This policy explains how we collect and use your personal data when you shop with us, visit our website or contact us, and the rights you have.

Who we are

The Cowboy Boot Store is a trading name of BRIT COWBOY PRODUCTIONS LTD (registered in England and Wales, company number 15107826), 27 Mortimer Street, London W1T 3BL, United Kingdom. We are the data controller for the personal data described in this policy.

Contact us about your data at sales@thecowboybootstore.com or on +44 7476 604596.

The data we collect

• Order details: your name, delivery and billing addresses, email address, phone number, the items you buy and your order history.
• Account details: if you create an account, your login details and saved addresses. Passwords are stored in encrypted (hashed) form.
• Payment details: we take payment in cryptocurrency through our payment provider, Blockonomics. We keep the payment address, transaction ID and amount with your order, and any wallet address you give us for a refund. Transactions on a public blockchain are visible to anyone and can’t be deleted by us. We don’t take card payments.
• Messages: what you send us by email or phone, and our replies.
• Technical data: information your browser sends when you visit our website, such as your IP address, browser type and the pages you request. Our hosting and security providers use this to deliver the site and protect it from attack. To stop password guessing and misuse, we also count sign-in attempts, password resets, new accounts and orders from each address, and these counts are deleted after an hour at most.
• Marketing preferences: whether you’ve chosen to receive our emails.

How we use your data, and our legal basis

Purpose	Legal basis
Processing and delivering your order, handling returns and refunds	Performance of a contract
Running your account	Performance of a contract
Answering your questions	Legitimate interests (helping our customers)
Keeping tax and accounting records	Legal obligation
Protecting our website and preventing fraud	Legitimate interests (security)
Sending marketing emails	Consent, which you can withdraw at any time

We only send marketing emails if you’ve opted in. The opt-in box is never ticked in advance, and every email has an unsubscribe link.

Who we share your data with

We share personal data only with the service providers we need to run the shop, and only as much as they need:

• Website hosting: Ultahost, which hosts our website, and Cloudflare, which Ultahost uses to protect it from automated traffic. Cloudflare may run a small script in your browser to check whether a visit comes from a person, and may process technical data in the United States.
• Online shop platform and order management: WordPress and WooCommerce, running on our own hosting, where your account and order details are stored.
• Payment processing: Blockonomics.
• Delivery carriers: DHL. They receive your name, delivery address and, where needed, phone number or email for delivery updates.
• Email delivery for order confirmations: [to be confirmed].

We may also share data where the law requires it, for example with HMRC. We never sell your personal data.

International transfers

Some of our providers process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

How long we keep your data

• Order and accounting records: 6 years from the end of the financial year they relate to, to meet UK tax and accounting rules.
• Accounts: until you ask us to close your account. Order records are then kept as above.
• Messages: up to 2 years after the matter is resolved.
• Marketing preferences: until you unsubscribe. We then keep a record that you’ve unsubscribed, so we don’t email you again.

Your rights

Under UK data protection law you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in some circumstances;
• restrict or object to how we use your data;
• receive your data in a portable format;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email sales@thecowboybootstore.com. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Cookies

We use only the cookies our website needs to work, such as remembering what’s in your bag. See our Cookie Policy.

Children

Our website is for adults. We sell children’s products, but we don’t knowingly collect personal data from children under 13.

Changes to this policy

We’ll update this page if we change how we use personal data. The date at the top shows when it was last updated.