Privacy Policy

Last updated: 07th October 2026

Bouji Bodycare ("Bouji Bodycare", "we", "us" or "our") runs the online shop at boujibodycare.com. This Privacy Policy explains how we collect, use and protect your personal information when you visit or buy from our website, join our waitlist, contact us or otherwise use our services (together, the "Services").

We are the controller of your personal information for the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. Where we deliver to the European Economic Area ("EEA"), the EU General Data Protection Regulation may also apply.

Our controller details are:

·         Name: Balanced Bodycare Ltd, T/A Bouji Bodycare, Registered in England, No: 13917841

·         Address: 14 Vernon Street, Derby, DE1 1FT, United Kingdom

·         Email: support@boujibodycare.com

·         ICO registration number: ZC268513

Please read this policy carefully. If you have any questions, email us at support@boujibodycare.com.

1. Personal information we collect

"Personal information" means information that identifies you or can reasonably be linked to you. It does not include information that has been made anonymous. Depending on how you use the Services, we may collect:

·         Contact details: your name, billing address, delivery address, email address and phone number.

·         Waitlist details: your first name, email address, the products you are interested in, how you heard about us, whether you are buying for yourself or as a gift, and your marketing consent choice.

·         Payment and transaction details: the products you view, add to your basket or buy, order amounts, delivery details and payment confirmations. Card payments are handled by Shopify Payments and its payment partners. We do not see or store your full card number.

·         Account details: if you create an account, your username, password, preferences and order history.

·         Communications: anything you send us when you contact customer care, for example about an order, a return or a question about a product.

·         Device and usage information: your IP address, browser and device type, pages you view, how you interact with the site and similar information. Where this is collected using non-essential cookies, we only do so with your consent (see section 7).

2. Where we get your personal information

·         Directly from you, when you place an order, join the waitlist, create an account or contact us.

·         Automatically, when you use the Services, through cookies and similar technologies (see section 7).

·         From our service providers, such as Shopify, our payment providers and Royal Mail, when they process information on our behalf (for example, payment confirmation or delivery tracking updates).

3. How we use your personal information and our lawful bases

Under UK data protection law we must have a lawful basis for each way we use your personal information. The table below explains what we do and why.

What we use your information for	Lawful basis
Processing and fulfilling your order, taking payment, arranging delivery with Royal Mail, handling returns, cancellations and refunds	Performance of a contract with you (or steps you ask us to take before entering into one)
Running your customer account	Performance of a contract
Responding to your messages and customer care requests	Performance of a contract, or our legitimate interests in helping you
Sending service messages about your order (confirmations, dispatch, delivery updates)	Performance of a contract
Adding you to our waitlist and telling you when products are available	Your consent
Sending marketing emails, offers and news	Your consent (you can withdraw it at any time)
Analytics and marketing cookies, and measuring the performance of our marketing	Your consent, given through our cookie banner
Essential cookies needed to run the site and your basket	Legitimate interests (strictly necessary cookies do not need consent)
Preventing fraud, keeping the Services secure and protecting our business	Our legitimate interests, and legal obligations where they apply
Keeping financial and tax records, and meeting other legal or regulatory duties	Legal obligation
Establishing, exercising or defending legal claims	Our legitimate interests
Improving our website, products and service (using aggregated information where possible)	Our legitimate interests

 

Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You can ask us for more information about this balancing, and you have the right to object (see section 10).

We do not use your personal information for automated decision-making that has legal or similarly significant effects on you.

4. Waitlist, marketing and how to unsubscribe

Our waitlist form asks for your first name, email address, the products you are interested in, how you heard about us and whether you are buying for yourself or as a gift. The form includes a marketing consent box, which is unticked by default. You must tick it yourself to join the waitlist and receive our emails, so that we only contact you if you have actively agreed.

We use your waitlist details to tell you about our launch, product availability, news and offers, and to understand which products people are most interested in.

You can withdraw your consent and stop receiving marketing at any time by:

·         clicking the "unsubscribe" link at the bottom of any marketing email; or

·         emailing support@boujibodycare.com with "Unsubscribe" in the subject line.

Unsubscribing will not affect service emails about any order you place, and it does not affect anything we did with your consent before you withdrew it. We will keep a minimal record of your email address on a suppression list so that we do not contact you again by mistake.

5. Who we share your personal information with

We do not sell your personal information. We share it only where needed to run our business and provide the Services:

·         Shopify, which hosts our online shop and provides our checkout, payments, customer accounts, forms and email tools (see section 6).

·         Payment providers, including Shopify Payments and its payment partners, to process your payment and help prevent fraud.

·         Delivery partners, including Royal Mail (using Shopify Shipping and Royal Mail Click & Drop), so that your order can be delivered and tracked. For international orders, delivery and customs information may be shared with overseas postal operators and customs authorities.

·         Other service providers who support us, such as IT, email, analytics, advertising and professional advisers:

·         Marketing and advertising partners, but only where you have accepted marketing cookies or otherwise given consent, to measure and show relevant advertising.

·         At your direction, for example if you ask us to send a gift to someone else, or you use a social media login or share a link.

·         Business transactions, if we sell, merge or restructure our business, in which case your information may pass to the new owner, who must use it in line with this policy.

·         Legal and regulatory authorities, where the law requires us to, or where it is needed to protect our rights, our customers or others (for example, to prevent fraud).

