Legal

Privacy Policy

How we handle what you share with us.

Last updated 20 August 2026

This policy explains what personal information Laya Boutique collects when you visit or buy from this store, why we collect it, who we share it with, and the choices you have.

1. Information We Collect

Information you give us

  • Name, email address, phone number, billing and shipping addresses.
  • Order history, sizes, and any fitting or measurement notes you share with our atelier.
  • Account credentials, wishlist contents, and marketing preferences.
  • Messages you send us by email, contact form, or social media.

Information collected automatically

  • Device and browser type, operating system, screen size, and language.
  • IP address and approximate location derived from it.
  • Pages viewed, products viewed, referring site, and how you move through the store.
  • Cookie and similar identifiers, as described in section 6.

Information we do not collect

We never see or store your full card number. Payments are processed by our payment provider, who returns only a token and the last four digits to us.

2. Why We Use It

  • To fulfil your order: process payment, arrange delivery, handle returns and exchanges.
  • To provide client care: answer enquiries, manage appointments, and keep atelier records for repeat commissions.
  • To improve the store: understand which pieces and pages people engage with, diagnose faults, and prevent fraud.
  • To market to you: send newsletters and offers where you have consented, or where you are an existing customer and have not opted out.
  • To meet legal obligations: retain tax and transaction records for the period required by law.

3. Who We Share It With

We do not sell your personal information. We share it only with service providers who need it to operate the store: our e-commerce platform and hosting provider, payment processors, shipping carriers and customs brokers, email and SMS marketing platforms where you have subscribed, analytics providers, and professional advisers or authorities where we are legally required to disclose.

If our business is ever sold or merged, customer information may transfer as part of that transaction. We would tell you before it happened.

4. International Transfers

Some of our providers operate outside your country. Where information is transferred internationally, we rely on recognised safeguards such as standard contractual clauses or an adequacy decision covering the destination.

5. How Long We Keep It

  • Order and transaction records: seven years, for tax and accounting purposes.
  • Account and wishlist data: until you delete your account, plus a short grace period.
  • Marketing lists: until you unsubscribe, then a suppression record so we do not re-add you.
  • Support correspondence: three years.
  • Analytics identifiers: up to fourteen months.

6. Cookies

We use strictly necessary cookies to keep your bag and session working; these cannot be switched off. We also use analytics and marketing cookies, which run only where you have accepted them. You can change your choice at any time through the cookie settings link in the footer, or by clearing cookies in your browser.

7. Your Rights

Depending on where you live, you may have the right to request a copy of the information we hold about you, correct it, delete it, restrict or object to how we use it, receive it in a portable format, or withdraw consent. You also have the right to opt out of marketing at any time, and to complain to your local data protection authority.

To exercise any of these, contact us through the Client Care page. We will verify your identity and respond within thirty days. We will not treat you differently for exercising a right.

8. Children

This store is intended for adults. We do not knowingly collect information from anyone under sixteen. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Security

We use encryption in transit, restrict internal access to customer records on a need-to-know basis, and require our providers to maintain comparable standards. No system is perfectly secure, and we will notify you and the relevant authority without undue delay if a breach is likely to affect you.

10. Changes & Contact

We will post any changes on this page and update the date above. Material changes will be notified by email where we hold your address.

Questions about any of this? Write to privacy@layaboutique.com.