server (server log files). This includes:

  • The page visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/referrer (the website you came from)

  • Browser used

  • Operating system used

  • IP address (anonymized where possible)

Processing is based on Article 6(1)(f) GDPR and our legitimate interest in ensuring Website stability, security, and functionality. This data will not be used for profiling. However, we may check server logs retrospectively if there are signs of unlawful use.

3. Cookies

We use cookies to make our Website functional and user-friendly. Cookies are small text files placed on your device.

  • Session cookies: automatically deleted when you close your browser.

  • Persistent cookies: remain on your device until they expire or are deleted manually.

  • Third-party cookies: may be placed by advertising or analytics partners.

Processing may be carried out under Article 6(1)(b) GDPR (contract performance) or Article 6(1)(f) GDPR (legitimate interest in Website optimization).

You can manage cookie preferences via your browser:

Please note that disabling cookies may limit certain Website functions.

4. Contact

If you contact us via email or a contact form, the data you provide (e.g., name, email, order number) is processed to handle your inquiry.

  • Legal basis: Article 6(1)(b) GDPR (contract-related requests) or Article 6(1)(f) GDPR (legitimate interest in responding).

  • Data is deleted once your inquiry is resolved, unless legal retention obligations apply.

5. Customer Accounts and Orders

When opening a customer account or placing an order, we collect personal data necessary for order processing:

  • Name

  • Billing and delivery address

  • Contact information (email, phone)

  • Payment details

Legal basis: Article 6(1)(b) GDPR (contract performance).

We retain data as required by tax and commercial law. Data is deleted after legal retention periods unless you consent to extended storage.

6. Payment Providers

We work with payment providers to process transactions securely:

  • PayPal (PayPal Europe S.a.r.l. et Cie, Luxembourg): Data may be transmitted for payment execution and credit checks. PayPal Privacy Policy

  • Shopify Payments/Stripe (where applicable): Payment data may be shared with banks or financial institutions as needed. Stripe Privacy Policy

Legal basis: Article 6(1)(b) GDPR.

7. Direct Marketing & Newsletters

7.1 If you subscribe to our newsletter, we will send promotional updates via email. We use a double opt-in process for your consent (Article 6(1)(a) GDPR). You may unsubscribe at any time via the link in each email.

7.2 If you have purchased from us, we may email you about similar products (Article 6(1)(f) GDPR). You may object at any time by contacting us.

8. Analytics and Online Marketing

We use analytics and marketing tools to improve our services and display relevant ads:

  • Google Analytics (with IP anonymization): Used for statistical analysis of Website use. Opt-Out Plugin

  • Meta (Facebook/Instagram) Pixel: For tracking ad performance and remarketing. Data is anonymous to us but processed by Meta for advertising.

Legal basis: Article 6(1)(a) GDPR (consent) or Article 6(1)(f) GDPR (legitimate interest in effective marketing).

9. Social Media

Our Website may include links or plugins from social platforms (e.g., Facebook, Instagram). These are implemented with privacy-friendly solutions (Shariff). No data is transmitted unless you actively click on the plugin.

10. Data Subject Rights

Under GDPR, you have the following rights:

  • Right to access (Article 15)

  • Right to rectification (Article 16)

  • Right to erasure (Article 17)

  • Right to restriction of processing (Article 18)

  • Right to data portability (Article 20)

  • Right to object (Article 21)

  • Right to withdraw consent (Article 7(3))

  • Right to lodge a complaint with a supervisory authority (Article 77)

To exercise your rights, contact: support@boutiquemods.com

11. Data Retention

We retain personal data only as long as required for legal, tax, or contractual obligations. Once retention periods expire, data is routinely deleted unless further processing is necessary.