Privacy policy

This Privacy Policy applies to all visitors, registered account holders, and customers who browse, shop, submit inquiries, or complete purchases on the Shopify-powered online store Boggbagk, located at https://boggbagk.shop. Our store retails greeting cards, handbags, keychains, food serving trays, bundle storage bags, fashion bags, decorative pendants, and protective phone cases for global consumers. This document fully discloses how we collect, store, use, share, secure, and erase your personal data, and aligns with Shopify merchant compliance standards, the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and other international data protection regulations. By accessing our website, submitting personal details, or placing an order, you fully consent to the data handling practices outlined in this policy.

1. Who We Are (Data Controller)

Boggbagk operates the online retail platform at https://boggbagk.shop and acts as the sole Data Controller for all personal information collected through the site. For all privacy-related requests, data subject rights inquiries, and policy clarification, contact our dedicated support team via info@boggbagk.shop. All communications will receive a formal response within 24 working hours from Monday to Friday.

2. Categories of Personal Information We Collect

We gather two core types of data when you interact with our store, with no hidden or unauthorized data capture:

2.1 Information You Voluntarily Submit

We collect these details when you create an account, fill out the contact form, complete checkout, send support emails, or sign up for marketing newsletters:
  • Full legal name, given name, and surname
  • Primary contact email address and optional phone number
  • Full shipping delivery address and billing address (street, city, region, postal code, country)
  • Order history, purchased product records (including handbags, keychains, phone cases, food trays, greeting cards, pendants, bundle bags), order numbers, payment transaction timestamps, and return/refund application logs
  • Messages, photos, and supporting documents you attach to customer service emails for damaged goods, exchange requests, or product consultations
  • Account credentials (hashed password only; raw passwords are never stored on our servers)
  • Marketing consent preferences (opt-in or opt-out status for promotional emails, discount alerts, new product launches)

2.2 Automatically Collected Technical & Behavioral Data

When you load any page on https://boggbagk.shop, our website and Shopify platform automatically record non-identifiable and semi-personal technical data through cookies, pixel tags, and analytics tools:
  • Device information: device model, operating system, browser type, screen resolution
  • Network data: public IP address, internet service provider details, geographic approximate location
  • Website behavior: pages viewed, product variants clicked, time spent on listings for bags, accessories, trays, greeting cards, click-through links, cart abandonment records, search keywords entered
  • Cookie and tracking consent status recorded via our site cookie banner

2.3 Payment Information Note

We never store full credit card, debit card, digital wallet, or bank account numbers on our store servers. All payment processing is handled via PCI DSS Level 1 certified third-party payment gateways integrated with Shopify. Only masked transaction IDs, payment confirmation status, and partial billing records are retained for order reconciliation.

3. Legal Bases for Processing Your Personal Data

We only process your information under legally valid grounds as defined by global privacy regulations:
  1. Contract Performance: To fulfill your online order, arrange product shipping, process returns, exchanges, and refunds for handbags, keychains, food trays, greeting cards, pendants, bundle bags, and phone cases, and provide post-purchase customer support.
  2. Legitimate Business Interest: To analyze website traffic for store improvement, prevent fraudulent orders, detect payment scams, optimize product catalog layout, resolve customer disputes, and send critical order update notifications.
  3. Explicit Consent: For sending optional marketing newsletters, personalized product recommendations, limited-time discount promotions, and targeted advertising. You may withdraw consent at any time without penalty.
  4. Legal Compliance: To retain transaction records for tax, accounting, customs, and mandatory regulatory reporting requirements applicable to cross-border e-commerce retailers.