Our service providers may only use your personal information on our instructions and must keep it secure.

6. Our relationship with Shopify

Our shop is hosted on Shopify, which collects and processes personal information about your use of the Services so that it can provide and improve them. Information you submit to us may be shared with Shopify and other parties, including in countries outside the UK.

To provide enhanced features and keep the Services secure, Shopify may use personal information it collects when you visit our shop or other Shopify merchants' shops. For these purposes, Shopify is responsible for that processing. You can read how Shopify uses your personal information, and how to exercise your rights over it, in the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/app-users. Depending on where you live, you can also make requests about personal information Shopify holds through the Shopify Privacy Portal at https://privacy.shopify.com/en.

7. Cookies

Cookies are small files stored on your device when you visit a website. Our site uses:

·         Essential cookies, which are strictly necessary for the site to work, for example to keep items in your basket, process checkout, keep the site secure and remember your cookie choices. These are always on, because the site cannot function properly without them.

·         Analytics cookies, which help us understand how visitors use the site (for example, which pages are popular) so we can improve it.

·         Marketing cookies, which help us and our advertising partners measure our marketing and show you more relevant adverts.

When you first visit our site, our cookie banner asks for your choice. We only set analytics and marketing cookies if you agree. You can change your mind at any time "clicking 'Cookie settings' in the website footer". You can also block or delete cookies through your browser settings, although some parts of the site may then not work.

Our shop runs on Shopify, which sets its own cookies. You can find out more about the cookies Shopify uses at https://www.shopify.com/legal/cookies.

8. Third-party websites and links

Our site may link to other websites or platforms, such as social media. We are not responsible for their privacy or security practices. Please read their privacy policies before sharing any information with them.

9. How long we keep your information and how we protect it

We keep personal information only for as long as we need it for the purposes in this policy. 

Information	How long we keep it
Order, payment and refund records	6 years from the end of the financial year in which the order was placed, to meet tax and accounting requirements
Customer account	Until you close your account, or after 3 years of inactivity
Customer care emails and messages	2 years from our last contact, or longer if needed for a claim
Waitlist and marketing details	Until you unsubscribe, or 2 years after you last engaged with our emails
Marketing suppression list (unsubscribed emails)	Kept for as long as needed to honour your request not to be contacted
Cookie consent records	12 months, then we ask again
Analytics data	26 months, or as set in the relevant tool

 

When we no longer need your information, we delete it or make it anonymous.

We use appropriate technical and organisational measures to protect your information, and Shopify provides security measures for our shop and checkout. No method of sending or storing information is completely secure, however, so please do not send us sensitive information by insecure channels.

10. Your rights

Under UK data protection law you have the right to:

·         Access the personal information we hold about you and receive a copy.

·         Correct information that is inaccurate or incomplete.

·         Delete your information in certain circumstances.

·         Restrict how we use your information in certain circumstances.

·         Object to our use of your information where we rely on legitimate interests, and to object at any time to direct marketing.

·         Data portability: to receive information you gave us in a structured, commonly used format, or ask us to send it to another organisation, where we rely on consent or contract and process it by automated means.

·         Withdraw consent at any time where we rely on consent, for example for marketing emails or cookies. This does not affect what we did before you withdrew it.

·         Manage your communication preferences, including unsubscribing from marketing emails at any time (see section 4).

To exercise any of these rights, email support@boujibodycare.com. We may need to ask you to confirm your identity before we act on your request. We will respond within one month, which may be extended by up to two further months for complex requests (we will tell you if so). There is normally no charge. We will not treat you differently for exercising your rights.

For personal information that Shopify controls, you can also use the Shopify Privacy Portal at https://privacy.shopify.com/en.

11. Complaints

If you have a concern about how we use your personal information, please contact us first at support@boujibodycare.com and we will do our best to put things right.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at https://ico.org.uk/make-a-complaint/. If you live in the EEA, you can contact your local data protection authority.

12. Children

Our Services are not intended for children, and you must be 18 or over to buy from us. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has given us personal information, please email support@boujibodycare.com and we will delete it.

13. International transfers

We are based in the UK, but some of our service providers, including Shopify, may store or process your personal information outside the UK and the EEA, for example in Canada, the United States or the EU.

Where we, or our service providers, transfer your personal information outside the UK or EEA, we make sure it is protected by one of the safeguards required by law, such as:

·         a country that the UK (or, for EEA data, the European Commission) has recognised as providing adequate protection (an "adequacy" decision or regulations, including the UK–US Data Bridge where it applies);

·         for transfers from the UK, the International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the EU Standard Contractual Clauses, approved by the ICO; and

·         for transfers from the EEA, the European Commission's Standard Contractual Clauses (SCCs).

You can ask us for more information about these safeguards by emailing support@boujibodycare.com.

14. Changes to this Privacy Policy

We may update this policy from time to time, for example to reflect changes in our practices or the law. We will post the updated version on this page and change the "Last updated" date. If we make significant changes, we will let you know by email or a notice on our website where appropriate.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, or you want to exercise your rights, please contact us:

·         Email: support@boujibodycare.com

·         Post: Bouji Bodycare, 14 Vernon Street, Derby, DE1 1FT, United Kingdom

For the purposes of UK data protection law, Bouji Bodycare is the controller of your personal information.