Privacy Policy

We are committed to protecting and respecting your privacy.

This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

1. What Personal Data We Collect from You

We collect and process the following data about you:

when you shop with us in store, we process your payment card information;
when you make an online purchase, we collect and process transaction-based data which may include your payment card information, billing/delivery address, orders and receipts, email and telephone number;
when you shop with us, we may collect and process details of your transaction history and shopping preferences;
when you engage with us on social media;
when you comment on or review our products and services;
when you fill in any of our forms. For example, if an accident happens in one of our stores, we may collect your personal data in relation to the incident;
when you’ve given a third-party permission to share with us the information they hold about you;
when you use our shop which usually have CCTV systems operated for the security of both customers and us. These systems may record your image during your visit; and
details of your interactions with us in store or online.

2. How We Collect Personal Data

We collect personal data from you by the following means:

Information you give us. You may give us information about you by: entering into transactions, providing information in store, or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when:

you purchase goods in store or online;
search for a product;
participate in discussion boards or other social media functions;
enter a promotion; and
when you report a problem with our site.

The information you give us may include your name, address, e-mail address and phone number, debit or credit card information, personal description and photograph. Your image may be recorded on CCTV when you visit our store.

3. How We Use Your Personal Data

We may collect and process your personal data for several reasons including:

3.1 Consent

Where we have collected data with your consent, we will process such data in accordance with the consents that you have provided. For example:
Where you provide us with personal data for a specific purpose (such as complaints, claims, online transactions) we will process such personal data for that specific purpose.

3.2 Contractual Obligations

We may need your personal data to comply with our contractual obligations. For example, we will need to process personal data to deliver goods you have purchased online.

3.3 Legal Compliance

If required by law, we may need to collect and process your data. For example, we may need to process personal data to comply with our legal obligations to share data with law enforcement or to comply with an order from the court.

3.4 Legitimate Interest

We process your data for our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.

We will need to collect and process data in order to process any orders online. If we don’t collect your personal data during checkout, we won’t be able to process your order and comply with our legal obligations.

We may share personal data with Business partners, suppliers and subcontractors for the performance of any contract we enter into with them or you. For example, your details will need to be passed to a third party to deliver the product ordered online.

If you are looking to pay by debit or credit card in store or online, we will need to process your payment card data in order to complete the transaction. We process card payments in accordance with the Payment Card Industry Data Security standards.

Following a transaction, we may keep your details for a reasonable period afterwards in order to fulfil contractual obligations such as refunds.

3.4.4 Refunds and Complaints

We have to process personal data in order to respond to your queries, refund requests and complaints.

We may also keep a record of your queries, refund requests and complaints for the following purposes:

to inform our future communications with you;
to review whether there are any patterns regarding the complaints we receive, for example, quality issues with any particular products;
to be able to demonstrate how we dealt with your complaint;
to consider how we can improve our services based on your experience; and
in such circumstances, we will process your personal data in accordance with our contractual and legal obligations with you and our legitimate interest to provide you with good customer service.

3.4.5 Security

We have a legitimate interest to protect our customers, our business, our employees and our store from criminal and illegal activity such as fraud and theft. Therefore, we may process personal data as follows as part of our legitimate business interest:

Using your personal data to maintain, update and safeguard your online account.
Monitoring your browsing activity with us to identify and resolve any problems and protect the integrity of our websites.
Operating CCTV systems in our store which record images for security.
Processing payments and preventing fraudulent transactions.

If we discover any potential criminal activity, we will use personal data (such as CCTV footage, transaction monitoring, etc.) to investigate the potential criminal activity and, where appropriate, pass the details of such potential criminal activity to the police and other relevant regulatory authorities. For fraud management, we may share information about fraudulent or potentially fraudulent activity in our premises or systems with third parties such as law enforcement bodies and the relevant financial institutions.

We may also be required to disclose your personal data to the police or other enforcement, regulatory or Government body upon a valid request to do so. We assess such requests on a case-by-case basis whilst taking the privacy of our customers into consideration.

3.4.6 Updates On Law and Our Policies

We may update www.sarahwhiteboutique.co.uk with communications required by law or which are necessary to inform you about changes to our business and/or issues regarding our products. For example, we may contact you by email, post or text regarding updates to this Privacy Notice, product recall notices, and legally required information relating to your orders. These service messages will not include any promotional content and do not require prior consent. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.

4. Sharing your Data

We will not share your personal information with anyone else.

5. Storing your Personal Data

The data that we collect from you will not be transferred to, and stored at, a destination outside the European Economic Area ("EEA").

6. Managing your Personal Data

We will not process your personal data for marketing purposes.

In general, you can choose how we communicate with you, but there are certain communications which are necessary for the operation of this site or which we are required to send by law, and you cannot opt out of these.

7. How Long Is Personal Data Kept?

We will only keep personal data for as long as is necessary for the purpose for which it was collected.

At the end of that retention period, your data will either be deleted completely or anonymised.

When you place an order, we’ll keep the personal data you give us for seven years so we can comply with our legal and contractual obligations.

8. Your Rights

Under the Data Protection Laws, you have the following rights.

8.1 Access to Personal Data

You have the right to access information held about you. Your right of access can be exercised in accordance with the Data Protection Laws and is free of charge in most cases.

If you require access to the information we hold about you, please write to Sarah White Boutique Ltd, 28a Market Place, Bingham, Nottingham, NG13 8AN.

8.2 The correction of your personal data when incorrect, out of date or incomplete

You have the right to request that any information we hold be corrected if it is inaccurate. To ask for your information to be amended, please contact us at info@sarahwhiteboutique.co.uk.

8.3 The Right to Make a Complaint

If you do not consider that your data has been handled correctly by us or you are not happy with our response to any requests you have made regarding our use of your personal data, you have the right to make a complaint to the International Commissioner’s Office. Their contact number for complaints is 0303 123 1113.

Further details regarding making a complaint to the Information Commissioner’s Office can be found at https://ico.org.uk/concerns/ (please note that we are not responsible for the content of external websites).

9. Use of our Services by Children

Our website is not intended for the use of children under the age of sixteen. We ask that children do not provide personal information through our website. If we become aware that we have collected the information of a child, we will delete that information from our records.

10. Third Party Websites

Our site does not contain links to or from other websites.

11. Changes to this Policy

Any changes we may make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.

12. Contact

For the right to delete the use of your data contact us at info@sarahwhiteboutique.co.uk

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Sarah White Boutique Ltd, 28a Market Place, Bingham, Nottingham, NG13 8AN

3rd September 2025