4. Purposes We Use Your Collected Information

Every data collection activity serves one or more of the following transparent business goals:
  1. Complete order fulfillment: verify payment, coordinate product packaging, arrange international shipping, share delivery tracking numbers, resolve missing or damaged shipment issues for all store merchandise.
  2. Deliver customer support: respond to emails sent to info@boggbagk.shop regarding product specifications, sizing inquiries, return policy questions, shipping delays, and defective item resolutions.
  3. Prevent fraud and secure transactions: screen for fake orders, stolen payment credentials, and suspicious account activity to protect both customers and our business.
  4. Website optimization: analyze browsing patterns to adjust our selection of greeting cards, handbags, keychains, food trays, bundle bags, pendants, and phone cases, improve page loading speed, and streamline checkout workflows.
  5. Marketing communications (only with your opt-in consent): send email updates for new accessory arrivals, seasonal gift card designs, tray bundle promotions, exclusive discount codes, and flash sale reminders.
  6. Legal and administrative record-keeping: maintain order, billing, and return records to comply with tax laws, consumer protection rules, and dispute resolution processes.
  7. Personalize user experience: display relevant product suggestions matching your previously viewed bags, phone cases, or home goods while you browse our site.

5. Sharing & Disclosure of Your Personal Data

We do not sell, rent, or trade your personal identifiable information to unaffiliated third-party advertisers, data brokers, or unrelated retail brands under any circumstances. Limited data sharing only occurs with vetted service providers required to operate our store, all bound by strict data protection contracts:

5.1 Authorized Third-Party Service Providers

  1. Shopify Platform: Our store hosting, checkout, inventory, and account management system, which processes order data to maintain website functionality in accordance with Shopify’s global privacy standards.
  2. Payment Processors: PCI-compliant gateways handling secure checkout transactions (credit card, PayPal, digital wallet providers).
  3. Global Shipping & Logistics Partners: Courier companies receiving only your full shipping address, recipient name, and order item list to deliver purchased bags, keychains, food trays, greeting cards, pendants, bundle bags, and phone cases.
  4. Email Delivery Services: Platforms used to send order confirmations, support replies, and opt-in marketing newsletters to your registered email address.
  5. Website Analytics Tools: Anonymous browsing data shared with analytics providers to measure site performance, without revealing full customer names or delivery addresses.
  6. Fraud Detection Tools: Limited transaction data shared to identify and block fraudulent checkout attempts.

5.2 Mandatory Legal Disclosures

We may release your personal information if legally compelled:
  • In response to valid court orders, government regulatory requests, law enforcement subpoenas, or official customs clearance documentation requirements.
  • To protect our store’s legal rights, defend against commercial disputes, or prevent immediate harm to customers, staff, or third parties.
  • During a full or partial business transfer (merger, acquisition, asset sale), where customer data records transfer to the new business owner under identical privacy protection obligations.

6. Cookie & Tracking Technology Policy

Our website uses essential, functional, analytical, and marketing cookies, controlled via a visible cookie consent banner upon your first site visit:
  1. Strictly Necessary Cookies: Mandatory for basic site operation, cart storage, account login, checkout completion, and security protection; cannot be disabled without breaking core shopping functions.
  2. Functional Cookies: Save your browsing preferences, saved product favorites, and currency selection for repeat visits to https://boggbagk.shop.
  3. Analytical Cookies: Collect anonymous traffic statistics to understand customer interest in our greeting cards, handbags, keychains, food trays, bundle bags, pendants, and phone cases.
  4. Marketing/Targeting Cookies: Activated only with your explicit opt-in consent, used to display relevant product ads across external social media and search platforms.
You can adjust or revoke cookie consent at any time by clearing browser cookies or revisiting our cookie preference banner. We fully honor Global Privacy Control (GPC) opt-out signals sent by your web browser for cross-site tracking.

7. Data Retention Periods

We only retain your personal data for the minimum duration required to fulfill the original collection purpose, after which records are securely erased or anonymized:
  1. Active order and customer account data: Stored for 5 full years after your most recent purchase, to process potential returns, warranty inquiries, tax documentation, and post-order support requests.
  2. Marketing contact information: Retained until you submit an opt-out request to unsubscribe from promotional emails.
  3. Technical browsing and analytics data: Automatically anonymized and deleted after 12 months of collection.
  4. Mandatory financial transaction records: Kept for the legal tax retention period required by applicable regional financial regulations.
  5. If you submit a formal data deletion request via info@boggbagk.shop, we will permanently remove all your identifiable personal records within 30 working days, excluding data we are legally obligated to retain for accounting or regulatory compliance.

