Privacy Policy

This Privacy Policy explains how Boominessentials Limited (operating as Boomin’ Essentials) collects, uses, and protects your personal data when you visit our website or place an order with us. We process your data in accordance with the UK GDPR and the Data Protection Act 2018.

Last updated: June 2026

1. Who we are

Boominessentials Limited is the data controller responsible for your personal data. We are a private limited company registered in Scotland (Companies House SC833792), with our registered office at 6 Craigmount Grove, Edinburgh, EH12 8BJ.

For any data-protection enquiries, contact us at hello@boominessentials.co.uk.

2. Personal data we collect

We collect the following categories of personal data:

• Identity data: first name, last name, title, username.
• Contact data: billing address, delivery address, email address, telephone number.
• Transaction data: details about products you've purchased and payments to and from you.
• Technical data: IP address, browser type and version, time-zone setting, operating system, device identifiers.
• Usage data: information about how you use our website and services.
• Marketing data: your preferences in receiving marketing communications from us.

3. How we collect your data

We collect data through:

• Direct interactions — when you fill in forms, create an account, place an order, or contact us by email.
• Automated technologies — cookies, server logs, and similar technologies (see our cookie section below).
• Third parties — analytics providers (Google Analytics), payment processors (Stripe, PayPal), and delivery partners (Royal Mail, DPD).

4. How we use your data

We use your personal data on the following lawful bases under UK GDPR:

• Performance of a contract — to process your orders, deliver products, and handle returns or refunds.
• Legitimate interests — to maintain our business records, improve our service, and prevent fraud.
• Consent — to send you marketing communications where you have opted in.
• Legal obligation — to comply with UK tax law, anti-money-laundering regulations, and Companies Act requirements.

5. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us provide essential website functionality, analyse usage, and (where you've consented) deliver relevant marketing.

• Strictly necessary cookies — required for the website to function (e.g. shopping cart, login session).
• Analytical cookies — help us understand how visitors use our site (Google Analytics).
• Marketing cookies — used to show you relevant ads on other websites (only set if you opt in).

You can control cookie settings in your browser. Disabling cookies may affect site functionality.

6. Sharing your data

We may share your personal data with the following third-party processors, all of whom are bound by data-processing agreements:

• Payment processors — Stripe, PayPal, Klarna (for processing your payment).
• Delivery partners — Royal Mail, DPD, or other UK couriers (to deliver your order).
• Analytics providers — Google Analytics (for anonymous usage statistics).
• HMRC and other regulators — where required by UK law.

We never sell your personal data to third parties for marketing purposes.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Order records are retained for 6 years in line with UK tax and Companies Act requirements. Marketing-consent records are retained until you withdraw consent.

8. Your rights

Under UK GDPR, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right of rectification — you can ask us to correct any inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your personal data (subject to legal retention requirements).
• Right to restrict processing — you can ask us to limit how we use your data.
• Right to data portability — you can ask for your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email us at hello@boominessentials.co.uk. We will respond within one calendar month.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), access controls, and regular security reviews. However, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at hello@boominessentials.co.uk so we can try to resolve your concern.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this page periodically.

12. Contact

For any questions about this Privacy Policy or how we handle your personal data: