BOUTIQUE YOUR BNB

Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Boutique Your BnB ("we", "us", "our") collects, uses, and protects your personal data when you visit our website, purchase our products, or engage with our services.

Boutique Your BnB is operated by Helen Winter, trading as Boutique Your BnB. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Business name: Boutique Your BnB

Operated by: Helen Winter trading as Coral Interiors

Contact email: [email protected]

Website: Helen-winter.com

For any questions about this policy or how we handle your data, please contact us at the email address above.

2. What Data We Collect

We may collect the following personal data from you:

• Name and email address — when you purchase a product, sign up to our email list, or contact us

• Billing address and payment information — when you make a purchase (note: payment details are processed securely by ThriveCart and we do not store card details)

• Business name — if provided at checkout

• Usage data — pages visited, time on site, and interactions (collected via cookies and analytics tools)

• Communications — emails, messages, or enquiries you send to us

• Community data — information you share inside our Skool community

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your purchases and deliver digital products

• To send you transactional emails relating to your order or account

• To send you marketing emails, newsletters, and updates — where you have given consent or we have a legitimate interest to do so

• To improve our website and services through analytics

• To respond to your enquiries and provide customer support

• To comply with our legal obligations

4. Legal Basis for Processing

We process your data on the following legal grounds:

• Contract — to fulfil a purchase or deliver a service you have requested

• Legitimate interests — to run and improve our business, and to send relevant marketing to existing customers

• Consent — where you have opted in to receive marketing communications

• Legal obligation — where we are required to retain data for tax or regulatory purposes

5. Email Marketing

If you purchase from us or sign up to our email list, we may send you emails about our products, services, and relevant content. You can unsubscribe at any time by clicking the unsubscribe link in any email we send.

We use Flodesk and Go High Level to manage our email list. Your data is stored on their servers in accordance with their own privacy policy.

6. Third Parties We Share Data With

We do not sell your personal data. We may share it with trusted third-party service providers who help us operate our business, including:

• ThriveCart — payment processing and checkout

• Skool — online community platform

• Google Analytics — website analytics

• Flodesk — email marketing

• Go High Level, Zapier

Each of these providers has their own privacy policy and data processing terms. We only share the minimum data necessary for them to provide their service.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Purchase records are retained for 7 years for tax and accounting purposes

• Email marketing data is retained until you unsubscribe or request deletion

• Enquiry and support communications are retained for 2 years

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right to access — you can request a copy of the data we hold about you

• Right to rectification — you can ask us to correct inaccurate data

• Right to erasure — you can ask us to delete your data (subject to legal obligations)

• Right to restrict processing — you can ask us to limit how we use your data

• Right to data portability — you can request your data in a portable format

• Right to object — you can object to processing based on legitimate interests, including direct marketing

• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at [your email address]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.

9. Cookies

Our website uses cookies to improve your experience and collect analytics data. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies — necessary for the website to function

• Analytics cookies — to understand how visitors use our site (e.g. Google Analytics)

• Marketing cookies — where applicable, to track the effectiveness of our advertising

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. All payment processing is handled by ThriveCart using industry-standard encryption.

However, no method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch:

Email: [email protected]

Website: Helen-winter.com

We aim to respond to all data-related enquiries within 30 days.

Boutique Your BnB · Operated by Helen Winter · UK-based business