Privacy Policy

Last updated: 2 april 2026

Introduction

CEMDUVIDA LIMITED takes the privacy and protection of the personal data of its customers and visitors very seriously. This Privacy Policy explains how we collect, use and protect your data when you browse london-boutique.uk (the "Website") or when you contact us.

This policy has been prepared in accordance with the UK General Data Protection Regulation (the "UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 ("PECR").

We may update this Privacy Policy from time to time, in particular to reflect changes in the law. Please check it regularly.

1. What is personal data?

Personal data means any information that can identify a living individual, directly or indirectly. Examples include a name, email address, postal address or IP address.

2. Who is responsible for your data?

The data controller is:

CEMDUVIDA LIMITED
Company number: 79443906
Registered office: 66 Chai Wan Kok Street, RM 1911A, Unit F, 19/F, Golden Bear Centre, Tsuen Wan, Hong Kong

Contact: info@london-boutique.uk

3. How do we collect your data?

We collect your data in three ways:

• Directly, when you give it to us: placing an order, creating an account, signing up to our newsletter or contacting customer service.
• Automatically, as you browse the Website, through cookies and similar technologies.
• Indirectly, through your interactions with our content on social media.

4. What data do we collect?

Depending on how you use the Website, we may collect:

• Identity and contact data: first name, surname, email address, postal address and telephone number.
• Order and payment data: purchase history, delivery details and the payment method used. Card details are encrypted and are never stored by us directly.
• Marketing data: whether you are subscribed to our newsletter and SMS communications.
• Browsing data: IP address, browser type, pages visited and time spent on the Website, collected through cookies.

Mandatory fields are marked on our forms. If you do not provide this information, some features of the Website may not be available to you. For example, you may not be able to complete an order.

5. Why do we process your data?

We process your data for the following purposes:

• Managing your account and orders: to create and manage your customer account, process your orders and payments, arrange delivery, handle returns and refunds, and send you invoices.
• Customer service: to answer your enquiries, keep you updated on your orders and deal with any complaints.
• Marketing (with your consent where required): to send you our newsletter and promotional offers by email or SMS, personalise your shopping experience and measure how well our advertising campaigns perform.
• Security and fraud prevention: to detect and prevent fraudulent payments and to keep your account secure.
• Legal obligations: to keep the accounting and tax records required by law.

6. What is our lawful basis for processing?

Each type of processing relies on one of the following lawful bases:

• Performance of our contract with you, for example processing your order.
• Your consent, for the newsletter, SMS and non-essential cookies.
• Our legitimate interests, such as security and improving our services.
• Compliance with a legal obligation, such as keeping invoices.

7. How do we protect your data?

The Website uses SSL/TLS encryption to protect your data in transit. Our payment providers, Shopify Payments and PayPal, are PCI-DSS compliant. We never store your full card details on our own systems.

If a personal data breach is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office (ICO) and, where required, inform the people affected, as the law requires.

8. Who do we share your data with?

Your data is treated as confidential. It may be shared with:

• our technical service providers, including Shopify, which hosts and runs our online shop;
• our logistics and delivery partners, so that your orders can be delivered;
• our payment providers, so that your transactions are processed securely;
• our customer relationship and marketing tools, including Klaviyo, which sends our email and SMS communications;
• any competent authority, where required by law.

Each of these providers is contractually required to comply with applicable data protection law.

9. How long do we keep your data?

We keep your data only for as long as necessary for the purposes described above:

• Customer account: until you ask us to delete your account.
• Orders: for as long as needed to process them, and then for the period required by law for accounting and tax records.
• Newsletter: until you unsubscribe.
• Browsing data: for the lifetime of the relevant cookie (see the Cookie Policy below).

After that, your data may be archived for the applicable statutory limitation period and then permanently deleted.

10. What are your rights?

Under the UK GDPR, you have the following rights over your personal data:

• Right of access: to confirm whether we process your data and to receive a copy of it.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to have your data deleted, subject to the exceptions set out in law.
• Right to restrict processing.
• Right to data portability: to receive your data in a structured, commonly used and machine-readable format.
• Right to object: to processing based on our legitimate interests, or to direct marketing.
• Right to withdraw consent: at any time. This does not affect processing carried out before you withdrew it.

To exercise any of these rights, please email info@london-boutique.uk. If we need to confirm your identity, we may ask you for reasonable proof of identity.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

11. Is your data transferred outside the United Kingdom?

Some of our service providers, including Shopify and Klaviyo, may process your data on servers located outside the United Kingdom. Where this happens, the transfers are protected by appropriate safeguards recognised under UK law. These include UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. They ensure your data receives a level of protection equivalent to that required in the UK.

---

Cookie Policy

What is a cookie?

A cookie is a small text file placed on your device when you visit the Website. It stores information about your browsing in order to improve your experience.

Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire or you delete them.

What types of cookies do we use?

• Strictly necessary cookies: these are essential for the Website to work, for example your shopping basket, your account login and security. They cannot be switched off.
• Functionality cookies: these remember your preferences, such as language and currency, to personalise your experience.
• Analytics cookies: these help us understand how the Website is used so we can improve its content and usability.
• Marketing and advertising cookies: these are used to show you relevant adverts on other websites and social media, based on your browsing.

In line with PECR, we only place non-essential cookies with your consent.

How can you manage cookies?

You can set your browser to accept or refuse cookies, or to alert you when a cookie is placed. Each browser handles this differently, so please check your browser's help menu for details.

You can also manage your preferences at any time using the cookie banner shown on your first visit to the Website.

Email tracking

We use Klaviyo to send our newsletters and marketing communications. With your consent, our emails may contain tracking technologies that measure open rates and link clicks. We use this to make our communications more relevant.

You can unsubscribe at any time using the unsubscribe link at the bottom of every email.

CemDuvida Limited, 66 Chai Wan Kok Street, RM 1911A, Unit F, 19/F, Golden Bear Centre, Tsuen Wan, Hong Kong