8. Security Measures to Protect Your Data

We implement multi-layered technical and administrative safeguards to prevent unauthorized access, leakage, alteration, or loss of your personal information:
  • End-to-end SSL/TLS encryption for all data transmitted between your device and https://boggbagk.shop during browsing and checkout.
  • Shopify’s enterprise-grade cloud secure server infrastructure with regular third-party independent security audits and PCI compliance certification.
  • Restricted staff access to customer data, with role-based permission controls and access logging for all internal store administrators.
  • Automated firewalls, malware scanning, and regular system security updates to block hacking and data breach attempts.
  • Secure permanent deletion protocols for all expired customer records and unused support message attachments.
No internet transmission or digital storage system can guarantee absolute 100% security; however, we maintain industry-standard protections and will notify affected users within 72 hours if a verified personal data breach occurs, as required by GDPR and CCPA regulations.

9. Your Legal Rights Over Personal Data

Depending on your country or state of residence, you hold the following enforceable data subject rights, all exercisable free of charge by emailing info@boggbagk.shop with your full name, registered order email, and supporting identity verification:
  1. Right to Access: Request a full copy of all personal data we hold linked to your customer profile, including order history, shipping records, marketing consent status, and automated browsing logs.
  2. Right to Rectification: Correct incomplete, outdated, or inaccurate personal details (misspelled name, wrong shipping address, invalid contact number).
  3. Right to Erasure ("Right to be Forgotten"): Submit a request to fully delete all your identifiable customer data, subject to exceptions for mandatory legal record retention.
  4. Right to Restrict Processing: Temporarily pause data processing for marketing, analytics, or order records while we verify corrections or resolve privacy disputes.
  5. Right to Data Portability: Receive your order and contact data in a machine-readable digital format to transfer to another retail service provider.
  6. Right to Object: Fully opt out of marketing email communications and analytical tracking at any time, with no adverse impact on your ability to place future orders on our store.
  7. Right to Withdraw Consent: Revoke any prior consent granted for marketing or tracking cookie processing instantly.
  8. California Residents (CCPA/CPRA Exclusive Rights): The right to opt out of limited cross-site data sharing for targeted advertising, the right to disclose categories of data collected/sold, and protection against discriminatory treatment for exercising privacy rights.
  9. EU/EEA/UK Residents (GDPR Exclusive Right): File a formal complaint with your local regional data protection authority if you believe we have violated applicable privacy regulations after contacting our support team for resolution.
We will respond to all valid data rights requests within 45 calendar days, with a clear written outcome delivered to your registered email address. Additional identity verification (such as matching your original order number) may be required to prevent fraudulent third-party data requests.

10. Cross-Border Data Transfers

Customer personal data collected at https://boggbagk.shop may be stored and processed on cloud servers located outside your resident country, including the United States and other international territories. For transfers of EU/UK resident data outside recognized adequate protection regions, we rely on European Commission Standard Contractual Clauses (SCCs) to enforce equivalent data security standards for cross-border data handling.

11. Policy Updates & Modifications

Boggbagk reserves the full right to revise, amend, or update this Privacy Policy at any time to reflect changes in our store operations, product lineup (including new lines of greeting cards, handbags, keychains, food trays, bundle bags, pendants, and phone cases), third-party service partnerships, or updated global privacy legislation. All policy revisions will be published on the dedicated Privacy Policy page at https://boggbagk.shop, with the "Last Updated" date at the top of this document adjusted to reflect the effective change date. For material, significant policy shifts that alter how we collect or share your personal data, we will post a prominent site-wide notification on our homepage and send an alert email to all registered customer accounts with active marketing consent. Your continued use of our website after an updated policy is published constitutes your acceptance of all revised privacy terms.

12. Contact Information for Privacy Queries

For all questions, concerns, formal data subject rights requests, policy clarification, or privacy-related complaints, contact our dedicated support channel:

Official Store Website: https://boggbagk.shop

Privacy & Customer Support Email: info@boggbagk.shop

All privacy inquiries will be prioritized and reviewed by our team during standard Monday–Friday business hours, excluding weekends and global public holidays.