Privacy Policy
Last Updated: November 2025
This Privacy Policy describes how we collect, use, and protect your personal data when you visit or make a purchase from our website (the “Site”). We comply with the General Data Protection Regulation (GDPR) for all visitors in the EU/EEA, as well as applicable international laws.
By using our Site, you consent to the practices described in this policy.
1. Data Controller
Under GDPR, the data controller is the business that determines how and why personal data is processed.
Data Controller Email:
Email: contact@blackwhiteboutique.com
If you have any questions about this policy or your data rights, please contact us at the email above.
2. Personal Data We Collect
We collect personal data in the following categories:
2.1 Information You Provide Directly
When you make a purchase, register an account, contact support, or subscribe to emails, you may provide:
-
Name
-
Email address
-
Billing and shipping address
-
Phone number (optional)
-
Payment details (processed securely by Shopify or third-party payment providers — we do not store full card information)
-
Order details
-
Communication history
-
Marketing preferences
2.2 Information Collected Automatically
When you browse our Site, we automatically collect:
-
IP address
-
Device information
-
Browser type and version
-
Pages visited
-
Referring links
-
Time spent on pages
-
Cookies and similar tracking technologies
(See Section 7 for details on cookies and consent.)
2.3 Information from Third Parties
We may receive information from:
-
Payment gateways (e.g., PayPal, Shopify Payments)
-
Advertising platforms (e.g., Meta, Google)
-
Shipping carriers
-
Shopify (e.g., fraud detection signals)
3. Legal Bases for Processing (GDPR Article 6)
We process your personal data under the following lawful bases:
Contract Performance
To process your order and deliver products, including:
-
Payment processing
-
Shipping
-
Customer communication
-
Order confirmations and updates
Legitimate Interests
To operate and improve our business, including:
-
Fraud prevention
-
Analytics and website improvement
-
Storage of minimal order history
-
Customer service
Consent
For:
-
Email marketing
-
Some cookies (non-essential)
-
Advertising personalization
Consent can be withdrawn at any time (see Section 9).
Legal Obligation
To maintain records for:
-
Tax and accounting compliance
-
Fraud investigations
-
Dispute resolution
4. How We Use Your Personal Data
We use your data to:
-
Process and fulfill orders
-
Provide customer support
-
Improve website functionality
-
Customize user experience
-
Send marketing communications (with consent)
-
Prevent fraud and comply with laws
-
Analyze traffic and performance
-
Manage your account
We do not sell your personal information.
5. How We Share Your Data
We may share your data with:
5.1 Service Providers (Processors)
Including:
-
Shopify (hosting, order management, checkout)
-
Payment processors
-
Shipping and fulfillment partners (including overseas suppliers in China for dropshipping)
-
Email marketing providers
-
Analytics and advertising services (only with proper consent for EU users)
-
Customer support platforms
These processors only access data as necessary to provide their services.
5.2 Legal Obligations
We may disclose information when required by:
-
Law
-
Court orders
-
Government or regulatory authorities
6. International Data Transfers
Because our store operates on Shopify and uses overseas suppliers, your data may be transferred to and processed in countries outside the EU/EEA.
Where this occurs, we rely on:
-
Shopify’s Standard Contractual Clauses (SCCs)
-
GDPR-compliant Data Processing Agreements
-
Additional safeguards and encryption
You may request more information on these safeguards by contacting us.
7. Cookies & Tracking Technologies
7.1 Essential Cookies
Required for site functionality, checkout, and security.
These cannot be disabled.
7.2 Non-Essential Cookies
Used for:
-
Analytics (e.g., Google Analytics)
-
Advertising (e.g., Meta Pixel, Google Ads)
-
Personalization
EU/EEA visitors must give explicit opt-in consent before these cookies load.
You can change or withdraw consent at any time via our cookie banner or browser settings.
8. Data Retention
We retain personal data only as long as necessary:
-
Order records: up to 7–10 years (for legal obligations)
-
Customer accounts: until deleted by the user
-
Marketing data: until you unsubscribe or withdraw consent
-
Analytics data: per provider policies (usually 26–38 months)
You may request deletion of your data at any time.
9. Your GDPR Rights
Under GDPR, you have the right to:
-
Access your personal data
-
Correct inaccurate information
-
Request deletion (“right to be forgotten”)
-
Restrict processing
-
Object to processing based on legitimate interests
-
Data portability (request a copy of your data)
-
Withdraw consent at any time
-
Opt out of marketing at any time
-
Opt out of certain cookies
To exercise these rights, email us at: contact@blackwhiteboutique.com
We may need to verify your identity before processing your request.
10. Right to File a Complaint
If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority.
A list of authorities can be found here:
https://edpb.europa.eu/about-edpb/board/members_en
11. Children's Privacy
Our Site is not intended for children under 16.
We do not knowingly collect data from minors.
If you believe we have collected such data, contact us and we will delete it promptly.
12. Third-Party Links
Our website may contain links to external websites.
We are not responsible for their content or privacy practices.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
The “Last Updated” date at the top reflects the latest revision.
Continued use of our Site constitutes acceptance of the updated policy.
14. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please reach out to us at:
contact@blackwhiteboutique.com